| #51 | Monri Payments | 57 | 141 | 47 | 900 | | | Text Domain Mismatch |
| #52 | AidWP – Donation & Payment Forms (Stripe Powered) | 39 | | 193 | 800 | | | Non-prefixed global variable |
| #53 | Team Section Block – Showcase Team Members with Layout Options | 83 | 1 | 21 | 1k+ | | | Non-prefixed namespace |
| #54 | Xpro Theme Builder For Elementor – FREE | 82 | 14 | 28 | 10k+ | | | Missing direct file access protection |
| #55 | Blocks for ACF Fields — Display Custom Fields in the Block Editor | 98 | | 21 | 1k+ | | | Non-prefixed hook name |
| #56 | Carousel Slider Block for Gutenberg | 96 | 48 | 12 | 40k+ | | | Text Domain Mismatch |
| #57 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 10k+ | | | Text Domain Mismatch |
| #58 | Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More | 89 | 13 | 20 | 2k+ | | | wp function not compatible with requires wp |
| #59 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 36 | 1 | 574 | 4k+ | | | Request data is not unslashed |
| #60 | Daisycon prijsvergelijkers | 99 | | 13 | 400 | | | Non-prefixed class |
| #61 | WC Hide Shipping Methods | 88 | 5 | 5 | 20k+ | | | trademarked term |
| #62 | miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) | 99 | | 6 | 10k+ | | | Non-prefixed constant |
| #63 | Record of Consent Extension for Complianz | 100 | | 2 | 400 | | | Schema Change |
| #64 | Sticky Content – Make Any Section Sticky on Scroll | 82 | 24 | 9 | 400 | | | Text Domain Mismatch |
| #65 | Info Cards – Add Text and Media in Card Layouts | 81 | 7 | 25 | 2k+ | | | Non-prefixed namespace |
| #66 | CDEKDelivery | 46 | | 75 | 2k+ | | | Nonce verification recommended |
| #67 | MyParcel | 94 | 2 | 84 | 8k+ | | | Non-prefixed global variable |
| #68 | WPC Estimated Delivery Date for WooCommerce | 49 | 9 | 83 | 10k+ | | | Non-prefixed global variable |
| #69 | المنتور فارسی | 42 | 17 | 52 | 40k+ | | | Nonce verification recommended |
| #70 | Data Exchange for WooCommerce and 1C:Enterprise/1С:Предприятие | 35 | 1 | 2 | 1k+ | | | Hidden files included |
| #71 | WPC Product Size Chart for WooCommerce | 97 | | 19 | 2k+ | | | Non-prefixed class |
| #72 | WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | 99 | | 6 | 100k+ | | | trademarked term |
| #73 | PayU CommercePro Plugin | 37 | | 218 | 7k+ | | | error log error log |
| #74 | Redux Framework | 100 | | 0 | 900k+ | | | No open findings |
| #75 | Click to top | 72 | 22 | 8 | 2k+ | | | Output is not escaped |
| #76 | CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree | 41 | 121 | 96 | 50k+ | | | Unsafe printing function |
| #77 | Customer Email Verification for WooCommerce | 37 | 165 | 164 | 2k+ | | | Nonce verification recommended |
| #78 | ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More | 38 | 21 | 88 | 30k+ | | | Direct Query |
| #79 | Barion Payment Gateway for WooCommerce | 32 | 67 | 153 | 6k+ | | | Non-prefixed global variable |
| #80 | Prevent Files / Folders Access | 100 | | 0 | 1k+ | | | No open findings |
| #81 | ووسلام – همگام سازی ووکامرس و باسلام | 35 | 74 | 392 | 4k+ | | | Non-prefixed global variable |
| #82 | Animated Floating Chat Button | 95 | | 3 | 2k+ | | | Nonce verification recommended |
| #83 | ECPay Ecommerce for WooCommerce | 29 | 248 | 370 | 2k+ | | | Missing nonce verification |
| #84 | WP All Import – Import SEO Settings for Rank Math SEO | 42 | 18 | 44 | 7k+ | | | Nonce verification recommended |
| #85 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) | 29 | 92 | 898 | 10k+ | | | Request data is not unslashed |
| #86 | Blocks Animation: CSS Animations for Gutenberg Blocks | 99 | | 5 | 90k+ | | | trademarked term |
| #87 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #88 | EP Exporter for Contact Form 7 (CF7) | 86 | | 19 | 400 | | | Database parameter is not escaped |
| #89 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 41 | 115 | 14 | 1k+ | | | Exception output is not escaped |
| #90 | Shoppable Images (Lookbook) for WooCommerce | 86 | 21 | 31 | 6k+ | | | Missing direct file access protection |
| #91 | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 38 | 2 | 457 | 3k+ | | | Input is not sanitized |
| #92 | WP OAuth Server ( Login with WordPress ) | 96 | 26 | 9 | 1k+ | | | wp function not compatible with requires wp |
| #93 | Restrict for Elementor | 27 | 530 | 1,223 | 900 | | | Non-prefixed global variable |
| #94 | Subscriptions for WooCommerce | 30 | 1 | 1,190 | 10k+ | | | Non-prefixed global variable |
| #95 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 26 | 351 | 232 | 3k+ | | | Unsafe printing function |
| #96 | WordLift – AI powered SEO – Schema | 24 | 278 | 949 | 400 | | | Non-prefixed hook name |
| #97 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #98 | Image Gallery Block | 84 | 9 | 22 | 2k+ | | | Non-prefixed global variable |
| #99 | Affiliate Links – Link Cloaking and Management | 39 | 23 | 113 | 3k+ | | | Non-prefixed global variable |
| #100 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |