| #51 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,918 | 5,065 | 10k+ | | | Non-prefixed hook name |
| #52 | wpForo Forum | 17 | 4,033 | 2,922 | 20k+ | | | Unsafe printing function |
| #53 | Events Made Easy | 25 | 507 | 6,299 | 1k+ | | | Non-prefixed function |
| #54 | ERP: Complete HR, Recruitment, Accounting & CRM Suite with WooCommerce CRM Support | 21 | 829 | 5,966 | 5k+ | | | Direct Query |
| #55 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #56 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,230 | 1,464 | 7k+ | | | Output is not escaped |
| #57 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #58 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 10k+ | | | Output is not escaped |
| #59 | Ultimate Bootstrap Elements for Elementor | 25 | 6,326 | 122 | 6k+ | | | Text Domain Mismatch |
| #60 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,621 | 2,744 | 10k+ | | | Output is not escaped |
| #61 | Mapster WP Maps | 21 | 3,440 | 2,903 | 3k+ | | | Text Domain Mismatch |
| #62 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates | 22 | 2,167 | 4,175 | 7k+ | | | Non-prefixed global variable |
| #63 | MasterStudy LMS WordPress Plugin – for Online Courses and Education | 23 | 1,419 | 4,875 | 10k+ | | | Non-prefixed global variable |
| #64 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #65 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,211 | 3,994 | 600 | | | Non-prefixed global variable |
| #66 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #67 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #68 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #69 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 4,996 | 1,008 | 300k+ | | | Unsafe printing function |
| #70 | Mang Board WP | 24 | 1,249 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #71 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #72 | Church Admin | 23 | 1,643 | 4,202 | 900 | | | Direct Query |
| #73 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #74 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | | Output is not escaped |
| #75 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,831 | 3,878 | 10k+ | | | Non-prefixed global variable |
| #76 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,346 | 3,341 | 70k+ | | | Non-prefixed global variable |
| #77 | Booking Package | 25 | 1,703 | 3,977 | 10k+ | | | Missing nonce verification |
| #78 | School Management System – WPSchoolPress | 20 | 353 | 5,275 | 1k+ | | | Non-prefixed global variable |
| #79 | Essential Real Estate | 23 | 529 | 5,060 | 8k+ | | | Non-prefixed global variable |
| #80 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,248 | 3,338 | 10k+ | | | slow db query meta key |
| #81 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 900 | | | Text Domain Mismatch |
| #82 | WP Helper Premium | 24 | 3,908 | 1,515 | 1k+ | | | Text Domain Mismatch |
| #83 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #84 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,376 | 890 | 20k+ | | | Output is not escaped |
| #85 | BrikPanel — WooCommerce Dashboard, Sales Report, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 3,974 | 1,281 | 400 | | | Text Domain Mismatch |
| #86 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | | | Text Domain Mismatch |
| #87 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 872 | 4,301 | 7k+ | | | Non-prefixed global variable |
| #88 | Media Library Assistant | 23 | 1,144 | 3,943 | 70k+ | | | Nonce verification recommended |
| #89 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #90 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | | | Output is not escaped |
| #91 | Advanced Booking & Appointment System – Webba Booking Calendar | 23 | 1,613 | 3,295 | 2k+ | | | Non-prefixed global variable |
| #92 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | | Text Domain Mismatch |
| #93 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,469 | 3,333 | 10k+ | | | Non-prefixed global variable |
| #94 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #95 | Advanced Classifieds & Directory Pro | 22 | 1,229 | 3,511 | 2k+ | | | Non-prefixed global variable |
| #96 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #97 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,576 | 2,103 | 100k+ | | | Output is not escaped |
| #98 | Customer Reviews for WooCommerce | 24 | 2,206 | 2,443 | 80k+ | | | Output is not escaped |
| #99 | DMCA Protection Badge | 20 | 4,425 | 217 | 1k+ | | | Output is not escaped |
| #100 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,220 | 1,399 | 2k+ | | | Text Domain Mismatch |