| #51 | One Click Demo Import | 38 | 22 | 84 | 1m+ | | | Non-prefixed global variable |
| #52 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #53 | Regenerate Thumbnails | 82 | 10 | 9 | 1m+ | | | Direct Query |
| #54 | Safe SVG | 98 | 7 | 4 | 1m+ | | | Missing Arg Domain |
| #55 | AI Agent by SiteGround | 54 | 28 | 6 | 1m+ | | | Exception output is not escaped |
| #56 | Speed Optimizer – The All-In-One Performance-Boosting Plugin | 36 | 45 | 96 | 1m+ | | | Non-prefixed hook name |
| #57 | Security Optimizer – The All-In-One Protection Plugin | 35 | 40 | 86 | 1m+ | | | Input is not sanitized |
| #58 | SVG Support | 99 | | 7 | 1m+ | | | Non-prefixed global variable |
| #59 | Advanced Editor Tools | 41 | 143 | 84 | 1m+ | | | Unsafe printing function |
| #60 | Spectra Legacy – Gutenberg Blocks | 25 | 253 | 3,227 | 1m+ | | | Non-prefixed global variable |
| #61 | ManageWP Worker | 23 | 506 | 565 | 1m+ | | | Non-prefixed class |
| #62 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #63 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #64 | WP Multibyte Patch | 39 | 24 | 55 | 1m+ | | | Input is not sanitized |
| #65 | WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance | 56 | 5 | 780 | 1m+ | | | Non-prefixed global variable |
| #66 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 244 | 569 | 1m+ | | | Non-prefixed hook name |
| #67 | WP Super Cache | 25 | 800 | 989 | 1m+ | | | Output is not escaped |
| #68 | Compliance by Hu-manity.co | 32 | 153 | 341 | 900k+ | | | Missing nonce verification |
| #69 | Translate WordPress with GTranslate | 32 | 82 | 364 | 900k+ | | | Non-prefixed global variable |
| #70 | Redux Framework | 100 | | 0 | 900k+ | | | No open findings |
| #71 | W3 Total Cache | 23 | 307 | 678 | 900k+ | | | Non-prefixed global variable |
| #72 | Widgets for Google Reviews | 95 | | 344 | 900k+ | | | Non-prefixed global variable |
| #73 | WPvivid — Backup, Migration & Staging | 25 | 903 | 1,461 | 900k+ | | | Non-prefixed namespace |
| #74 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #75 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | | | Non Singular String Literal Domain |
| #76 | Flamingo | 40 | 15 | 228 | 800k+ | | | Nonce verification recommended |
| #77 | Google for WooCommerce | 37 | 352 | 138 | 800k+ | | | Exception output is not escaped |
| #78 | Polylang | 26 | 36 | 564 | 800k+ | | | Non-prefixed hook name |
| #79 | Smart Slider 3 | 23 | 261 | 268 | 800k+ | | | Non-prefixed global variable |
| #80 | WooPayments: Integrated WooCommerce Payments | 31 | 178 | 309 | 800k+ | | | Exception output is not escaped |
| #81 | WooCommerce PayPal Payments | 37 | 196 | 108 | 800k+ | | | Exception output is not escaped |
| #82 | Antispam Bee | 80 | 4 | 38 | 700k+ | | | Nonce verification recommended |
| #83 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 21 | 1,060 | 957 | 700k+ | | | Missing Translators Comment |
| #84 | Click to Chat – HoliThemes | 100 | | 2 | 700k+ | | | mismatched plugin name |
| #85 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 29 | 23 | 1,041 | 700k+ | | | Non-prefixed global variable |
| #86 | Joinchat – Enhanced "click to chat" | 95 | 17 | 23 | 700k+ | | | wp function not compatible with requires wp |
| #87 | GTM4WP – A Google Tag Manager (GTM) plugin for WordPress | 88 | 64 | 80 | 700k+ | | | Non-prefixed global variable |
| #88 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | 27 | 308 | 293 | 700k+ | | | Text Domain Mismatch |
| #89 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 5 | 136 | 700k+ | | | Non-prefixed hook name |
| #90 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 66 | 45 | 689 | 700k+ | | | Non-prefixed hook name |
| #91 | User Role Editor | 43 | 117 | 145 | 700k+ | | | Output is not escaped |
| #92 | WooCommerce Stripe Payment Gateway | 30 | 183 | 592 | 700k+ | | | Exception output is not escaped |
| #93 | Backuply – Backup, Restore, Migrate and Clone | 24 | 711 | 556 | 600k+ | | | Non-prefixed global variable |
| #94 | Database Addon for Contact Form 7 – CFDB7 | 39 | 35 | 57 | 600k+ | | | Nonce verification recommended |
| #95 | Simple Custom CSS and JS | 37 | 168 | 69 | 600k+ | | | Output is not escaped |
| #96 | Easy Table of Contents | 99 | 4 | 4 | 600k+ | | | Non-prefixed constant |
| #97 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #98 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP | 28 | 110 | 92 | 600k+ | | | Missing Translators Comment |
| #99 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 820 | 1,326 | 600k+ | | | Non-prefixed global variable |
| #100 | Header Footer Code Manager | 36 | 81 | 180 | 600k+ | | | Non-prefixed global variable |