| #51 | One Click Demo Import | 38 | 22 | 84 | 1m+ | | Non-prefixed global variable |
| #52 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | Text Domain Mismatch |
| #53 | Regenerate Thumbnails | 82 | 10 | 9 | 1m+ | | Direct Query |
| #54 | Safe SVG | 98 | 7 | 4 | 1m+ | | Missing Arg Domain |
| #55 | AI Agent by SiteGround | 54 | 27 | 6 | 1m+ | | Exception output is not escaped |
| #56 | Speed Optimizer – The All-In-One Performance-Boosting Plugin | 36 | 45 | 96 | 1m+ | | Non-prefixed hook name |
| #57 | Security Optimizer – The All-In-One Protection Plugin | 35 | 40 | 82 | 1m+ | | Request data is not unslashed |
| #58 | SVG Support | 97 | 1 | 27 | 1m+ | | Non-prefixed global variable |
| #59 | Advanced Editor Tools | 41 | 143 | 84 | 1m+ | | Unsafe printing function |
| #60 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | | Non-prefixed global variable |
| #61 | ManageWP Worker | 22 | 507 | 565 | 1m+ | | Non-prefixed class |
| #62 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | Unsafe printing function |
| #63 | File Manager | 22 | 740 | 520 | 1m+ | | Unsafe printing function |
| #64 | WP Multibyte Patch | 39 | 24 | 55 | 1m+ | | Input is not sanitized |
| #65 | WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance | 56 | 5 | 769 | 1m+ | | Non-prefixed global variable |
| #66 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 252 | 566 | 1m+ | | Non-prefixed hook name |
| #67 | WP Super Cache | 25 | 800 | 989 | 1m+ | | Output is not escaped |
| #68 | Compliance by Hu-manity.co | 31 | 154 | 336 | 900k+ | | Missing nonce verification |
| #69 | Translate WordPress with GTranslate | 32 | 82 | 364 | 900k+ | | Non-prefixed global variable |
| #70 | Redux Framework | 93 | 222 | 0 | 900k+ | | Missing direct file access protection |
| #71 | W3 Total Cache | 25 | 617 | 1,345 | 900k+ | | Non-prefixed global variable |
| #72 | WooPayments: Integrated WooCommerce Payments | 30 | 177 | 298 | 900k+ | | Exception output is not escaped |
| #73 | Widgets for Google Reviews | 95 | | 340 | 900k+ | | Non-prefixed global variable |
| #74 | WPvivid — Backup, Migration & Staging | 25 | 899 | 1,461 | 900k+ | | Non-prefixed namespace |
| #75 | Autoptimize | 23 | 288 | 191 | 800k+ | | Output is not escaped |
| #76 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | | Non Singular String Literal Domain |
| #77 | Flamingo | 40 | 15 | 228 | 800k+ | | Nonce verification recommended |
| #78 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | Exception output is not escaped |
| #79 | Polylang | 26 | 36 | 564 | 800k+ | | Non-prefixed hook name |
| #80 | Smart Slider 3 | 23 | 261 | 268 | 800k+ | | Non-prefixed global variable |
| #81 | WooCommerce PayPal Payments | 37 | 179 | 101 | 800k+ | | Exception output is not escaped |
| #82 | Antispam Bee | 80 | 4 | 38 | 700k+ | | Nonce verification recommended |
| #83 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | Non-prefixed global variable |
| #84 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | Missing Translators Comment |
| #85 | Click to Chat – HoliThemes | 99 | 6 | 2 | 700k+ | | badly named files |
| #86 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 25 | 99 | 1,035 | 700k+ | | Non-prefixed global variable |
| #87 | Joinchat – Enhanced "click to chat" | 81 | 18 | 32 | 700k+ | | wp function not compatible with requires wp |
| #88 | GTM4WP – A Google Tag Manager (GTM) plugin for WordPress | 91 | 59 | 79 | 700k+ | | Non-prefixed global variable |
| #89 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | 22 | 409 | 236 | 700k+ | | Text Domain Mismatch |
| #90 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | Non-prefixed hook name |
| #91 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 66 | 51 | 690 | 700k+ | | Non-prefixed hook name |
| #92 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | 23 | 206 | 997 | 700k+ | | Non-prefixed hook name |
| #93 | The Events Calendar | 23 | 3,512 | 3,848 | 700k+ | | Text Domain Mismatch |
| #94 | User Role Editor | 43 | 117 | 145 | 700k+ | | Output is not escaped |
| #95 | WooCommerce Stripe Payment Gateway | 30 | 173 | 591 | 700k+ | | Non-prefixed hook name |
| #96 | Database Addon for Contact Form 7 – CFDB7 | 40 | 35 | 56 | 600k+ | | Nonce verification recommended |
| #97 | Simple Custom CSS and JS | 37 | 168 | 69 | 600k+ | | Output is not escaped |
| #98 | Easy Table of Contents | 99 | 4 | 4 | 600k+ | | Non-prefixed constant |
| #99 | Enable Media Replace | 24 | 214 | 276 | 600k+ | | Output is not escaped |
| #100 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | Missing Translators Comment |