| #1 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | | | Text Domain Mismatch |
| #2 | WPC Admin Columns | 97 | | 26 | 1k+ | | | Direct Query |
| #3 | Greek Multi Tool – Greeklish Slugs, Permalinks & Transliteration | 39 | 160 | 80 | 1k+ | | | Unsafe printing function |
| #4 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 41 | 112 | 15 | 1k+ | | | Exception output is not escaped |
| #5 | SmartVideo – Video Player and CDN | 62 | 412 | 47 | 1k+ | | | Text Domain Mismatch |
| #6 | Payflex Payment Gateway | 35 | 180 | 61 | 1k+ | | | Text Domain Mismatch |
| #7 | WPC Order Tip for WooCommerce | 97 | | 36 | 1k+ | | | Non-prefixed global variable |
| #8 | Enhanced Ecommerce Google Analytics for WooCommerce | 25 | 909 | 1,506 | 2k+ | | | Non-prefixed global variable |
| #9 | Simple Link Directory – AI Powered | 25 | 133 | 424 | 2k+ | | | Non-prefixed global variable |
| #10 | Order Export for WooCommerce | 97 | | 31 | 2k+ | | | Missing Version |
| #11 | ThinkRank – AI SEO Plugin for WordPress: MCP, Metadata, Schema, XML Sitemaps, llms.txt & Search Console | 34 | 50 | 191 | 2k+ | | | Direct Query |
| #12 | Conekta Payment Gateway | 32 | 248 | 72 | 2k+ | | | Text Domain Mismatch |
| #13 | Pixelavo – Server Side Tracking & Pixel + AI Ads Tools | 90 | | 14 | 2k+ | | | Direct Query |
| #14 | WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More | 67 | 178 | 2,894 | 2k+ | | | Non-prefixed hook name |
| #15 | Optin Forms – Simple List Building Plugin for WordPress | 39 | 646 | 21 | 2k+ | | | Output is not escaped |
| #16 | Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist | 79 | 121 | 42 | 3k+ | | | Text Domain Mismatch |
| #17 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 302 | 58 | 3k+ | | | Text Domain Mismatch |
| #18 | Magic Login – Passwordless Authentication for WordPress – Login Without Password | 35 | 13 | 53 | 3k+ | | | Missing nonce verification |
| #19 | Zorem Local Pickup | 99 | 1 | 8 | 3k+ | | | Non-prefixed class |
| #20 | Watu Quiz | 27 | 1,091 | 1,013 | 3k+ | | | Output is not escaped |
| #21 | BotBlocker Security – Firewall & Bot Protection | 99 | | 6 | 3k+ | | | Non-prefixed constant |
| #22 | Connector for Gravity Forms and Google Sheets | 34 | 691 | 155 | 3k+ | | | Text Domain Mismatch |
| #23 | WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors | 24 | 168 | 584 | 3k+ | | | Non-prefixed class |
| #24 | CatFolders Document Gallery & PDF Library | 40 | 45 | 38 | 3k+ | | | Non-prefixed global variable |
| #25 | Tableberg – Simple Gutenberg Table Block | 98 | 3 | 4 | 3k+ | | | date date |
| #26 | Caddy – WooCommerce Side Cart & Free Shipping Bar | 100 | | 2 | 3k+ | | | trademarked term |
| #27 | Intranet & Private Site – All-In-One Intranet | 86 | | 11 | 4k+ | | | Input is not sanitized |
| #28 | Correios Automático – Rastreio, Frete, Etiqueta, Declaração e Devolução | 38 | 31 | 121 | 4k+ | | | Non-prefixed hook name |
| #29 | Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms | 48 | | 221 | 4k+ | | | Direct Query |
| #30 | WPC Product Options for WooCommerce | 38 | 57 | 182 | 4k+ | | | Non-prefixed global variable |
| #31 | WP Swiper | 100 | | 3 | 5k+ | | | trademarked term |
| #32 | ووسلام – همگام سازی ووکامرس و باسلام | 32 | 92 | 429 | 5k+ | | | Non-prefixed global variable |
| #33 | Bulgarisation for WooCommerce | 36 | 136 | 603 | 5k+ | | | Nonce verification recommended |
| #34 | miniOrange OTP Login, Verification and SMS Notifications | 99 | 5 | 1 | 5k+ | | | wp function not compatible with requires wp |
| #35 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 38 | 167 | 72 | 5k+ | | | Text Domain Mismatch |
| #36 | LearnPress – Prerequisites Courses | 89 | 6 | 4 | 6k+ | | | Output is not escaped |
| #37 | Create | 92 | | 340 | 6k+ | | | Non-prefixed hook name |
| #38 | FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | 37 | 35 | 65 | 6k+ | | | Database parameter is not escaped |
| #39 | EU/UK VAT Validation Manager for WooCommerce | 35 | 1 | 0 | 6k+ | | | Hidden files included |
| #40 | Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar | 24 | 977 | 2,178 | 7k+ | | | Non-prefixed global variable |
| #41 | Multibanco, MB WAY, Credit card, Apple Pay, Google Pay, Payshop, Cofidis Pay, and PIX (ifthenpay) for WooCommerce | 96 | | 68 | 7k+ | | | Non-prefixed function |
| #42 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 22 | 1,306 | 2,818 | 8k+ | | | Output is not escaped |
| #43 | ЮKassa для WooCommerce | 22 | 591 | 167 | 9k+ | | | Short PHP open tag found |
| #44 | Frontend Admin by DynamiApps | 23 | 5,946 | 3,231 | 9k+ | | | Text Domain Mismatch |
| #45 | Discount Rules and Dynamic Pricing for WooCommerce | 27 | 183 | 413 | 10k+ | | | Non-prefixed global variable |
| #46 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #47 | Podcast Player – Your Podcasting Companion | 38 | 18 | 157 | 10k+ | | | Non-prefixed global variable |
| #48 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 335 | 471 | 10k+ | | | Non-prefixed global variable |
| #49 | MotoPress Hotel Booking | 21 | 3,067 | 1,037 | 10k+ | | | Text Domain Mismatch |
| #50 | SureCookie – Cookie Consent Banner, Cookie Scanner & Script Blocking | 88 | 44 | 49 | 10k+ | | | Missing Arg Domain |