| #1 | Gwolle Guestbook | 32 | 268 | 528 | 20k+ | 2026-06-20 | Output Not Escaped |
| #2 | Schema Engine AI – AI Schema Markup, Reviews & Rich Snippets for SEO | 97 | 55 | 0 | 10k+ | 2026-06-16 | wp function not compatible with requires wp |
| #3 | Hester Core | 27 | 253 | 103 | 10k+ | 2026-06-20 | Output Not Escaped |
| #4 | Currency Switcher for WooCommerce | 32 | 357 | 263 | 10k+ | 2026-03-16 | Text Domain Mismatch |
| #5 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | 2026-06-05 | Exception Not Escaped |
| #6 | Multiple Columns for Gravity Forms | 90 | 11 | 7 | 10k+ | 2022-09-12 | missing direct file access protection |
| #7 | Variation Images Gallery for WooCommerce | 96 | | 87 | 10k+ | 2026-06-16 | Non Prefixed Variable Found |
| #8 | Shortcake (Shortcode UI) | 35 | 9 | 39 | 10k+ | 2019-01-16 | Missing Unslash |
| #9 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,058 | 10k+ | 2026-05-19 | Non Prefixed Variable Found |
| #10 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | 2026-02-13 | Non Prefixed Hookname Found |
| #11 | WP Content Copy Protection | 35 | 76 | 11 | 10k+ | 2023-06-27 | Text Domain Mismatch |
| #12 | JetWidgets For Elementor | 55 | 99 | 274 | 10k+ | 2025-09-19 | Non Prefixed Variable Found |
| #13 | Affiliate Program Suite — SliceWP Affiliates | 25 | 1,275 | 2,081 | 10k+ | 2026-05-26 | Output Not Escaped |
| #14 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | 2026-05-26 | date date |
| #15 | Lightweight Accordion | 91 | 4 | 3 | 10k+ | 2025-12-07 | Non Prefixed Function Found |
| #16 | Widget Content Blocks | 98 | 5 | 1 | 10k+ | 2026-06-19 | Missing Translators Comment |
| #17 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | 2026-05-26 | Input Not Sanitized |
| #18 | Clicky Analytics | 33 | 166 | 92 | 10k+ | 2026-05-24 | Output Not Escaped |
| #19 | Meks ThemeForest Smart Widget | 79 | 12 | 4 | 10k+ | 2024-07-23 | Output Not Escaped |
| #20 | Bricksable for Bricks Builder | 80 | 1 | 76 | 10k+ | 2026-06-12 | Post Not In exclude |
| #21 | Ultimate Maps by Supsystic | 24 | 1,034 | 374 | 10k+ | 2026-05-31 | Non Singular String Literal Domain |
| #22 | WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping | 97 | 1 | 7 | 10k+ | 2026-05-18 | trademarked term |
| #23 | Maintenance Redirect | 38 | 244 | 132 | 10k+ | 2026-05-21 | Missing Arg Domain |
| #24 | Modal Window – create popup modal window | 40 | 4 | 170 | 10k+ | 2026-05-20 | Non Prefixed Variable Found |
| #25 | Disable WP Sitemaps | 99 | | 4 | 10k+ | 2026-04-17 | trademarked term |
| #26 | Shiprocket | 85 | 56 | 15 | 10k+ | 2026-05-20 | Text Domain Mismatch |
| #27 | ACF Field For CF7 | 99 | 1 | 0 | 10k+ | 2026-03-23 | outdated tested upto header |
| #28 | Polylang Duplicate Content Addon | 100 | | 2 | 10k+ | 2026-06-05 | Non Prefixed Class Found |
| #29 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | 2026-05-22 | Output Not Escaped |
| #30 | Announcer – Sticky Message Banner & Notification Bar | 41 | 110 | 27 | 10k+ | 2026-03-10 | Output Not Escaped |
| #31 | Password Strength Settings for WooCommerce | 89 | 17 | 6 | 10k+ | 2023-10-11 | Missing Arg Domain |
| #32 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | 2026-01-27 | Direct Query |
| #33 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | 2026-06-14 | Text Domain Mismatch |
| #34 | Featured Video Plus | 34 | 99 | 105 | 10k+ | 2017-11-28 | Non Prefixed Variable Found |
| #35 | WPS Menu Exporter | 40 | 47 | 22 | 10k+ | 2025-06-24 | Output Not Escaped |
| #36 | Swap Google Fonts Display: Improve Font Rendering & Performance | 99 | 1 | 1 | 10k+ | 2026-05-20 | mismatched plugin name |
| #37 | Genesis Custom Blocks | 90 | 7 | 22 | 10k+ | 2026-04-20 | Non Prefixed Function Found |
| #38 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,099 | 1,147 | 10k+ | 2026-06-19 | Output Not Escaped |
| #39 | MotoPress Hotel Booking | 21 | 3,061 | 1,037 | 10k+ | 2026-06-15 | Text Domain Mismatch |
| #40 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | 2026-04-02 | block api version too low |
| #41 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | 2026-05-26 | Echo Found |
| #42 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | 2026-04-23 | Text Domain Mismatch |
| #43 | Bulk remove posts from category | 95 | 2 | 5 | 10k+ | 2026-06-14 | date date |
| #44 | Bootstrap Blocks | 91 | 8 | 30 | 10k+ | 2026-05-23 | Non Prefixed Variable Found |
| #45 | Pantheon Advanced Page Cache | 91 | 10 | 6 | 10k+ | 2025-12-16 | Missing Unslash |
| #46 | Acme Demo Setup | 84 | 8 | 6 | 10k+ | 2025-04-18 | Non Prefixed Function Found |
| #47 | No Page Comment | 98 | 3 | 1 | 10k+ | 2025-11-17 | load plugin textdomain Found |
| #48 | Product Enquiry for WooCommerce | 39 | 33 | 206 | 10k+ | 2026-01-15 | Non Prefixed Variable Found |
| #49 | User Admin Simplifier | 91 | 56 | 17 | 10k+ | 2026-06-09 | Text Domain Mismatch |
| #50 | YITH WooCommerce Gift Cards | 24 | 436 | 1,534 | 10k+ | 2026-06-18 | Non Prefixed Variable Found |
