| #1 | Redux Framework | 100 | | 0 | 900k+ | | No open findings |
| #2 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 252 | 566 | 1m+ | | Non-prefixed hook name |
| #3 | Featured Image with URL | 99 | 1 | 0 | 2k+ | | mismatched tested up to header |
| #4 | Shared Files – File Upload & Download Manager | 39 | 5 | 184 | 4k+ | | Nonce verification recommended |
| #5 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | | Non-prefixed global variable |
| #6 | WP Custom Login | 99 | 1 | 2 | 10k+ | | trademarked term |
| #7 | WooCommerce Stripe Payment Gateway | 30 | 173 | 591 | 700k+ | | Non-prefixed hook name |
| #8 | Ads.txt & App-ads.txt Manager for WordPress | 40 | 92 | 28 | 2k+ | | Output is not escaped |
| #9 | User Admin Simplifier | 89 | 106 | 32 | 10k+ | | Text Domain Mismatch |
| #10 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | Output is not escaped |
| #11 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | Non-prefixed global variable |
| #12 | Mercado Pago payments for WooCommerce | 33 | 618 | 63 | 100k+ | | Short PHP open tag found |
| #13 | Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More | 21 | 52 | 1,959 | 300k+ | | Non-prefixed global variable |
| #14 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | Non-prefixed global variable |
| #15 | Starter Templates by Gradient Themes | 83 | 27 | 7 | 3k+ | | Text Domain Mismatch |
| #16 | Lead Forensics | 93 | 1 | 5 | 5k+ | | Non-prefixed hook name |
| #17 | NIF (Num. de Contribuinte Português) for WooCommerce | 98 | 2 | 9 | 5k+ | | Non-prefixed constant |
| #18 | YITH WooCommerce Brands Add-On | 31 | 393 | 1,425 | 9k+ | | Non-prefixed global variable |
| #19 | YITH WooCommerce Product Gallery & Image Zoom | 24 | 418 | 1,490 | 20k+ | | Non-prefixed global variable |
| #20 | Dynamic XML Sitemaps Generator for Google | 32 | 74 | 411 | 20k+ | | Non-prefixed global variable |
| #21 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,435 | 3,580 | 100k+ | | Output is not escaped |
| #22 | VK All in One Expansion Unit | 23 | 1,026 | 518 | 100k+ | | Output is not escaped |
| #23 | GenerateBlocks | 97 | 9 | 8 | 200k+ | | file system operations is writable |
| #24 | Simple File List | 93 | 1 | 538 | 3k+ | | Non-prefixed global variable |
| #25 | YITH Pre-Order for WooCommerce | 30 | 397 | 1,464 | 6k+ | | Non-prefixed global variable |
| #26 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,192 | 770 | 30k+ | | Output is not escaped |
| #27 | WP ULike – Like & Dislike Buttons for Engagement and Feedback | 31 | 269 | 358 | 60k+ | | Output is not escaped |
| #28 | SEOPress – AI SEO Plugin & On-site SEO | 32 | 138 | 429 | 300k+ | | Non-prefixed global variable |
| #29 | Ninja Forms – The Contact Form Builder That Grows With You | 23 | 754 | 1,525 | 600k+ | | Nonce verification recommended |
| #30 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | Non-prefixed global variable |
| #31 | JS Help Desk – AI-Powered Support & Ticketing System | 37 | 17 | 406 | 7k+ | | Missing nonce verification |
| #32 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 3 | 252 | 10k+ | | Dynamic hook name |
| #33 | Speed Optimizer – The All-In-One Performance-Boosting Plugin | 36 | 45 | 96 | 1m+ | | Non-prefixed hook name |
| #34 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 41 | 115 | 14 | 1k+ | | Exception output is not escaped |
| #35 | Easy MCP AI – Connector for Claude, ChatGPT & SEO Data | 100 | | 0 | 2k+ | | No open findings |
| #36 | WPC Sticky Add To Cart for WooCommerce | 98 | | 17 | 2k+ | | Non-prefixed class |
| #37 | WPC Product Videos for WooCommerce | 98 | | 15 | 3k+ | | Non-prefixed class |
| #38 | Tagembed Social Feeds Widget | 77 | 21 | 137 | 10k+ | | Non-prefixed function |
| #39 | Post Snippets – Custom WordPress Code Snippets Customizer | 25 | 808 | 1,654 | 20k+ | | Non-prefixed global variable |
| #40 | JetFormBuilder — Dynamic Blocks Form Builder | 17 | 2,094 | 1,588 | 90k+ | | Text Domain Mismatch |
| #41 | Newsletter – Send awesome emails from WordPress | 24 | 898 | 2,214 | 200k+ | | Non-prefixed global variable |
| #42 | Unlimited Elements For Elementor | 24 | 710 | 2,093 | 300k+ | | Non-prefixed global variable |
| #43 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | Non-prefixed global variable |
| #44 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | Text Domain Mismatch |
| #45 | WPC Product Size Chart for WooCommerce | 97 | | 19 | 2k+ | | Non-prefixed class |
| #46 | Ninja Charts – Interactive Charts and Graphs | 100 | | 0 | 3k+ | | No open findings |
| #47 | WPC Linked Variation for WooCommerce | 98 | | 15 | 3k+ | | Non-prefixed class |
| #48 | Shibboleth | 100 | | 0 | 3k+ | | No open findings |
| #49 | RY Tools for WooCommerce | 46 | | 298 | 5k+ | | Non-prefixed class |
| #50 | TrackShip for WooCommerce | 25 | 421 | 957 | 6k+ | | Non-prefixed global variable |