| #1 | SiteOrigin Widgets Bundle | 23 | 607 | 455 | 400k+ | | | Output is not escaped |
| #2 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | | | Non-prefixed global variable |
| #3 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | | | Non-prefixed global variable |
| #4 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #5 | Extendify | 35 | 117 | 168 | 500k+ | | | Non-prefixed global variable |
| #6 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 54 | 344 | 93 | 300k+ | | | Offloaded Content |
| #7 | Stackable – Page Builder Gutenberg Blocks | 31 | 477 | 90 | 100k+ | | | Non Singular String Literal Domain |
| #8 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #9 | Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 31 | 837 | 295 | 100k+ | | | Unsafe printing function |
| #10 | GenerateBlocks | 97 | 9 | 8 | 200k+ | | | file system operations is writable |
| #11 | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 25 | 691 | 1,581 | 50k+ | | | Non-prefixed global variable |
| #12 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 90k+ | | | Text Domain Mismatch |
| #13 | Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor | 97 | | 35 | 30k+ | | | Post Not In post not in |
| #14 | Kubio AI Page Builder | 60 | 281 | 77 | 90k+ | | | Missing direct file access protection |
| #15 | Genesis Blocks | 88 | 154 | 9 | 40k+ | | | Offloaded Content |
| #16 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | | | Non-prefixed global variable |
| #17 | Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More | 100 | | 0 | 80k+ | | | No open findings |
| #18 | Gutenverse – WordPress Blocks, Page Builder & Site Editor | 51 | 17 | 47 | 20k+ | | | Non-prefixed hook name |
| #19 | Snow Monkey Blocks | 92 | 87 | 173 | 30k+ | | | Non-prefixed global variable |
| #20 | User Profile Picture | 57 | 42 | 54 | 40k+ | | | Non-prefixed hook name |
| #21 | Qi Blocks | 31 | 46 | 345 | 60k+ | | | Non-prefixed global variable |
| #22 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | | | Missing direct file access protection |
| #23 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 20k+ | | | Text Domain Mismatch |
| #24 | Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio | 97 | 12 | 70 | 20k+ | | | Text Domain Mismatch |
| #25 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #26 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #27 | Snow Monkey Forms | 91 | 36 | 41 | 30k+ | | | Non-prefixed global variable |
| #28 | Snow Monkey Editor | 99 | 2 | 3 | 30k+ | | | Non-prefixed global variable |
| #29 | UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks | 49 | 34 | 38 | 40k+ | | | Missing direct file access protection |
| #30 | Premium Blocks – Gutenberg Blocks, Patterns & Templates | 24 | 140 | 308 | 2k+ | | | Non-prefixed function |
| #31 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | | | Missing Arg Domain |
| #32 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions | 95 | 17 | 60 | 7k+ | | | Non-prefixed hook name |
| #33 | aThemes Blocks | 32 | 192 | 1,034 | 6k+ | | | Non-prefixed global variable |
| #34 | Gutenberg Blocks Library & Toolkit – Editor Plus | 35 | 27 | 11 | 6k+ | | | Text Domain Mismatch |
| #35 | Latest Posts Block – Dynamic Posts Grid, Posts List, Posts Tile with Stunning Layouts for WordPress Blogs & Pages | 86 | 9 | 8 | 7k+ | | | Missing Version |
| #36 | oik | 22 | 489 | 180 | 2k+ | | | Non Singular String Literal Domain |
| #37 | Magic Content & CTA Box Builder – Advanced Gutenberg Blocks for Flexible Page Sections, Headers, Buttons, Shape Dividers, and Layout Options | 97 | 2 | 7 | 6k+ | | | Missing Version |
| #38 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #39 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | | | Non-prefixed global variable |
| #40 | Bootstrap Blocks | 91 | 8 | 30 | 10k+ | | | Non-prefixed global variable |
| #41 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | | | Exception output is not escaped |
| #42 | Layout Grid Block | 98 | 5 | 1 | 200k+ | | | Missing direct file access protection |
| #43 | Genesis Custom Blocks | 90 | 7 | 22 | 10k+ | | | Non-prefixed function |
| #44 | Editor Blocks by Download Manager | 33 | 174 | 102 | 6k+ | | | Output is not escaped |
| #45 | Responsive Blocks – Page Builder for Blocks & Patterns | 72 | 47 | 43 | 4k+ | | | badly named files |
| #46 | GutenBee – Gutenberg Blocks | 97 | 7 | 10 | 7k+ | | | Missing direct file access protection |
| #47 | No Gutenberg – Disable Blocks Editor and Global Styles – Back to Classic Editor | 99 | 1 | 3 | 9k+ | | | trademarked term |
| #48 | LIQUID SPEECH BALLOON | 44 | 34 | 30 | 10k+ | | | Output is not escaped |
| #49 | Sinatra Core | 40 | 101 | 15 | 8k+ | | | Output is not escaped |
| #50 | Find My Blocks – Locate blocks on your site | 98 | 2 | 7 | 4k+ | | | Non-prefixed function |