| #1 | JetFormBuilder — Dynamic Blocks Form Builder | 17 | 2,094 | 1,588 | 90k+ | | | Text Domain Mismatch |
| #2 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | | | Non-prefixed global variable |
| #3 | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 25 | 690 | 1,581 | 50k+ | | | Non-prefixed global variable |
| #4 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | | | Non-prefixed global variable |
| #5 | aThemes Blocks | 32 | 192 | 1,034 | 6k+ | | | Non-prefixed global variable |
| #6 | Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 31 | 837 | 295 | 100k+ | | | Unsafe printing function |
| #7 | SiteOrigin Widgets Bundle | 23 | 607 | 455 | 400k+ | | | Output is not escaped |
| #8 | SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) | 69 | 17 | 952 | 6k+ | | | Non-prefixed global variable |
| #9 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #10 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |
| #11 | oik | 22 | 489 | 180 | 2k+ | | | Non Singular String Literal Domain |
| #12 | Stackable – Page Builder Gutenberg Blocks | 31 | 477 | 90 | 100k+ | | | Non Singular String Literal Domain |
| #13 | Premium Blocks – Gutenberg Blocks, Patterns & Templates | 24 | 140 | 308 | 2k+ | | | Non-prefixed function |
| #14 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 54 | 344 | 93 | 300k+ | | | Offloaded Content |
| #15 | Qi Blocks | 30 | 47 | 344 | 60k+ | | | Non-prefixed global variable |
| #16 | aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | 54 | 8 | 382 | 2k+ | | | Non-prefixed global variable |
| #17 | Kubio AI Page Builder | 60 | 281 | 77 | 90k+ | | | Missing direct file access protection |
| #18 | DesignSetGo | 35 | 20 | 313 | 4k+ | | | Non-prefixed global variable |
| #19 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | | | Non-prefixed global variable |
| #20 | Extendify | 35 | 117 | 168 | 500k+ | | | Non-prefixed global variable |
| #21 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | | | Non-prefixed global variable |
| #22 | Editor Blocks by Download Manager | 33 | 174 | 102 | 6k+ | | | Output is not escaped |
| #23 | Snow Monkey Blocks | 92 | 87 | 173 | 30k+ | | | Non-prefixed global variable |
| #24 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | | | Exception output is not escaped |
| #25 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #26 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #27 | Genesis Blocks | 88 | 154 | 9 | 40k+ | | | Offloaded Content |
| #28 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | | | Missing direct file access protection |
| #29 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #30 | Sinatra Core | 40 | 101 | 15 | 8k+ | | | Output is not escaped |
| #31 | RioVizual — Table Blocks for Comparison, Pricing and Pros & Cons | 39 | 32 | 81 | 1k+ | | | Nonce verification recommended |
| #32 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | | | Missing Arg Domain |
| #33 | User Profile Picture | 57 | 42 | 54 | 40k+ | | | Non-prefixed hook name |
| #34 | Responsive Blocks – Page Builder for Blocks & Patterns | 72 | 47 | 43 | 4k+ | | | badly named files |
| #35 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 30k+ | | | Text Domain Mismatch |
| #36 | Smart Blocks – WordPress Gutenberg Blocks | 88 | 10 | 76 | 1k+ | | | Post Not In post not in |
| #37 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #38 | Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio | 97 | 12 | 70 | 20k+ | | | Text Domain Mismatch |
| #39 | LIQUID BLOCKS – Slider, Carousel, Accordion | 42 | 50 | 31 | 4k+ | | | Unsafe printing function |
| #40 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions | 95 | 17 | 60 | 7k+ | | | Non-prefixed hook name |
| #41 | Snow Monkey Forms | 91 | 36 | 41 | 30k+ | | | Non-prefixed global variable |
| #42 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #43 | UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks | 49 | 34 | 38 | 40k+ | | | Missing direct file access protection |
| #44 | Gutenverse – WordPress Blocks, Page Builder & Site Editor | 51 | 17 | 47 | 20k+ | | | Non-prefixed hook name |
| #45 | LIQUID SPEECH BALLOON | 44 | 34 | 30 | 10k+ | | | Output is not escaped |
| #46 | Reusable Blocks Extended | 42 | 38 | 15 | 20k+ | | | Output is not escaped |
| #47 | Grids: Layout builder for WordPress | 56 | 24 | 27 | 2k+ | | | Missing direct file access protection |
| #48 | Custom Fields for Gutenberg | 42 | 24 | 24 | 1k+ | | | Output is not escaped |
| #49 | SKT Blocks – Gutenberg based Page Builder | 94 | 14 | 25 | 1k+ | | | Non-prefixed function |
| #50 | Gutenberg Blocks Library & Toolkit – Editor Plus | 35 | 27 | 11 | 6k+ | | | Text Domain Mismatch |