| #1 | Block Navigation | 99 | 1 | 0 | 3k+ | | | outdated tested upto header |
| #2 | Product File Upload for WooCommerce | 99 | | 3 | 500 | | | Not In Footer |
| #3 | Hash Form – Drag & Drop Form Builder | 96 | | 147 | 3k+ | | | Direct Query |
| #4 | CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree | 93 | | 5 | 50k+ | | | Database parameter is not escaped |
| #5 | Form Builder Blocks | 93 | 1 | 86 | 500 | | | Non-prefixed global variable |
| #6 | UltraAddons for Elementor | 92 | 63 | 2 | 600 | | | wp function not compatible with requires wp |
| #7 | Bold Page Builder | 91 | 10 | 39 | 40k+ | | | Not In Footer |
| #8 | Colibri Page Builder | 81 | 143 | 35 | 90k+ | | | Missing direct file access protection |
| #9 | Zion Builder – Website Builder for Speed & Creativity | 74 | 4 | 29 | 1k+ | | | Non-prefixed hook name |
| #10 | Rife Extensions & Templates for Elementor | 69 | 22 | 7 | 20k+ | | | Output is not escaped |
| #11 | SKT Page Builder | 68 | 15 | 49 | 2k+ | | | Missing nonce verification |
| #12 | YayMail – WooCommerce Email Customizer | 65 | 166 | 811 | 50k+ | | | Non-prefixed global variable |
| #13 | WP Table Builder – Drag & Drop Table Builder | 58 | 63 | 48 | 50k+ | | | Not Allowed |
| #14 | Drag and Drop Multiple File Upload for WooCommerce | 47 | 131 | 32 | 5k+ | | | Text Domain Mismatch |
| #15 | Elementor Website Builder – more than just a page builder | 39 | 45 | 427 | 10m+ | | | Non-prefixed global variable |
| #16 | Anything Order by Terms | 39 | 48 | 93 | 900 | | | Direct Query |
| #17 | Admin Management Xtended | 38 | 279 | 161 | 5k+ | | | Output is not escaped |
| #18 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #19 | WC Builder – WooCommerce Page Builder for WPBakery | 37 | 605 | 47 | 1k+ | | | Text Domain Mismatch |
| #20 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #21 | Drag and Drop Multiple File Upload for Contact Form 7 | 35 | 90 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #22 | Essential Classy Addons for Elementor – 150+ Widgets, Templates & Performance Tools | 34 | 284 | 186 | 500 | | | Output is not escaped |
| #23 | CB Custom Beaver Builder Modules | 33 | 748 | 4 | 1k+ | | | Output is not escaped |
| #24 | Page Builder by SiteOrigin | 31 | 236 | 214 | 400k+ | | | Output is not escaped |
| #25 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 30 | 353 | 263 | 50k+ | | | Text Domain Mismatch |
| #26 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |
| #27 | TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder | 25 | 702 | 1,588 | 10k+ | | | Non-prefixed global variable |
| #28 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 157 | 603 | 10k+ | | | Non-prefixed global variable |
| #29 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 25 | 250 | 227 | 5k+ | | | Exception output is not escaped |
| #30 | F4 Post Tree | 25 | 536 | 1,332 | 500 | | | Non-prefixed global variable |
| #31 | Kirki – Freeform Page Builder, Website Builder & Customizer | 24 | 224 | 817 | 500k+ | | | Exception output is not escaped |
| #32 | Spider Elements – Premium Elementor Widgets & Addons Library | 24 | 542 | 1,555 | 400 | | | Non-prefixed global variable |
| #33 | Page Builder: Pagelayer – Drag and Drop website builder | 23 | 820 | 584 | 400k+ | | | Output is not escaped |
| #34 | Nimble Page Builder | 20 | 1,591 | 1,684 | 30k+ | | | Missing Arg Domain |
| #35 | Themify Builder | 9 | 5,334 | 2,171 | 5k+ | | | Text Domain Mismatch |
