| #51 | Avacy CMP | 47 | 5 | 90 | 600 | | | Non-prefixed global variable |
| #52 | WP Comment Policy Checkbox | 45 | 31 | 11 | 5k+ | | | Output is not escaped |
| #53 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |
| #54 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 44 | 5 | 70 | 1k+ | | | Interpolated SQL is not prepared |
| #55 | CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | 42 | 33 | 49 | 3k+ | | | Output is not escaped |
| #56 | Goolytics – Simple Google Analytics | 42 | 37 | 5 | 3k+ | | | Unsafe printing function |
| #57 | Cookie Notify | 42 | 15 | 54 | 400 | | | Input is not validated |
| #58 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #59 | tarteaucitron.io | 41 | 44 | 92 | 10k+ | | | Output is not escaped |
| #60 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #61 | Cookie Notice & Consent | 41 | 101 | 29 | 1k+ | | | Output is not escaped |
| #62 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | | | Unsafe printing function |
| #63 | Delete Me | 40 | 116 | 17 | 7k+ | | | Output is not escaped |
| #64 | Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) | 40 | 39 | 15 | 6k+ | | | Missing direct file access protection |
| #65 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #66 | Quantcast Choice | 39 | 227 | 11 | 3k+ | | | Text Domain Mismatch |
| #67 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #68 | Termly – GDPR/CCPA Cookie Consent Banner | 38 | 54 | 92 | 80k+ | | | Non-prefixed global variable |
| #69 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | | | Output is not escaped |
| #70 | Smart Cookie Kit | 38 | 263 | 81 | 3k+ | | | Output is not escaped |
| #71 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #72 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #73 | Asesor de Cookies RGPD para normativa europea | 36 | 94 | 91 | 20k+ | | | wp function not compatible with requires wp |
| #74 | Awesome GDPR Compliant Cookie Consent and Notice | 36 | 653 | 201 | 500 | | | Text Domain Mismatch |
| #75 | Disable and Remove Google Fonts | GDPR & DSGVO friendly | 35 | 21 | 11 | 100k+ | | | Missing Translators Comment |
| #76 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | | Output is not escaped |
| #77 | Cookie-Script.com | 35 | 6 | 7 | 10k+ | | | Non-prefixed class |
| #78 | Axeptio – Cookie Banner – GDPR Consent & Compliance with a friendly touch | 35 | 5 | 13 | 8k+ | | | Database parameter is not escaped |
| #79 | Termageddon: Cookie Consent & Privacy Compliance | 35 | 28 | 13 | 7k+ | | | Exception output is not escaped |
| #80 | Google Analytics Opt-Out | 35 | 34 | 7 | 5k+ | | | Output is not escaped |
| #81 | GDPR Compliance & Cookie Consent | 35 | 251 | 61 | 4k+ | | | Output is not escaped |
| #82 | Cookie Information – Cookie Banner with Consent Mode v2 | 35 | 185 | 28 | 2k+ | | | Output is not escaped |
| #83 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 34 | 45 | 116 | 5k+ | | | Non-prefixed hook name |
| #84 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 47 | 382 | 300k+ | | | Non-prefixed global variable |
| #85 | Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages | 33 | 29 | 417 | 10k+ | | | Non-prefixed global variable |
| #86 | Civic Cookie Control | 33 | 1,881 | 219 | 2k+ | | | Text Domain Mismatch |
| #87 | GDPR CCPA Compliance & Cookie Consent Banner | 33 | 622 | 87 | 1k+ | | | Non Singular String Literal Domain |
| #88 | Compliance by Hu-manity.co | 32 | 153 | 341 | 900k+ | | | Missing nonce verification |
| #89 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #90 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 63 | 300k+ | | | Output is not escaped |
| #91 | Cookie Dough Compliance and Consent for GDPR | 31 | 539 | 452 | 500 | | | Non Singular String Literal Domain |
| #92 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #93 | WP YouTube Lyte | 28 | 205 | 178 | 20k+ | | | Non-prefixed global variable |
| #94 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #95 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #96 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #97 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #98 | Seers AI | Cookie Consent Banner – GDPR & CCPA Compliant Consent Management Platform | 25 | 1,446 | 421 | 1k+ | | | Output is not escaped |
| #99 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #100 | Complianz – GDPR/CCPA Cookie Consent | 24 | 398 | 370 | 1m+ | | | Missing Arg Domain |
