| #1 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 766 | 555 | 400k+ | | | Output is not escaped |
| #2 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 222 | 400k+ | | | Nonce verification recommended |
| #3 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #4 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 25 | 99 | 1,035 | 700k+ | | | Non-prefixed global variable |
| #5 | TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder | 25 | 705 | 1,587 | 10k+ | | | Non-prefixed global variable |
| #6 | LightStart – Maintenance Mode, Coming Soon and Landing Page Builder | 34 | 42 | 312 | 400k+ | | | Request data is not unslashed |
| #7 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | | | Non-prefixed global variable |
| #8 | Instapage Plugin | 35 | 220 | 45 | 5k+ | | | Output is not escaped |
| #9 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | | Non-prefixed global variable |
| #10 | WP Maintenance Mode & Site Under Construction | 38 | 72 | 57 | 3k+ | | | Output is not escaped |
| #11 | Ultimate Coming Soon Page, Maintenance Mode & Under Construction – Gutenberg Block Builder & Landing Page | 42 | 15 | 89 | 10k+ | | | Non-prefixed global variable |
| #12 | Ansar Import – One Click Starter Sites – for Elementor & Themes | 48 | 27 | 116 | 20k+ | | | Non-prefixed global variable |
| #13 | WPKoi Templates for Elementor | 50 | 935 | 25 | 5k+ | | | Text Domain Mismatch |
| #14 | Landingi Landing Pages | 55 | 18 | 23 | 2k+ | | | Input is not sanitized |
| #15 | Kubio AI Page Builder | 60 | 281 | 77 | 90k+ | | | Missing direct file access protection |
| #16 | Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | 62 | 81 | 100 | 40k+ | | | Missing direct file access protection |
| #17 | Layouts for Divi | 64 | 3 | 27 | 1k+ | | | Non-prefixed global variable |
| #18 | Leadpages | 66 | 6 | 62 | 10k+ | | | Direct Query |
| #19 | SKT Page Builder | 68 | 15 | 49 | 2k+ | | | Missing nonce verification |
| #20 | Colibri Page Builder | 82 | 138 | 31 | 90k+ | | | Missing direct file access protection |
| #21 | Coming Soon Maintenance Mode | 95 | 4 | 2 | 6k+ | | | wp function not compatible with requires wp |
