| #101 | Modular DS: Monitor, update, and backup multiple websites | 21 | 161 | 81 | 40k+ | | Exception Not Escaped |
| #102 | Patchstack – WordPress & Plugins Security | 23 | 107 | 489 | 40k+ | | Missing |
| #103 | Companion Auto Update | 33 | 159 | 298 | 50k+ | | Direct Query |
| #104 | Stop User Enumeration | 99 | 1 | 1 | 50k+ | | Dynamic Hookname Found |
| #105 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | | Input Not Sanitized |
| #106 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | Recommended |
| #107 | Login No Captcha reCAPTCHA | 42 | 45 | 24 | 60k+ | | Unsafe Printing Function |
| #108 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | Dynamic Hookname Found |
| #109 | Wordfence Login Security | 25 | 248 | 418 | 70k+ | | Output Not Escaped |
| #110 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 306 | 518 | 80k+ | | Non Prefixed Namespace Found |
| #111 | Two Factor | 42 | 18 | 70 | 100k+ | | Recommended |
| #112 | WP Ghost (Hide My WP Ghost) – Security & Firewall | 85 | 6 | 373 | 100k+ | | Non Prefixed Variable Found |
| #113 | Advanced Access Manager – Access Governance for WordPress | 32 | 849 | 62 | 100k+ | | Output Not Escaped |
| #114 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,265 | 2,065 | 100k+ | | Non Prefixed Variable Found |
| #115 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | Text Domain Mismatch |
| #116 | BBQ Firewall – Fast & Powerful Firewall Security | 44 | 17 | 17 | 100k+ | | Output Not Escaped |
| #117 | CloudSecure WP Security | 29 | 74 | 350 | 100k+ | | Missing Unslash |
| #118 | WPS Limit Login | 39 | 152 | 76 | 100k+ | | Output Not Escaped |
| #119 | Anti-Malware Security and Brute-Force Firewall | 22 | 544 | 965 | 100k+ | | Output Not Escaped |
| #120 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception Not Escaped |
| #121 | Activity Log – Monitor & Record User Changes | 38 | 81 | 149 | 200k+ | | Recommended |
| #122 | Limit Login Attempts | 40 | 81 | 38 | 300k+ | | Output Not Escaped |
| #123 | Admin Menu Editor | 32 | 159 | 233 | 300k+ | | Non Prefixed Variable Found |
| #124 | SiteGuard WP Plugin | 24 | 329 | 333 | 500k+ | | Output Not Escaped |
| #125 | Sucuri Security – Auditing, Malware Scanner and Security Hardening | 94 | 52 | 5 | 600k+ | | missing direct file access protection |
| #126 | User Role Editor | 43 | 117 | 145 | 700k+ | | Output Not Escaped |
| #127 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | Non Prefixed Hookname Found |
| #128 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | Missing Translators Comment |
| #129 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | Non Prefixed Variable Found |
| #130 | Safe SVG | 98 | 7 | 4 | 1m+ | | Missing Arg Domain |
| #131 | ManageWP Worker | 22 | 507 | 565 | 1m+ | | Non Prefixed Class Found |
| #132 | Loginizer | 25 | 814 | 504 | 1m+ | | Output Not Escaped |
| #133 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 621 | 602 | 1m+ | | Unsafe Printing Function |
| #134 | Jetpack – WP Security, Backup, Speed, & Growth | 23 | 2,821 | 1,303 | 3m+ | | Text Domain Mismatch |
| #135 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | Output Not Escaped |
| #136 | Hostinger Tools | 81 | 14 | 22 | 3m+ | | wp function not compatible with requires wp |
| #137 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | | Missing Translators Comment |