| #1 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 19 | 1,295 | 2,679 | 9k+ | | Output Not Escaped |
| #2 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | | Missing Translators Comment |
| #3 | BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | 20 | 508 | 1,406 | 30k+ | | Non Prefixed Variable Found |
| #4 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,435 | 3,580 | 100k+ | | Output Not Escaped |
| #5 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | Missing Unslash |
| #6 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | | Non Prefixed Variable Found |
| #7 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | | Output Not Escaped |
| #8 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | Output Not Escaped |
| #9 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 872 | 4,297 | 7k+ | | Non Prefixed Variable Found |
| #10 | Paysera Payment Gateway for WooCommerce | 21 | 1,866 | 195 | 7k+ | | Exception Not Escaped |
| #11 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | Text Domain Mismatch |
| #12 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output Not Escaped |
| #13 | Import WP – Export and Import CSV and XML files to WordPress | 22 | 580 | 330 | 4k+ | | Exception Not Escaped |
| #14 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | | Output Not Escaped |
| #15 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | | Non Prefixed Variable Found |
| #16 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | Output Not Escaped |
| #17 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | Text Domain Mismatch |
| #18 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | Text Domain Mismatch |
| #19 | ЮKassa для WooCommerce | 22 | 591 | 168 | 9k+ | | Echo Found |
| #20 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | Text Domain Mismatch |
| #21 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | | Text Domain Mismatch |
| #22 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | Echo Found |
| #23 | Happy Addons for Elementor | 23 | 573 | 444 | 400k+ | | Output Not Escaped |
| #24 | License Manager for WooCommerce | 23 | 129 | 819 | 6k+ | | Missing Unslash |
| #25 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | Text Domain Mismatch |
| #26 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | Output Not Escaped |
| #27 | Travelpayouts | 23 | 769 | 110 | 6k+ | | Output Not Escaped |
| #28 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | Non Prefixed Variable Found |
| #29 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | Non Prefixed Variable Found |
| #30 | Brands for WooCommerce | 24 | 798 | 674 | 6k+ | | Text Domain Mismatch |
| #31 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 24 | 485 | 623 | 4k+ | | Output Not Escaped |
| #32 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | Missing Arg Domain |
| #33 | Democracy Poll | 24 | 388 | 425 | 7k+ | | Echo Found |
| #34 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | | Non Prefixed Variable Found |
| #35 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 370 | 361 | 60k+ | | Echo Found |
| #36 | Load More Products for WooCommerce | 24 | 742 | 456 | 20k+ | | Text Domain Mismatch |
| #37 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | Non Prefixed Variable Found |
| #38 | Min and Max Quantity for WooCommerce | 24 | 614 | 456 | 20k+ | | Text Domain Mismatch |
| #39 | Newsletter – Send awesome emails from WordPress | 24 | 894 | 2,212 | 200k+ | | Non Prefixed Variable Found |
| #40 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | Text Domain Mismatch |
| #41 | Paymob for WooCommerce | 24 | 359 | 288 | 6k+ | | Text Domain Mismatch |
| #42 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | Output Not Escaped |
| #43 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,160 | 2,407 | 500k+ | | Non Prefixed Namespace Found |
| #44 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | Output Not Escaped |
| #45 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | | Output Not Escaped |
| #46 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | Output Not Escaped |
| #47 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | | Output Not Escaped |
| #48 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | Non Singular String Literal Domain |
| #49 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,775 | 393 | 40k+ | | Text Domain Mismatch |
| #50 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,576 | 2,103 | 100k+ | | Output Not Escaped |