| #1 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 19 | 1,295 | 2,679 | 9k+ | 2026-06-15 | Output Not Escaped |
| #2 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | 2026-06-17 | Missing Translators Comment |
| #3 | BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | 20 | 508 | 1,406 | 30k+ | 2026-06-18 | Non Prefixed Variable Found |
| #4 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,435 | 3,580 | 100k+ | 2026-06-15 | Output Not Escaped |
| #5 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | 2026-04-10 | Missing Unslash |
| #6 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | 2026-04-15 | Non Prefixed Variable Found |
| #7 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | 2026-05-08 | Output Not Escaped |
| #8 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | 2026-05-22 | Output Not Escaped |
| #9 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 872 | 4,297 | 7k+ | 2026-06-20 | Non Prefixed Variable Found |
| #10 | Paysera Payment Gateway for WooCommerce | 21 | 1,866 | 195 | 7k+ | 2026-06-04 | Exception Not Escaped |
| #11 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | 2026-04-23 | Text Domain Mismatch |
| #12 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | 2026-06-16 | Output Not Escaped |
| #13 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,619 | 2,453 | 10k+ | 2026-06-19 | Output Not Escaped |
| #14 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | 2026-06-06 | Non Prefixed Variable Found |
| #15 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | 2023-10-15 | Output Not Escaped |
| #16 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | 2026-05-26 | Text Domain Mismatch |
| #17 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | 2026-06-18 | Text Domain Mismatch |
| #18 | ЮKassa для WooCommerce | 22 | 591 | 168 | 9k+ | 2026-05-28 | Echo Found |
| #19 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | 2026-05-26 | Text Domain Mismatch |
| #20 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | 2026-05-28 | Text Domain Mismatch |
| #21 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | 2026-05-26 | Echo Found |
| #22 | Happy Addons for Elementor | 23 | 573 | 444 | 400k+ | 2026-06-08 | Output Not Escaped |
| #23 | License Manager for WooCommerce | 23 | 129 | 819 | 6k+ | 2026-05-21 | Missing Unslash |
| #24 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | 2026-06-01 | Text Domain Mismatch |
| #25 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | 2026-06-17 | Output Not Escaped |
| #26 | Travelpayouts | 23 | 769 | 110 | 6k+ | 2026-02-26 | Output Not Escaped |
| #27 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | 2026-06-11 | Non Prefixed Variable Found |
| #28 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | 2026-06-12 | Non Prefixed Variable Found |
| #29 | Brands for WooCommerce | 24 | 798 | 674 | 6k+ | 2026-05-26 | Text Domain Mismatch |
| #30 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | 2026-06-17 | Missing Arg Domain |
| #31 | Democracy Poll | 24 | 388 | 425 | 7k+ | 2026-06-13 | Echo Found |
| #32 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | 2026-06-17 | Non Prefixed Variable Found |
| #33 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 370 | 361 | 60k+ | 2026-06-18 | Echo Found |
| #34 | Load More Products for WooCommerce | 24 | 742 | 456 | 20k+ | 2026-05-26 | Text Domain Mismatch |
| #35 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | 2026-05-28 | Non Prefixed Variable Found |
| #36 | Min and Max Quantity for WooCommerce | 24 | 614 | 456 | 20k+ | 2026-05-26 | Text Domain Mismatch |
| #37 | Newsletter – Send awesome emails from WordPress | 24 | 894 | 2,212 | 200k+ | 2026-06-17 | Non Prefixed Variable Found |
| #38 | Paymob for WooCommerce | 24 | 359 | 288 | 6k+ | 2026-05-05 | Text Domain Mismatch |
| #39 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,160 | 2,407 | 500k+ | 2026-06-09 | Non Prefixed Namespace Found |
| #40 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | 2026-06-19 | Output Not Escaped |
| #41 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | 2026-03-17 | Output Not Escaped |
| #42 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | 2026-05-28 | Output Not Escaped |
| #43 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | 2026-05-25 | Output Not Escaped |
| #44 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,775 | 393 | 40k+ | 2026-06-17 | Text Domain Mismatch |
| #45 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,576 | 2,103 | 100k+ | 2026-06-04 | Output Not Escaped |
| #46 | Admin Columns | 25 | 613 | 995 | 100k+ | 2026-05-29 | Non Prefixed Namespace Found |
| #47 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | 2026-05-25 | Output Not Escaped |
| #48 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | 2026-05-25 | Output Not Escaped |
| #49 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | 2026-06-02 | Non Prefixed Hookname Found |
| #50 | Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | 25 | 486 | 1,414 | 7k+ | 2026-06-18 | Non Prefixed Variable Found |
