| #1 | BulletProof Security | 0 | 5,048 | 4,949 | 20k+ | | Output Not Escaped |
| #2 | Intercom | 0 | 60 | 71 | 6k+ | | Non Prefixed Function Found |
| #3 | Themify Builder | 9 | 5,195 | 2,096 | 5k+ | | Text Domain Mismatch |
| #4 | JetBackup – Backup, Restore & Migrate | 10 | 1,559 | 145 | 100k+ | | Exception Not Escaped |
| #5 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | | Text Domain Mismatch |
| #6 | Prime Slider Addons for Elementor | 18 | 3,500 | 230 | 100k+ | | Text Domain Mismatch |
| #7 | Podlove Podcast Publisher | 18 | 2,326 | 1,429 | 3k+ | | Output Not Escaped |
| #8 | WP Import Export Lite | 18 | 738 | 979 | 40k+ | | Non Prefixed Variable Found |
| #9 | Download Monitor | 19 | 425 | 1,364 | 80k+ | | Non Prefixed Hookname Found |
| #10 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 19 | 1,218 | 901 | 100k+ | | Exception Not Escaped |
| #11 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,909 | 878 | 100k+ | | Exception Not Escaped |
| #12 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 19 | 1,295 | 2,679 | 9k+ | | Output Not Escaped |
| #13 | Realtyna Organic IDX plugin + WPL Real Estate | 19 | 947 | 3,653 | 2k+ | | Non Prefixed Variable Found |
| #14 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | | Missing Translators Comment |
| #15 | MBE eShip | 20 | 527 | 740 | 1k+ | | Non Prefixed Variable Found |
| #16 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | Missing Unslash |
| #17 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | | Non Prefixed Variable Found |
| #18 | Backup Migration | 21 | 981 | 1,093 | 80k+ | | Non Prefixed Variable Found |
| #19 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 633 | 8k+ | | Non Prefixed Constant Found |
| #20 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 461 | 614 | 200k+ | | Text Domain Mismatch |
| #21 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | | Output Not Escaped |
| #22 | Comet Cache | 21 | 857 | 245 | 20k+ | | Output Not Escaped |
| #23 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | Output Not Escaped |
| #24 | eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams | 21 | 186 | 437 | 9k+ | | Non Prefixed Variable Found |
| #25 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | | unlink unlink |
| #26 | Packeta | 21 | 802 | 333 | 8k+ | | Exception Not Escaped |
| #27 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | 21 | 696 | 1,483 | 50k+ | | Recommended |
| #28 | Smart Forms – when you need more than just a contact form | 21 | 776 | 574 | 5k+ | | Output Not Escaped |
| #29 | WebP Express | 21 | 160 | 427 | 300k+ | | Non Prefixed Variable Found |
| #30 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,325 | 20k+ | | Non Prefixed Variable Found |
| #31 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | Output Not Escaped |
| #32 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | Missing Arg Domain |
| #33 | Frontend Admin by DynamiApps | 22 | 5,922 | 3,208 | 10k+ | | Text Domain Mismatch |
| #34 | Booking for Appointments and Events Calendar – Amelia | 22 | 1,489 | 480 | 90k+ | | Exception Not Escaped |
| #35 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | Non Prefixed Variable Found |
| #36 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,604 | 2,019 | 10k+ | | Direct Query |
| #37 | BuddyPress | 22 | 583 | 9,008 | 100k+ | | Non Prefixed Function Found |
| #38 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | Text Domain Mismatch |
| #39 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | Non Prefixed Variable Found |
| #40 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | Non Prefixed Variable Found |
| #41 | Download Manager | 22 | 2,290 | 1,301 | 100k+ | | Output Not Escaped |
| #42 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | Missing Unslash |
| #43 | Insert or Embed Articulate Content into WordPress | 22 | 659 | 1,437 | 2k+ | | Non Prefixed Variable Found |
| #44 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | Exception Not Escaped |
| #45 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,361 | 3,384 | 70k+ | | Non Prefixed Variable Found |
| #46 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | | Text Domain Mismatch |
| #47 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,265 | 2,065 | 100k+ | | Non Prefixed Variable Found |
| #48 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | Non Prefixed Variable Found |
| #49 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | Non Singular String Literal Domain |
| #50 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | Non Prefixed Variable Found |