| #1 | Scrollsequence – Cinematic Scroll Image Animation Plugin | 19 | 878 | 1,528 | 4k+ | | Non Prefixed Variable Found |
| #2 | Campaign Monitor for WordPress | 21 | 386 | 461 | 2k+ | | Non Prefixed Variable Found |
| #3 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 255 | 425 | 20k+ | | Non Prefixed Hookname Found |
| #4 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | Text Domain Mismatch |
| #5 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | Output Not Escaped |
| #6 | oik | 22 | 489 | 180 | 2k+ | | Non Singular String Literal Domain |
| #7 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | Text Domain Mismatch |
| #8 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | Non Prefixed Variable Found |
| #9 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | Missing Translators Comment |
| #10 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 4k+ | | Output Not Escaped |
| #11 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | Non Prefixed Namespace Found |
| #12 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | Output Not Escaped |
| #13 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | Exception Not Escaped |
| #14 | Ninja Forms – The Contact Form Builder That Grows With You | 23 | 755 | 1,536 | 600k+ | | Recommended |
| #15 | Affiliates Manager | 24 | 1,268 | 653 | 9k+ | | Unsafe Printing Function |
| #16 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | Non Prefixed Variable Found |
| #17 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,213 | 2k+ | | Text Domain Mismatch |
| #18 | Newsletter – Send awesome emails from WordPress | 24 | 894 | 2,212 | 200k+ | | Non Prefixed Variable Found |
| #19 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | 24 | 12,053 | 494 | 100k+ | | Text Domain Mismatch |
| #20 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | Unsafe Printing Function |
| #21 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 24 | 296 | 245 | 10k+ | | Output Not Escaped |
| #22 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | Exception Not Escaped |
| #23 | Affiliates | 25 | 689 | 1,483 | 2k+ | | Output Not Escaped |
| #24 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 25 | 430 | 764 | 20k+ | | Non Prefixed Variable Found |
| #25 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 334 | 471 | 10k+ | | Non Prefixed Variable Found |
| #26 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,433 | 1,383 | 100k+ | | Unsafe Printing Function |
| #27 | Social Share Icons & Social Share Buttons | 25 | 2,365 | 1,357 | 10k+ | | Output Not Escaped |
| #28 | WP-DownloadManager | 25 | 607 | 508 | 3k+ | | Unsafe Printing Function |
| #29 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | Output Not Escaped |
| #30 | Crowdsignal Dashboard – Polls, Surveys & more | 26 | 486 | 489 | 200k+ | | Unsafe Printing Function |
| #31 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | Output Not Escaped |
| #32 | 10WebSocial | 28 | 584 | 185 | 10k+ | | Unsafe Printing Function |
| #33 | Post Views Counter | 29 | 179 | 398 | 200k+ | | Non Prefixed Hookname Found |
| #34 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | Non Prefixed Variable Found |
| #35 | User Access Manager | 30 | 393 | 171 | 10k+ | | Output Not Escaped |
| #36 | Compliance by Hu-manity.co | 31 | 154 | 336 | 900k+ | | Missing |
| #37 | Ultimate Posts Widget | 31 | 309 | 86 | 10k+ | | Output Not Escaped |
| #38 | Download Attachments | 32 | 69 | 188 | 8k+ | | Non Prefixed Hookname Found |
| #39 | WP-Stats | 32 | 237 | 126 | 2k+ | | Output Not Escaped |
| #40 | ImageLinks – Interactive Image Builder with Hotspots | 33 | 517 | 90 | 1k+ | | Text Domain Mismatch |
| #41 | Enhanced Text Widget | 34 | 101 | 58 | 30k+ | | Output Not Escaped |
| #42 | WP-SCSS | 34 | 269 | 13 | 40k+ | | Exception Not Escaped |
| #43 | Ad Widget for WordPress | 35 | 68 | 14 | 2k+ | | Output Not Escaped |
| #44 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | Unsafe Printing Function |
| #45 | Instant CSS | 35 | 25 | 25 | 3k+ | | Output Not Escaped |
| #46 | iPages – FlipBook Image & PDF Viewer | 35 | 467 | 177 | 2k+ | | Text Domain Mismatch |
| #47 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | Recommended |
| #48 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | Non Prefixed Variable Found |
| #49 | Image Watermark | 36 | 76 | 179 | 40k+ | | Missing |
| #50 | Affiliate Sales in Google Analytics and other tools | 37 | 24 | 84 | 1k+ | | Missing Unslash |