| #1 | AnyComment | 17 | 445 | 449 | 5k+ | | Output Not Escaped |
| #2 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | | Missing Translators Comment |
| #3 | Membership Plugin – Kadence Memberships | 19 | 5,082 | 2,982 | 9k+ | | Text Domain Mismatch |
| #4 | Filter Everything — WordPress & WooCommerce Filters | 20 | 568 | 730 | 50k+ | | Output Not Escaped |
| #5 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 443 | 2,129 | 20k+ | | Non Prefixed Variable Found |
| #6 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | Non Singular String Literal Domain |
| #7 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | Output Not Escaped |
| #8 | SecuPress with Simple SSL – Simple and Performant Security | 23 | 1,696 | 1,590 | 40k+ | | Non Prefixed Variable Found |
| #9 | Site Reviews | 23 | 1,625 | 598 | 60k+ | | Output Not Escaped |
| #10 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | Output Not Escaped |
| #11 | WP Crowdfunding | 23 | 199 | 1,629 | 3k+ | | Non Prefixed Variable Found |
| #12 | Customer Reviews for WooCommerce | 24 | 2,206 | 2,443 | 80k+ | | Output Not Escaped |
| #13 | Event Tickets and Registration | 24 | 3,415 | 4,210 | 90k+ | | Non Prefixed Variable Found |
| #14 | Participants Database | 24 | 951 | 894 | 7k+ | | Not Prepared |
| #15 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 414 | 573 | 10k+ | | Missing Translators Comment |
| #16 | Smart Image Resize – Make WooCommerce Images the Same Size | 24 | 516 | 379 | 7k+ | | Text Domain Mismatch |
| #17 | XT Floating Cart for WooCommerce | 24 | 1,249 | 2,023 | 4k+ | | Non Prefixed Variable Found |
| #18 | Simply Static – The Static Site Generator | 25 | 163 | 446 | 30k+ | | Non Prefixed Hookname Found |
| #19 | Affiliate Program Suite — SliceWP Affiliates | 25 | 1,275 | 2,081 | 10k+ | | Output Not Escaped |
| #20 | Themify Event Post | 25 | 397 | 143 | 3k+ | | Output Not Escaped |
| #21 | Order Tracking – WordPress Status Tracking Plugin | 28 | 619 | 772 | 3k+ | | Unsafe Printing Function |
| #22 | Big File Uploads – Increase Maximum File Upload Size | 31 | 101 | 92 | 100k+ | | Output Not Escaped |
| #23 | DHL eCommerce (Benelux) for WooCommerce | 32 | 222 | 330 | 2k+ | | Recommended |
| #24 | CartBounty – Save and recover abandoned carts for WooCommerce | 33 | 370 | 399 | 10k+ | | Output Not Escaped |
| #25 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | Output Not Escaped |
| #26 | HTML Import 2 | 34 | 273 | 26 | 5k+ | | Unsafe Printing Function |
| #27 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | Output Not Escaped |
| #28 | Donation Platform for WooCommerce: Fundraising & Donation Management | 34 | 331 | 448 | 7k+ | | Non Prefixed Variable Found |
| #29 | Bulk edit publish date | 62 | 11 | 16 | 2k+ | | Recommended |