| #1 | Themify Builder | 9 | 5,195 | 2,096 | 5k+ | | Text Domain Mismatch |
| #2 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,909 | 878 | 100k+ | | Exception Not Escaped |
| #3 | LA-Studio Element Kit for Elementor | 21 | 8,390 | 1,964 | 10k+ | | Text Domain Mismatch |
| #4 | SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager | 22 | 662 | 833 | 8k+ | | Non Prefixed Variable Found |
| #5 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | Input Not Sanitized |
| #6 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | Text Domain Mismatch |
| #7 | User Menus – Nav Menu Visibility | 23 | 531 | 1,298 | 80k+ | | Non Prefixed Variable Found |
| #8 | Product Table & List Builder for WooCommerce | 23 | 1,361 | 2,047 | 10k+ | | Non Prefixed Variable Found |
| #9 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 118 | 442 | 300k+ | | Recommended |
| #10 | RSFirewall! | 24 | 563 | 521 | 4k+ | | Output Not Escaped |
| #11 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | Non Singular String Literal Domain |
| #12 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | | Recommended |
| #13 | Affiliate Program Suite — SliceWP Affiliates | 25 | 1,275 | 2,081 | 10k+ | | Output Not Escaped |
| #14 | Pay with Vipps and MobilePay for WooCommerce | 25 | 845 | 509 | 5k+ | | Output Not Escaped |
| #15 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 5k+ | | Non Singular String Literal Domain |
| #16 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | Missing Translators Comment |
| #17 | Themify Popup | 29 | 232 | 108 | 8k+ | | Text Domain Mismatch |
| #18 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | Non Prefixed Variable Found |
| #19 | Themify Portfolio Post | 30 | 214 | 102 | 30k+ | | Text Domain Mismatch |
| #20 | Advanced Access Manager – Access Governance for WordPress | 32 | 849 | 62 | 100k+ | | Output Not Escaped |
| #21 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | | Non Prefixed Hookname Found |
| #22 | Pay. Payment Methods for WooCommerce | 33 | 316 | 104 | 3k+ | | Non Singular String Literal Domain |
| #23 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | Missing Arg Domain |
| #24 | Better Plugin Compatibility Control | 35 | 7 | 4 | 4k+ | | trademarked term |
| #25 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 259 | 111 | 30k+ | | Text Domain Mismatch |
| #26 | Order Delivery Date for WooCommerce | 35 | 2,060 | 73 | 10k+ | | wp function not compatible with requires wp |
| #27 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | | Non Prefixed Function Found |
| #28 | Reveal IDs | 35 | 23 | 13 | 40k+ | | Output Not Escaped |
| #29 | Simple Yearly Archive | 35 | 102 | 36 | 6k+ | | Unsafe Printing Function |
| #30 | افزونه رسمی ترب | 36 | 42 | 86 | 20k+ | | Exception Not Escaped |
| #31 | RTMKit | 36 | 5 | 377 | 50k+ | | Non Prefixed Variable Found |
| #32 | Admin Management Xtended | 38 | 280 | 161 | 5k+ | | Output Not Escaped |
| #33 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | Output Not Escaped |
| #34 | Gift Up Gift Cards for WordPress and WooCommerce | 39 | 94 | 60 | 5k+ | | Output Not Escaped |
| #35 | Goolytics – Simple Google Analytics | 42 | 37 | 5 | 4k+ | | Unsafe Printing Function |
| #36 | Easy Property Listings | 49 | 60 | 66 | 5k+ | | wp function not compatible with requires wp |
| #37 | KIA Subtitle | 51 | 21 | 19 | 7k+ | | Non Prefixed Variable Found |
| #38 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 66 | 51 | 690 | 700k+ | | Non Prefixed Hookname Found |
| #39 | User Profile Picture | 66 | 9 | 8 | 4k+ | | Missing |
| #40 | SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) | 69 | 17 | 952 | 6k+ | | Non Prefixed Variable Found |
| #41 | Stape Conversion Tracking | 84 | 22 | 4 | 10k+ | | Non Singular String Literal Domain |
| #42 | Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More | 88 | 20 | 116 | 40k+ | | Non Prefixed Hookname Found |
| #43 | Gravity Forms Zero Spam | 94 | 4 | 9 | 100k+ | | trademarked term |
| #44 | PHP Version | 97 | 4 | 3 | 5k+ | | Missing Version |
| #45 | Disable Plugin Autoupdate Emails | 98 | 3 | 3 | 6k+ | | trademarked term |
| #46 | Disable All WordPress Updates | 98 | 4 | 6 | 10k+ | | trademarked term |