| #1 | Contact Form 7 | 69 | 56 | 39 | 10m+ | 2026-05-15 | missing direct file access protection |
| #2 | Elementor Website Builder – more than just a page builder | 34 | 47 | 427 | 10m+ | 2026-06-10 | Non Prefixed Variable Found |
| #3 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 159 | 386 | 10m+ | 2026-06-10 | Non Prefixed Variable Found |
| #4 | Classic Editor | 63 | 17 | 7 | 9m+ | 2026-05-28 | Unsafe Printing Function |
| #5 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | 2026-04-01 | Non Prefixed Variable Found |
| #6 | WooCommerce | 22 | 1,355 | 6,129 | 7m+ | 2026-05-27 | Non Prefixed Variable Found |
| #7 | Akismet Anti-spam: Spam Protection | 35 | 33 | 99 | 6m+ | 2026-04-23 | Non Prefixed Variable Found |
| #8 | All-in-One WP Migration and Backup | 40 | 28 | 61 | 5m+ | 2026-04-08 | Missing |
| #9 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | 2026-06-15 | missing direct file access protection |
| #10 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | 2026-05-13 | Output Not Escaped |
| #11 | WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More | 31 | 165 | 271 | 5m+ | 2026-06-18 | Non Prefixed Variable Found |
| #12 | Yoast Duplicate Post | 69 | 8 | 89 | 4m+ | 2026-05-18 | Recommended |
| #13 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 31 | 45 | 373 | 4m+ | 2026-06-10 | Non Prefixed Variable Found |
| #14 | WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | 36 | 18 | 146 | 4m+ | 2026-04-16 | Direct Query |
| #15 | All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic | 97 | 19 | 3 | 3m+ | 2026-06-12 | wp function not compatible with requires wp |
| #16 | Duplicate Page | 40 | 39 | 43 | 3m+ | 2026-05-08 | Unsafe Printing Function |
| #17 | Hostinger Tools | 81 | 14 | 22 | 3m+ | 2026-06-16 | wp function not compatible with requires wp |
| #18 | WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager | 89 | 21 | 30 | 3m+ | 2026-05-26 | wp function not compatible with requires wp |
| #19 | Jetpack – WP Security, Backup, Speed, & Growth | 23 | 2,821 | 1,303 | 3m+ | 2026-06-09 | Text Domain Mismatch |
| #20 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | 2026-06-17 | Missing Translators Comment |
| #21 | UpdraftPlus: WP Backup & Migration Plugin | 24 | 277 | 299 | 3m+ | 2026-06-05 | Non Prefixed Variable Found |
| #22 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | 2026-06-10 | Text Domain Mismatch |
| #23 | Classic Widgets | 97 | 2 | 3 | 2m+ | 2025-12-08 | outdated tested upto header |
| #24 | Essential Addons for Elementor – Popular Elementor Templates & Widgets | 62 | 80 | 185 | 2m+ | 2026-06-10 | wp function not compatible with requires wp |
| #25 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | 2026-05-29 | Recommended |
| #26 | Ultimate Addons for Elementor | 35 | 70 | 226 | 2m+ | 2026-05-27 | Non Prefixed Hookname Found |
| #27 | Redirection | 34 | 32 | 293 | 2m+ | 2026-06-14 | Non Prefixed Class Found |
| #28 | WordPress Importer | 25 | 238 | 110 | 2m+ | 2025-11-05 | Output Not Escaped |
| #29 | WPS Hide Login | 41 | 34 | 72 | 2m+ | 2026-01-12 | Recommended |
| #30 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | 2026-06-05 | Non Prefixed Variable Found |
| #31 | Starter Templates – AI-Powered Templates for Elementor & Gutenberg | 24 | 125 | 396 | 1m+ | 2026-06-17 | Non Prefixed Hookname Found |
| #32 | Better Search Replace | 39 | 96 | 43 | 1m+ | 2025-12-08 | Unsafe Printing Function |
| #33 | Code Snippets | 36 | 34 | 203 | 1m+ | 2026-04-28 | Recommended |
| #34 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | 2026-06-17 | Missing Arg Domain |
| #35 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | 2026-05-27 | Non Prefixed Variable Found |
| #36 | Custom Post Type UI | 53 | 16 | 23 | 1m+ | 2026-05-11 | Output Not Escaped |
| #37 | Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] | 53 | 15 | 46 | 1m+ | 2026-05-14 | Non Prefixed Variable Found |
| #38 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | 2026-05-22 | Output Not Escaped |
| #39 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 40 | 72 | 348 | 1m+ | 2026-06-16 | Non Prefixed Variable Found |
| #40 | EWWW Image Optimizer | 35 | 225 | 729 | 1m+ | 2026-06-10 | Direct Query |
| #41 | XML Sitemap Generator for Google | 37 | 43 | 79 | 1m+ | 2026-05-31 | Input Not Validated |
| #42 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 46 | 1m+ | 2026-06-16 | Direct Query |
| #43 | Image Optimizer – Optimize Images and Convert to WebP or AVIF | 87 | 14 | 24 | 1m+ | 2026-06-02 | Missing Translators Comment |
| #44 | Imagify: Optimize Images for Top Speed (Compress & Convert to WebP/AVIF) | 21 | 418 | 851 | 1m+ | 2026-06-01 | Non Prefixed Variable Found |
| #45 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | 25 | 449 | 1,300 | 1m+ | 2026-06-18 | Interpolated Not Prepared |
| #46 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 621 | 602 | 1m+ | 2026-06-16 | Unsafe Printing Function |
| #47 | Loco Translate | 26 | 454 | 242 | 1m+ | 2026-06-01 | Output Not Escaped |
| #48 | Loginizer | 25 | 814 | 504 | 1m+ | 2026-05-08 | Output Not Escaped |
| #49 | MC4WP: Mailchimp for WordPress | 39 | 1 | 294 | 1m+ | 2026-06-18 | Non Prefixed Variable Found |
| #50 | Maintenance | 99 | 3 | 0 | 1m+ | 2026-06-19 | strip tags strip tags |
