| #151 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 554 | 982 | 200k+ | | Output Not Escaped |
| #152 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | | Non Prefixed Hookname Found |
| #153 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | Output Not Escaped |
| #154 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 610 | 1,365 | 100k+ | | Non Prefixed Variable Found |
| #155 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,278 | 2,574 | 30k+ | | Text Domain Mismatch |
| #156 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | Non Singular String Literal Domain |
| #157 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | | Recommended |
| #158 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 158 | 593 | 10k+ | | Non Prefixed Variable Found |
| #159 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | Non Prefixed Variable Found |
| #160 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | 25 | 449 | 1,300 | 1m+ | | Interpolated Not Prepared |
| #161 | kk Star Ratings – Rate Post & Collect User Feedbacks | 25 | 772 | 1,388 | 70k+ | | Non Prefixed Variable Found |
| #162 | Login Widget With Shortcode | 25 | 335 | 198 | 6k+ | | wp function not compatible with requires wp |
| #163 | Bulk Page Generator – LPagery | 25 | 670 | 1,926 | 3k+ | | Non Prefixed Variable Found |
| #164 | Create | 25 | 1,558 | 767 | 6k+ | | Text Domain Mismatch |
| #165 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | 25 | 257 | 397 | 40k+ | | Non Prefixed Hookname Found |
| #166 | PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin | 25 | 1,084 | 1,296 | 9k+ | | Non Prefixed Variable Found |
| #167 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 334 | 471 | 10k+ | | Non Prefixed Variable Found |
| #168 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 960 | 738 | 60k+ | | Text Domain Mismatch |
| #169 | Survey Maker by AYS | 25 | 566 | 2,397 | 6k+ | | Non Prefixed Variable Found |
| #170 | Ultimate Bootstrap Elements for Elementor | 25 | 6,326 | 122 | 6k+ | | Text Domain Mismatch |
| #171 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,433 | 1,383 | 100k+ | | Unsafe Printing Function |
| #172 | Social Share Icons & Social Share Buttons | 25 | 2,365 | 1,357 | 10k+ | | Output Not Escaped |
| #173 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 25 | 279 | 518 | 4k+ | | Non Prefixed Variable Found |
| #174 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | Output Not Escaped |
| #175 | Product Table for WooCommerce | 25 | 183 | 896 | 5k+ | | Non Prefixed Variable Found |
| #176 | Pay with Vipps and MobilePay for WooCommerce | 25 | 845 | 509 | 5k+ | | Output Not Escaped |
| #177 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 4,996 | 1,008 | 300k+ | | Unsafe Printing Function |
| #178 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 252 | 566 | 1m+ | | Non Prefixed Hookname Found |
| #179 | Blog Floating Button | 26 | 705 | 240 | 9k+ | | Output Not Escaped |
| #180 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | Output Not Escaped |
| #181 | Easy Appointments | 26 | 135 | 569 | 10k+ | | Maybe ASPOpen Tag Found |
| #182 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | Unsafe Printing Function |
| #183 | Loco Translate | 26 | 454 | 242 | 1m+ | | Output Not Escaped |
| #184 | Hotel Booking | 26 | 690 | 940 | 4k+ | | Unsafe Printing Function |
| #185 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | Output Not Escaped |
| #186 | Subscriptions for WooCommerce | 26 | 42 | 756 | 10k+ | | Non Prefixed Variable Found |
| #187 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 26 | 265 | 793 | 30k+ | | Missing |
| #188 | Comment Link Remove and Other Comment Tools | 27 | 691 | 132 | 7k+ | | Text Domain Mismatch |
| #189 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | Output Not Escaped |
| #190 | CM Tooltip Glossary | 27 | 611 | 188 | 8k+ | | Output Not Escaped |
| #191 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | Non Prefixed Variable Found |
| #192 | FG Joomla to WordPress | 27 | 278 | 101 | 7k+ | | Unsafe Printing Function |
| #193 | MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) | 27 | 154 | 551 | 5k+ | | Non Prefixed Variable Found |
| #194 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | | Output Not Escaped |
| #195 | PowerPack Lite for Beaver Builder | 27 | 2,842 | 375 | 7k+ | | Text Domain Mismatch |
| #196 | Presto Player | 27 | 131 | 124 | 100k+ | | Missing Arg Domain |
| #197 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | Text Domain Mismatch |
| #198 | Transbank Webpay | 27 | 198 | 211 | 10k+ | | Non Prefixed Variable Found |
| #199 | WP Events Manager | 27 | 294 | 415 | 30k+ | | Output Not Escaped |
| #200 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | Non Prefixed Variable Found |