| #401 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #402 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #403 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #404 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #405 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #406 | GD Rating System | 25 | 1,511 | 1,043 | 1k+ | | | Output is not escaped |
| #407 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #408 | GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content | 25 | 88 | 863 | 6k+ | | | Non-prefixed global variable |
| #409 | Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | 25 | 40 | 1,057 | 1k+ | | | Non-prefixed global variable |
| #410 | Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | 25 | 789 | 313 | 30k+ | | | Text Domain Mismatch |
| #411 | Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews | 25 | 645 | 1,585 | 1k+ | | | Non-prefixed global variable |
| #412 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #413 | Image SEO – AI-Driven Image SEO Optimizer | 25 | 350 | 328 | 1k+ | | | Text Domain Mismatch |
| #414 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | 25 | 449 | 1,300 | 1m+ | | | Interpolated SQL is not prepared |
| #415 | JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin | 25 | 1,541 | 1,578 | 1k+ | | | Non-prefixed global variable |
| #416 | JoomSport – for Sports: Team & League, Football, Hockey & more | 25 | 523 | 1,747 | 1k+ | | | Direct Query |
| #417 | kk Star Ratings – Rate Post & Collect User Feedbacks | 25 | 772 | 1,388 | 70k+ | | | Non-prefixed global variable |
| #418 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #419 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | | | Unsafe printing function |
| #420 | Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid | 25 | 656 | 1,506 | 5k+ | | | Non-prefixed global variable |
| #421 | My Calendar – Accessible Event Manager | 25 | 10 | 2,205 | 20k+ | | | Non-prefixed function |
| #422 | Notifications for Forms & WordPress Actions | 25 | 309 | 282 | 1k+ | | | Text Domain Mismatch |
| #423 | Object Sync for Salesforce | 25 | 192 | 296 | 500 | | | Non-prefixed global variable |
| #424 | Plover Kit – Blocks, Patterns, Responsive Layout and Gutenberg Editor Enhancements | 25 | 688 | 1,383 | 3k+ | | | Non-prefixed global variable |
| #425 | Qyrr – simply and modern QR-Code creation | 25 | 531 | 1,313 | 2k+ | | | Non-prefixed global variable |
| #426 | Restrict – membership, site, content and user access restrictions for WordPress | 25 | 539 | 1,401 | 2k+ | | | Non-prefixed global variable |
| #427 | Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor | 25 | 9 | 982 | 5k+ | | | Non-prefixed global variable |
| #428 | BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript | 25 | 204 | 546 | 4k+ | | | Non-prefixed global variable |
| #429 | Sensei LMS – Online Courses, Quizzes, & Learning | 25 | 56 | 928 | 9k+ | | | Nonce verification recommended |
| #430 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | | Exception output is not escaped |
| #431 | SimpLy Gallery | 25 | 532 | 1,422 | 40k+ | | | Non-prefixed global variable |
| #432 | Smart Image Resize for WooCommerce | 25 | 582 | 404 | 7k+ | | | Text Domain Mismatch |
| #433 | Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management | 25 | 367 | 923 | 10k+ | | | SQL query is not prepared |
| #434 | STAGGS – Product Configurator Toolkit | 25 | 626 | 2,180 | 400 | | | Non-prefixed global variable |
| #435 | SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent | 25 | 432 | 1,357 | 10k+ | | | Direct Query |
| #436 | SureDash – Community, Courses & Member Dashboard | 25 | 422 | 808 | 1k+ | | | Non-prefixed global variable |
| #437 | OttoKit: All-in-One Automation Platform | 25 | 1,558 | 1,825 | 90k+ | | | Missing direct file access protection |
| #438 | Tamara Checkout | 25 | 601 | 228 | 2k+ | | | Exception output is not escaped |
| #439 | Tax Exemption for WooCommerce | 25 | 552 | 1,402 | 700 | | | Non-prefixed global variable |
| #440 | Themify Event Post | 25 | 397 | 143 | 3k+ | | | Output is not escaped |
| #441 | Timeline Express | 25 | 531 | 147 | 9k+ | | | Text Domain Mismatch |
| #442 | Toocheke Companion | 25 | 429 | 1,227 | 1k+ | | | Non-prefixed global variable |
| #443 | Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin | 25 | 173 | 726 | 1k+ | | | Non-prefixed global variable |
| #444 | Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin | 25 | 119 | 2,704 | 2k+ | | | Non-prefixed global variable |
| #445 | TrackShip for WooCommerce | 25 | 405 | 954 | 6k+ | | | Non-prefixed global variable |
| #446 | TranslatePress – Translate Multilingual sites with AI Translation | 25 | 499 | 1,639 | 400k+ | | | Non-prefixed hook name |
| #447 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | | | Text Domain Mismatch |
| #448 | Webcomic | 25 | 593 | 308 | 600 | | | Output is not escaped |
| #449 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 25 | 279 | 518 | 4k+ | | | Non-prefixed global variable |
| #450 | Advanced Shipment Tracking for WooCommerce | 25 | 499 | 704 | 60k+ | | | Non-prefixed global variable |