| #251 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 828 | 3,665 | 500 | | | Request data is not unslashed |
| #252 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #253 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #254 | Customer Reviews for WooCommerce | 24 | 2,206 | 2,443 | 80k+ | | | Output is not escaped |
| #255 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,665 | 4k+ | | | Non-prefixed global variable |
| #256 | Digital License Manager | 24 | 295 | 670 | 700 | | | Non-prefixed hook name |
| #257 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,006 | 500 | | | Non-prefixed global variable |
| #258 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #259 | Event Tickets and Registration | 24 | 3,411 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #260 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #261 | Featured Image from URL (FIFU) | 24 | 1,654 | 418 | 70k+ | | | Non Singular String Literal Domain |
| #262 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | | | Output is not escaped |
| #263 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #264 | FileBird – WordPress Media Library Folders & File Manager | 24 | 239 | 377 | 200k+ | | | wp function not compatible with requires wp |
| #265 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #266 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #267 | Force Sell for WooCommerce | 24 | 708 | 452 | 600 | | | Text Domain Mismatch |
| #268 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | | | Non-prefixed global variable |
| #269 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #270 | GD Mail Queue | 24 | 502 | 582 | 700 | | | Output is not escaped |
| #271 | Genealogical Tree – Family Tree & Ancestry for WordPress | 24 | 560 | 1,641 | 600 | | | Non-prefixed global variable |
| #272 | GEO my WP | 24 | 554 | 2,089 | 3k+ | | | Non-prefixed hook name |
| #273 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #274 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 118 | 442 | 300k+ | | | Nonce verification recommended |
| #275 | Grid/List View for WooCommerce | 24 | 1,127 | 543 | 2k+ | | | Output is not escaped |
| #276 | HT Mega Addons for Elementor – Elementor Widgets & Template Builder | 24 | 10,894 | 440 | 70k+ | | | Text Domain Mismatch |
| #277 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #278 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | | | Non-prefixed global variable |
| #279 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,841 | 937 | 100k+ | | | Output is not escaped |
| #280 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | | Output is not escaped |
| #281 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | | | Non-prefixed global variable |
| #282 | Listdom: AI-powered Business Directory with Classifieds Ads Listings | 24 | 4,582 | 3,122 | 1k+ | | | Output is not escaped |
| #283 | Load More Products for WooCommerce | 24 | 742 | 456 | 20k+ | | | Text Domain Mismatch |
| #284 | Local Delivery Drivers for WooCommerce | 24 | 1,832 | 1,483 | 900 | | | Non-prefixed global variable |
| #285 | Event Booking Manager for WooCommerce | 24 | 968 | 2,122 | 7k+ | | | Non-prefixed global variable |
| #286 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #287 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #288 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #289 | Media Library Folders | 24 | 889 | 807 | 10k+ | | | Text Domain Mismatch |
| #290 | Min and Max Quantity for WooCommerce | 24 | 614 | 456 | 20k+ | | | Text Domain Mismatch |
| #291 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,220 | 1,399 | 2k+ | | | Text Domain Mismatch |
| #292 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #293 | Newsletter – Send awesome emails from WordPress | 24 | 898 | 2,214 | 200k+ | | | Non-prefixed global variable |
| #294 | Simple Newsletter Plugin – Noptin | 24 | 66 | 591 | 10k+ | | | Non-prefixed global variable |
| #295 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #296 | Paymob for WooCommerce | 24 | 348 | 288 | 6k+ | | | Text Domain Mismatch |
| #297 | Product Catalog Simple | 24 | 1,555 | 1,982 | 1k+ | | | Output is not escaped |
| #298 | Product Tabs Manager for WooCommerce | 24 | 646 | 479 | 2k+ | | | Text Domain Mismatch |
| #299 | Products Compare for WooCommerce | 24 | 1,033 | 692 | 1k+ | | | Output is not escaped |
| #300 | ProfileGrid – User Profiles, Groups and Communities | 24 | 474 | 2,460 | 6k+ | | | Non-prefixed global variable |