| #201 | PagBank / PagSeguro Connect para WooCommerce | 22 | 505 | 757 | 4k+ | | | Non-prefixed global variable |
| #202 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | | Text Domain Mismatch |
| #203 | PDF Builder for WPForms | 22 | 321 | 266 | 900 | | | SQL query is not prepared |
| #204 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | | Non Singular String Literal Domain |
| #205 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | | Non-prefixed global variable |
| #206 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | | | Non-prefixed global variable |
| #207 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | | Output is not escaped |
| #208 | Pronamic Pay | 22 | 258 | 1,077 | 2k+ | | | Non-prefixed global variable |
| #209 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | | Unsafe printing function |
| #210 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | | Non-prefixed function |
| #211 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #212 | RealPress – Real Estate Plugin | 22 | 604 | 1,167 | 500 | | | Non-prefixed global variable |
| #213 | Restrict User Access – Ultimate Membership & Content Protection | 22 | 977 | 1,840 | 10k+ | | | Non-prefixed global variable |
| #214 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #215 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #216 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 800 | 300k+ | | | Non-prefixed global variable |
| #217 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | | Non-prefixed global variable |
| #218 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #219 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | | Output is not escaped |
| #220 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 751 | 1,605 | 10k+ | | | Non-prefixed global variable |
| #221 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #222 | Swift Performance Lite | 22 | 2,346 | 1,325 | 6k+ | | | Text Domain Mismatch |
| #223 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #224 | The Moneytizer | 22 | 751 | 271 | 1k+ | | | Text Domain Mismatch |
| #225 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | | Output is not escaped |
| #226 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 700 | | | Nonce verification recommended |
| #227 | Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links | 22 | 1,044 | 1,797 | 20k+ | | | Non-prefixed global variable |
| #228 | UpStream: a Project Management Plugin for WordPress | 22 | 683 | 703 | 600 | | | Non-prefixed global variable |
| #229 | Welcart e-Commerce | 22 | 10,378 | 10,931 | 10k+ | | | Text Domain Mismatch |
| #230 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 22 | 444 | 243 | 200k+ | | | Text Domain Mismatch |
| #231 | WCFM – Frontend Manager for WooCommerce | 22 | 4,754 | 5,054 | 20k+ | | | Non-prefixed global variable |
| #232 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,934 | 1,966 | 10k+ | | | Non-prefixed global variable |
| #233 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #234 | Wenprise WeChatPay Payment Gateway For WooCommerce | 22 | 443 | 178 | 400 | | | Exception output is not escaped |
| #235 | WooCommerce | 22 | 1,359 | 6,172 | 7m+ | | | Non-prefixed global variable |
| #236 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | | Text Domain Mismatch |
| #237 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | | Text Domain Mismatch |
| #238 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #239 | ManageWP Worker | 22 | 507 | 565 | 1m+ | | | Non-prefixed class |
| #240 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #241 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #242 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #243 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 275 | 683 | 5k+ | | | Nonce verification recommended |
| #244 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 921 | 919 | 70k+ | | | Exception output is not escaped |
| #245 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #246 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 307 | 245 | 10k+ | | | Output is not escaped |
| #247 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #248 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #249 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | | | Non-prefixed global variable |
| #250 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 6,002 | 2,790 | 5k+ | | | Text Domain Mismatch |