| #151 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #152 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 893 | 1,828 | 1k+ | | | Non-prefixed global variable |
| #153 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #154 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 918 | 916 | 70k+ | | | Exception output is not escaped |
| #155 | AidWP – Donation & Payment Forms (Stripe Powered) | 22 | 1,317 | 1,675 | 800 | | | Non-prefixed global variable |
| #156 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | | Non-prefixed constant |
| #157 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | | Non-prefixed global variable |
| #158 | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #159 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #160 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 6k+ | | | Text Domain Mismatch |
| #161 | ShopWP | 22 | 430 | 225 | 700 | | | Text Domain Mismatch |
| #162 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #163 | WUPO Group Attributes for WooCommerce | 22 | 592 | 1,391 | 400 | | | Non-prefixed global variable |
| #164 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #165 | ЮKassa для WooCommerce | 22 | 590 | 168 | 9k+ | | | Short PHP open tag found |
| #166 | Advanced Custom Fields: Extended | 23 | 1,885 | 329 | 100k+ | | | Text Domain Mismatch |
| #167 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | | | Text Domain Mismatch |
| #168 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 411 | 544 | 100k+ | | | error log error log |
| #169 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | | Text Domain Mismatch |
| #170 | AR for WordPress | 23 | 149 | 508 | 400 | | | Non-prefixed global variable |
| #171 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #172 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | | | Output is not escaped |
| #173 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | | Missing Translators Comment |
| #174 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #175 | Brave Popup Builder – Popup, Optins, Lead Generation, Survey & Interactive Content | 23 | 238 | 294 | 20k+ | | | error log print r |
| #176 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | | | Non-prefixed global variable |
| #177 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #178 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 2,074 | 9k+ | | | Non-prefixed global variable |
| #179 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,231 | 1,257 | 10k+ | | | Non-prefixed global variable |
| #180 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #181 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 1k+ | | | Non-prefixed global variable |
| #182 | Auto Post Cleaner | 23 | 715 | 1,378 | 1k+ | | | Non-prefixed global variable |
| #183 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #184 | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | 23 | 170 | 821 | 40k+ | | | Non-prefixed global variable |
| #185 | Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification | 23 | 675 | 643 | 1k+ | | | Unsafe printing function |
| #186 | Easy Age Verify | 23 | 1,138 | 2,631 | 1k+ | | | Non-prefixed global variable |
| #187 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #188 | Marijuana Age Verify | 23 | 1,154 | 2,630 | 1k+ | | | Non-prefixed global variable |
| #189 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | | | Text Domain Mismatch |
| #190 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 23 | 490 | 301 | 5k+ | | | Text Domain Mismatch |
| #191 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #192 | Fastcache by Host.it | 23 | 1,327 | 203 | 600 | | | Text Domain Mismatch |
| #193 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #194 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | | Output is not escaped |
| #195 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #196 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,662 | 2,971 | 10k+ | | | Output is not escaped |
| #197 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 136 | 911 | 2k+ | | | Non-prefixed global variable |
| #198 | Import from YML | 23 | 97 | 308 | 400 | | | Non-prefixed global variable |
| #199 | RealHomes Memberships | 23 | 516 | 264 | 1k+ | | | Non Singular String Literal Domain |
| #200 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 387 | 1,258 | 5k+ | | | Non-prefixed global variable |