| #301 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #302 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | | Non-prefixed hook name |
| #303 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #304 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #305 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | | | Non-prefixed global variable |
| #306 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #307 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #308 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #309 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | | | Unsafe printing function |
| #310 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #311 | Featured Image from URL (FIFU) | 24 | 1,654 | 418 | 70k+ | | | Non Singular String Literal Domain |
| #312 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | | | Output is not escaped |
| #313 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #314 | FileBird – WordPress Media Library Folders & File Manager | 24 | 239 | 377 | 200k+ | | | wp function not compatible with requires wp |
| #315 | Fix Alt Text | 24 | 544 | 346 | 1k+ | | | Non Singular String Literal Domain |
| #316 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #317 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #318 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | | | Non-prefixed global variable |
| #319 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #320 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #321 | GD Mail Queue | 24 | 502 | 582 | 700 | | | Output is not escaped |
| #322 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #323 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #324 | Simple Calendar – Google Calendar Plugin | 24 | 2,053 | 592 | 50k+ | | | Missing direct file access protection |
| #325 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,410 | 866 | 70k+ | | | Text Domain Mismatch |
| #326 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #327 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | | | Direct Query |
| #328 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #329 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | | | Non-prefixed global variable |
| #330 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | | | Non-prefixed global variable |
| #331 | KiviCare – Clinic & Patient Management System (EHR) | 24 | 223 | 880 | 2k+ | | | Direct Query |
| #332 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 165 | 393 | 60k+ | | | Short PHP open tag found |
| #333 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | | | Output is not escaped |
| #334 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | | Output is not escaped |
| #335 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | | | Non-prefixed global variable |
| #336 | Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | 24 | 969 | 2,140 | 7k+ | | | Non-prefixed global variable |
| #337 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #338 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #339 | Admin Tweaks | 24 | 1,507 | 206 | 1k+ | | | Text Domain Mismatch |
| #340 | Media Library Folders | 24 | 889 | 807 | 10k+ | | | Text Domain Mismatch |
| #341 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,230 | 1,405 | 2k+ | | | Text Domain Mismatch |
| #342 | Ninja Forms – The Contact Form Builder That Grows With You | 24 | 749 | 1,525 | 600k+ | | | Nonce verification recommended |
| #343 | Omnipress | 24 | 169 | 245 | 800 | | | Non-prefixed global variable |
| #344 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | | Text Domain Mismatch |
| #345 | Participants Database | 24 | 951 | 894 | 7k+ | | | SQL query is not prepared |
| #346 | Paymob for WooCommerce | 24 | 348 | 288 | 5k+ | | | Text Domain Mismatch |
| #347 | PDF for Gravity Forms + Drag And Drop Template Builder | 24 | 1,457 | 260 | 400 | | | wp function not compatible with requires wp |
| #348 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | | Output is not escaped |
| #349 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,160 | 2,407 | 500k+ | | | Non-prefixed namespace |
| #350 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |