| #201 | Ninja Forms – The Contact Form Builder That Grows With You | 24 | 749 | 1,525 | 600k+ | | | Nonce verification recommended |
| #202 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #203 | Participants Database | 24 | 951 | 894 | 7k+ | | | SQL query is not prepared |
| #204 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,160 | 2,407 | 500k+ | | | Non-prefixed namespace |
| #205 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #206 | Post Affiliate Pro | 24 | 293 | 335 | 500 | | | Nonce verification recommended |
| #207 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | | | Nonce verification recommended |
| #208 | Quick Event Manager | 24 | 152 | 388 | 1k+ | | | Non-prefixed function |
| #209 | SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | 24 | 239 | 304 | 1k+ | | | Direct Query |
| #210 | SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit | 24 | 605 | 928 | 1k+ | | | Non-prefixed global variable |
| #211 | Servebolt Optimizer | 24 | 1,958 | 681 | 1k+ | | | Text Domain Mismatch |
| #212 | Shortcodes Ultimate – Content Elements | 24 | 656 | 1,552 | 400k+ | | | Non-prefixed global variable |
| #213 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | | Output is not escaped |
| #214 | Simple Membership | 24 | 2,297 | 1,734 | 40k+ | | | Unsafe printing function |
| #215 | Slideshow Gallery LITE | 24 | 896 | 414 | 5k+ | | | Output is not escaped |
| #216 | Squad Modules Lite – Free Divi 5 & Divi 4 Modules for Divi Builder | 24 | 605 | 1,471 | 1k+ | | | Non-prefixed global variable |
| #217 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #218 | Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | 24 | 589 | 897 | 2k+ | | | Non-prefixed global variable |
| #219 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 225 | 300k+ | | | Nonce verification recommended |
| #220 | Timber | 24 | 85 | 128 | 20k+ | | | Non-prefixed hook name |
| #221 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | 24 | 938 | 2,935 | 200k+ | | | Non-prefixed global variable |
| #222 | VikRentItems Flexible Rental Management System | 24 | 4,755 | 4,639 | 600 | | | Non-prefixed global variable |
| #223 | WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors | 24 | 168 | 584 | 3k+ | | | Non-prefixed class |
| #224 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | | | Output is not escaped |
| #225 | Payment Plugins Braintree For WooCommerce | 24 | 731 | 755 | 2k+ | | | Output is not escaped |
| #226 | Payment Gateway for PayPal on WooCommerce | 24 | 163 | 637 | 10k+ | | | Non-prefixed hook name |
| #227 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | | Non Singular String Literal Domain |
| #228 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | | | SQL query is not prepared |
| #229 | WordLift – AI powered SEO – Schema | 24 | 278 | 949 | 400 | | | Non-prefixed hook name |
| #230 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 159 | 386 | 10m+ | | | Non-prefixed global variable |
| #231 | WP-Appbox | 24 | 418 | 390 | 2k+ | | | Missing Arg Domain |
| #232 | WP Layouts | 24 | 349 | 146 | 3k+ | | | Text Domain Mismatch |
| #233 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,777 | 394 | 40k+ | | | Text Domain Mismatch |
| #234 | WP-Stateless – Google Cloud Storage | 24 | 1,036 | 482 | 4k+ | | | Non Singular String Literal Domain |
| #235 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #236 | WPAdverts – Classifieds Plugin | 24 | 1,308 | 496 | 4k+ | | | Output is not escaped |
| #237 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | | | Output is not escaped |
| #238 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #239 | Broken Link Checker | 25 | 727 | 600 | 500k+ | | | Output is not escaped |
| #240 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #241 | CheckoutWC Lite | 25 | 1,399 | 852 | 3k+ | | | Text Domain Mismatch |
| #242 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #243 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #244 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #245 | DecaLog | 25 | 943 | 236 | 1k+ | | | Exception output is not escaped |
| #246 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #247 | Event Genius – Event Management, Events Calendar, Registration, and RSVP | 25 | 181 | 1,579 | 500 | | | Non-prefixed global variable |
| #248 | Events Made Easy | 25 | 506 | 6,317 | 1k+ | | | Non-prefixed function |
| #249 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 319 | 454 | 7k+ | | | Non-prefixed global variable |
| #250 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |