| #151 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #152 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #153 | Ezoic | 24 | 373 | 378 | 10k+ | | | Output is not escaped |
| #154 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #155 | Featured Post with thumbnail | 24 | 158 | 122 | 300 | | | Output is not escaped |
| #156 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 838 | 1,304 | 600k+ | | | Non-prefixed global variable |
| #157 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | | | Text Domain Mismatch |
| #158 | RealHomes Memberships | 24 | 519 | 254 | 1k+ | | | Non Singular String Literal Domain |
| #159 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 254 | 815 | 40k+ | | | Non-prefixed global variable |
| #160 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #161 | Marketing Automation | 24 | 440 | 677 | 600 | | | Non-prefixed global variable |
| #162 | Musician's Pack for Elementor – Music Website Widgets & Templates | 24 | 1,835 | 243 | 400 | | | Text Domain Mismatch |
| #163 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,489 | 1,588 | 2k+ | | | Text Domain Mismatch |
| #164 | Newsletter Subscription Form – User Subscriptions Form, Capture Email | 24 | 385 | 829 | 1k+ | | | Non-prefixed global variable |
| #165 | PayPal Brasil para WooCommerce | 24 | 683 | 356 | 1k+ | | | Unsafe printing function |
| #166 | PDF Generator for WordPress Elementor | 24 | 513 | 271 | 1k+ | | | Exception output is not escaped |
| #167 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,578 | 2,901 | 500k+ | | | Non-prefixed namespace |
| #168 | Podlove Podcast Publisher | 24 | 2,107 | 1,399 | 3k+ | | | Output is not escaped |
| #169 | Post Affiliate Pro | 24 | 293 | 335 | 500 | | | Nonce verification recommended |
| #170 | Premium Blocks – Gutenberg Blocks, Patterns & Templates | 24 | 140 | 308 | 2k+ | | | Non-prefixed function |
| #171 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 60k+ | | | Unsafe printing function |
| #172 | Sailthru for WordPress | 24 | 239 | 266 | 1k+ | | | Non-prefixed global variable |
| #173 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,156 | 813 | 40k+ | | | SQL query is not prepared |
| #174 | Simple Membership | 24 | 2,305 | 1,753 | 40k+ | | | Unsafe printing function |
| #175 | Lasso Lite – Affiliate Link Manager & Product Displays | 24 | 291 | 305 | 4k+ | | | Non-prefixed global variable |
| #176 | SKT Templates – 100% Free Templates for Elementor & Gutenberg | 24 | 551 | 1,354 | 20k+ | | | Non-prefixed global variable |
| #177 | MoreConvert Wishlist for WooCommerce | 24 | 3,681 | 629 | 8k+ | | | Text Domain Mismatch |
| #178 | Social Media Auto Publish | 24 | 1,468 | 713 | 6k+ | | | Unsafe printing function |
| #179 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 8k+ | | | Exception output is not escaped |
| #180 | Tamara Checkout | 24 | 603 | 236 | 2k+ | | | Exception output is not escaped |
| #181 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 666 | 3,404 | 50k+ | | | Non-prefixed global variable |
| #182 | WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce | 24 | 733 | 499 | 5k+ | | | Output is not escaped |
| #183 | WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors | 24 | 168 | 584 | 3k+ | | | Non-prefixed class |
| #184 | pensopay Payments | 24 | 396 | 246 | 1k+ | | | Output is not escaped |
| #185 | wallee | 24 | 331 | 220 | 400 | | | Exception output is not escaped |
| #186 | European VAT Compliance Assistant for WooCommerce | 24 | 515 | 317 | 3k+ | | | Output is not escaped |
| #187 | AI ChatBot for WooCommerce – WoowBot | 24 | 259 | 486 | 1k+ | | | Text Domain Mismatch |
| #188 | WP Admin Audit | 24 | 1,051 | 781 | 1k+ | | | error log print r |
| #189 | WP Review Slider | 24 | 1,636 | 2,543 | 6k+ | | | Non-prefixed global variable |
| #190 | WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security | 24 | 728 | 1,556 | 50k+ | | | Non-prefixed global variable |
| #191 | پارسی دیت – Parsi Date | 24 | 110 | 293 | 100k+ | | | Non-prefixed hook name |
| #192 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,774 | 398 | 40k+ | | | Text Domain Mismatch |
| #193 | WP Travel – Ultimate Travel Booking System, Tour Management Engine | 24 | 229 | 1,962 | 4k+ | | | Non-prefixed hook name |
| #194 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,037 | 5,724 | 20k+ | | | Non-prefixed global variable |
| #195 | WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import | 24 | 1,196 | 3,898 | 20k+ | | | Direct Query |
| #196 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #197 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #198 | WpStream – Live Streaming, Video on Demand, Pay Per View | 24 | 1,728 | 742 | 3k+ | | | Text Domain Mismatch |
| #199 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,611 | 1,296 | 10k+ | | | Non Singular String Literal Domain |
| #200 | Booking Package | 25 | 1,698 | 3,978 | 10k+ | | | Missing nonce verification |