| #201 | 404 Solution | 24 | 486 | 1,338 | 10k+ | | | Non-prefixed class |
| #202 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |
| #203 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #204 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #205 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | | Non-prefixed global variable |
| #206 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #207 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | | Non-prefixed global variable |
| #208 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #209 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |
| #210 | Captivate Sync | 24 | 173 | 557 | 1k+ | | | Non-prefixed global variable |
| #211 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #212 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #213 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #214 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #215 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 825 | 1,079 | 200k+ | | | Missing nonce verification |
| #216 | Smart Online Order for Clover | 24 | 1,746 | 1,246 | 1k+ | | | Text Domain Mismatch |
| #217 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #218 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #219 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 828 | 3,665 | 500 | | | Request data is not unslashed |
| #220 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #221 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #222 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #223 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #224 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #225 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #226 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | | | Output is not escaped |
| #227 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #228 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | | | Non-prefixed global variable |
| #229 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | | | Text Domain Mismatch |
| #230 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #231 | Simple Calendar – Google Calendar Plugin | 24 | 2,053 | 592 | 50k+ | | | Missing direct file access protection |
| #232 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,410 | 866 | 70k+ | | | Text Domain Mismatch |
| #233 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | | | Non-prefixed global variable |
| #234 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | | | Output is not escaped |
| #235 | Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | 24 | 969 | 2,140 | 7k+ | | | Non-prefixed global variable |
| #236 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | | | Non-prefixed global variable |
| #237 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #238 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #239 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #240 | Marketing Automation | 24 | 440 | 677 | 600 | | | Non-prefixed global variable |
| #241 | Musician's Pack for Elementor – Music Website Widgets & Templates | 24 | 1,725 | 228 | 400 | | | Text Domain Mismatch |
| #242 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,230 | 1,405 | 2k+ | | | Text Domain Mismatch |
| #243 | Newsletter Subscription Form – User Subscriptions Form, Capture Email | 24 | 385 | 829 | 1k+ | | | Non-prefixed global variable |
| #244 | Paymob for WooCommerce | 24 | 348 | 288 | 5k+ | | | Text Domain Mismatch |
| #245 | PDF Generator for WordPress Elementor | 24 | 513 | 271 | 1k+ | | | Exception output is not escaped |
| #246 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | | Output is not escaped |
| #247 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,160 | 2,407 | 500k+ | | | Non-prefixed namespace |
| #248 | Post Affiliate Pro | 24 | 293 | 335 | 500 | | | Nonce verification recommended |
| #249 | Premium Blocks – Gutenberg Blocks, Patterns & Templates | 24 | 140 | 308 | 2k+ | | | Non-prefixed function |
| #250 | Pz-LinkCard | 24 | 951 | 1,581 | 20k+ | | | Non-prefixed global variable |