| #251 | WP Migrate Lite – Migration Made Easy | 23 | 369 | 255 | 200k+ | | | Exception output is not escaped |
| #252 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 30k+ | | | Missing Translators Comment |
| #253 | WP STAGING – WordPress Backup, Restore, Migration & Clone | 23 | 1,504 | 1,607 | 100k+ | | | Non-prefixed global variable |
| #254 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #255 | Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode | 23 | 907 | 2,014 | 900 | | | Non-prefixed global variable |
| #256 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #257 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #258 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #259 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | | | Direct Query |
| #260 | WSW – Shopify WooCommerce / WordPress Integration and Migration | 23 | 1,449 | 1,612 | 500 | | | Non-prefixed global variable |
| #261 | Xpro Addons For Beaver Builder – Lite | 23 | 3,454 | 640 | 700 | | | Text Domain Mismatch |
| #262 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,236 | 4,024 | 600 | | | Non-prefixed global variable |
| #263 | YITH WooCommerce Affiliates | 23 | 549 | 1,527 | 6k+ | | | Non-prefixed global variable |
| #264 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #265 | 404 Solution | 24 | 483 | 1,355 | 10k+ | | | Non-prefixed class |
| #266 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #267 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |
| #268 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #269 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | | | Output is not escaped |
| #270 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #271 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #272 | Starter Templates – AI-Powered Templates for Elementor & Gutenberg | 24 | 125 | 401 | 1m+ | | | Non-prefixed hook name |
| #273 | Atarim – Visual Feedback, Review & AI Collaboration | 24 | 765 | 442 | 1k+ | | | wp function not compatible with requires wp |
| #274 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | | Non-prefixed global variable |
| #275 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #276 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |
| #277 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #278 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #279 | Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | 24 | 262 | 1,718 | 1k+ | | | Non-prefixed global variable |
| #280 | Branda – White Label & Branding, Free Login Page Customizer | 24 | 3,174 | 820 | 20k+ | | | Text Domain Mismatch |
| #281 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | | | Text Domain Mismatch |
| #282 | BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 4,313 | 1,425 | 500 | | | Text Domain Mismatch |
| #283 | Builderall for WordPress | 24 | 4,778 | 1,307 | 1k+ | | | Text Domain Mismatch |
| #284 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 344 | 609 | 40k+ | | | Non-prefixed global variable |
| #285 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #286 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #287 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 818 | 1,092 | 200k+ | | | Missing nonce verification |
| #288 | Smart Online Order for Clover | 24 | 1,746 | 1,246 | 1k+ | | | Text Domain Mismatch |
| #289 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #290 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #291 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #292 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #293 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #294 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #295 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #296 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #297 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | | | Non-prefixed namespace |
| #298 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | | | Non-prefixed global variable |
| #299 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | | | Non-prefixed hook name |
| #300 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 381 | 1k+ | | | Nonce verification recommended |