| #301 | Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher | 27 | 465 | 345 | 3k+ | | | Text Domain Mismatch |
| #302 | MW WP Form | 27 | 334 | 219 | 200k+ | | | Output is not escaped |
| #303 | Quick Paypal Payments | 27 | 101 | 303 | 1k+ | | | Non-prefixed function |
| #304 | Sign-up Sheets | 27 | 325 | 363 | 1k+ | | | Output is not escaped |
| #305 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #306 | Video Gallery for WooCommerce – Add Product Video & Featured Video | 27 | 116 | 476 | 3k+ | | | Non-prefixed global variable |
| #307 | Whols – Wholesale Prices and B2B Store Solution for WooCommerce | 27 | 228 | 235 | 2k+ | | | Output is not escaped |
| #308 | Wiremo – Product Reviews for WooCommerce | 27 | 445 | 212 | 700 | | | Output is not escaped |
| #309 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #310 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |
| #311 | Dynamic User Directory | 28 | 403 | 256 | 1k+ | | | Output is not escaped |
| #312 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 831 | 4k+ | | | Missing nonce verification |
| #313 | Educare – Students & Result Management System | 28 | 1,114 | 1,043 | 800 | | | Missing nonce verification |
| #314 | Geo Mashup | 28 | 775 | 232 | 1k+ | | | Text Domain Mismatch |
| #315 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |
| #316 | Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery | 28 | 145 | 259 | 5k+ | | | Post Not In exclude |
| #317 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #318 | Rating by BestWebSoft | 28 | 509 | 218 | 500 | | | Text Domain Mismatch |
| #319 | Themesflat Addons For Elementor | 28 | 714 | 227 | 40k+ | | | Output is not escaped |
| #320 | Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor | 28 | 291 | 292 | 20k+ | | | Output is not escaped |
| #321 | WP ADA Compliance Check Basic | 28 | 785 | 177 | 3k+ | | | Text Domain Mismatch |
| #322 | WP Mapbox GL JS Maps | 28 | 104 | 119 | 1k+ | | | Output is not escaped |
| #323 | WP Travel Gutenberg Blocks | 28 | 485 | 157 | 900 | | | Output is not escaped |
| #324 | WPS Bidouille | 28 | 472 | 215 | 10k+ | | | Output is not escaped |
| #325 | Adminimize | 29 | 296 | 691 | 200k+ | | | Non-prefixed global variable |
| #326 | AppPresser – Mobile App Framework | 29 | 262 | 214 | 1k+ | | | Text Domain Mismatch |
| #327 | Plugin BlueX for WooCommerce | 29 | 431 | 216 | 2k+ | | | Text Domain Mismatch |
| #328 | reCaptcha by BestWebSoft | 29 | 474 | 272 | 100k+ | | | Text Domain Mismatch |
| #329 | Icyclub | 29 | 557 | 139 | 10k+ | | | Output is not escaped |
| #330 | PlatiOnline Payments | 29 | 304 | 110 | 700 | | | Output is not escaped |
| #331 | Post Timeline | 29 | 91 | 200 | 800 | | | Missing nonce verification |
| #332 | Post Views Counter | 29 | 179 | 398 | 200k+ | | | Non-prefixed hook name |
| #333 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #334 | Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft | 29 | 487 | 262 | 800 | | | Text Domain Mismatch |
| #335 | SamedayCourier Shipping | 29 | 336 | 269 | 4k+ | | | Non Singular String Literal Domain |
| #336 | Slider by BestWebSoft | 29 | 478 | 336 | 400 | | | Text Domain Mismatch |
| #337 | Tilda-publishing | 29 | 219 | 78 | 700 | | | Output is not escaped |
| #338 | User Verification by PickPlugins | 29 | 41 | 314 | 5k+ | | | Request data is not unslashed |
| #339 | Custom Post Types and Custom Fields creator – WCK | 29 | 1,300 | 143 | 10k+ | | | Text Domain Mismatch |
| #340 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | | | Output is not escaped |
| #341 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | | | Output is not escaped |
| #342 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #343 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #344 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #345 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #346 | Element Invader – Template Kits for Elementor | 30 | 274 | 130 | 3k+ | | | Output is not escaped |
| #347 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #348 | Epeken All Kurir for Woocommerce | 30 | 590 | 1,246 | 500 | | | Missing nonce verification |
| #349 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #350 | MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | 30 | 63 | 227 | 600k+ | | | Non-prefixed global variable |