| #201 | Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder | 24 | 576 | 1,344 | 70k+ | | | Non-prefixed global variable |
| #202 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 319 | 611 | 40k+ | | | Non-prefixed global variable |
| #203 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #204 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #205 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 825 | 1,079 | 200k+ | | | Missing nonce verification |
| #206 | Smart Online Order for Clover | 24 | 1,746 | 1,246 | 1k+ | | | Text Domain Mismatch |
| #207 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #208 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #209 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #210 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #211 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #212 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #213 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,655 | 4k+ | | | Non-prefixed global variable |
| #214 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | | | Non-prefixed global variable |
| #215 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #216 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #217 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #218 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | | | Unsafe printing function |
| #219 | Fix Alt Text | 24 | 544 | 346 | 1k+ | | | Non Singular String Literal Domain |
| #220 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #221 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #222 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | | | Text Domain Mismatch |
| #223 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #224 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #225 | Connector Wizard (formerly LC Wizard) | 24 | 249 | 448 | 1k+ | | | Non-prefixed function |
| #226 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #227 | HT Mega Addons for Elementor – Elementor Widgets & Template Builder | 24 | 12,352 | 1,474 | 70k+ | | | Text Domain Mismatch |
| #228 | Keap Official Opt-in Forms | 24 | 829 | 1,046 | 1k+ | | | Non-prefixed global variable |
| #229 | KiviCare – Clinic & Patient Management System (EHR) | 24 | 223 | 880 | 2k+ | | | Direct Query |
| #230 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 165 | 393 | 60k+ | | | Short PHP open tag found |
| #231 | Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | 24 | 969 | 2,140 | 7k+ | | | Non-prefixed global variable |
| #232 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #233 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #234 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #235 | Marketing Automation | 24 | 440 | 677 | 600 | | | Non-prefixed global variable |
| #236 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | | | Unsafe printing function |
| #237 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #238 | Newsletter – Send awesome emails from WordPress | 24 | 898 | 2,217 | 200k+ | | | Non-prefixed global variable |
| #239 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | | Output is not escaped |
| #240 | Database Manager – WP Adminer | 24 | 1,005 | 2,752 | 20k+ | | | Non-prefixed global variable |
| #241 | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 24 | 599 | 1,532 | 10k+ | | | Non-prefixed global variable |
| #242 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #243 | Post Affiliate Pro | 24 | 293 | 335 | 500 | | | Nonce verification recommended |
| #244 | Products Compare for WooCommerce | 24 | 1,022 | 695 | 1k+ | | | Output is not escaped |
| #245 | PickPlugins Question Answer | 24 | 32 | 1,413 | 400 | | | Non-prefixed global variable |
| #246 | Sailthru for WordPress | 24 | 239 | 266 | 2k+ | | | Non-prefixed global variable |
| #247 | Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes | 24 | 235 | 330 | 600 | | | Non-prefixed global variable |
| #248 | SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | 24 | 239 | 304 | 1k+ | | | Direct Query |
| #249 | SEO Ultimate | 24 | 437 | 269 | 10k+ | | | Output is not escaped |
| #250 | Simple Membership | 24 | 2,297 | 1,734 | 40k+ | | | Unsafe printing function |