| #251 | Slideshow Gallery LITE | 24 | 896 | 414 | 5k+ | | | Output is not escaped |
| #252 | SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | 24 | 831 | 1,903 | 3k+ | | | Non-prefixed global variable |
| #253 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #254 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | | | Missing Translators Comment |
| #255 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 360 | 1,472 | 1k+ | | | Nonce verification recommended |
| #256 | Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | 24 | 589 | 897 | 2k+ | | | Non-prefixed global variable |
| #257 | Surbma | GDPR Proof Cookie Consent & Notice Bar | 24 | 825 | 1,309 | 500 | | | Non-prefixed global variable |
| #258 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | 24 | 12,049 | 494 | 100k+ | | | Text Domain Mismatch |
| #259 | Unlimited Elements For Elementor | 24 | 710 | 2,093 | 300k+ | | | Non-prefixed global variable |
| #260 | Video Conferencing with Zoom | 24 | 1,105 | 440 | 10k+ | | | Unsafe printing function |
| #261 | VikRentItems Flexible Rental Management System | 24 | 4,755 | 4,639 | 600 | | | Non-prefixed global variable |
| #262 | Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels | 24 | 1,615 | 1,381 | 70k+ | | | Text Domain Mismatch |
| #263 | Coupon Affiliates – Affiliate Plugin for WooCommerce | 24 | 947 | 3,133 | 5k+ | | | Non-prefixed global variable |
| #264 | Enhanced Ecommerce Google Analytics for WooCommerce | 24 | 771 | 1,480 | 2k+ | | | Non-prefixed global variable |
| #265 | Payment Gateway for PayPal on WooCommerce | 24 | 163 | 637 | 10k+ | | | Non-prefixed hook name |
| #266 | Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers | 24 | 480 | 1,272 | 7k+ | | | Non-prefixed function |
| #267 | AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia | 24 | 1,261 | 1,072 | 500 | | | Text Domain Mismatch |
| #268 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #269 | WP-Members Membership Plugin | 24 | 669 | 382 | 50k+ | | | Output is not escaped |
| #270 | WP Meta and Date Remover | 24 | 665 | 1,314 | 90k+ | | | Non-prefixed global variable |
| #271 | WP Recipe Maker | 24 | 494 | 942 | 50k+ | | | Non-prefixed global variable |
| #272 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,777 | 394 | 40k+ | | | Text Domain Mismatch |
| #273 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #274 | WPGSI: Spreadsheet Integration | 24 | 784 | 1,587 | 2k+ | | | Non-prefixed global variable |
| #275 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #276 | WpStream – Live Streaming, Video on Demand, Pay Per View | 24 | 1,724 | 742 | 3k+ | | | Text Domain Mismatch |
| #277 | YMC Filter | 24 | 12 | 1,729 | 4k+ | | | Non-prefixed global variable |
| #278 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | | | Non-prefixed global variable |
| #279 | AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing | 25 | 665 | 1,486 | 10k+ | | | Non-prefixed global variable |
| #280 | All 404 Redirect to Homepage | 25 | 140 | 301 | 200k+ | | | date date |
| #281 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #282 | Appointment Hour Booking – Booking Calendar | 25 | 262 | 1,253 | 10k+ | | | Non-prefixed global variable |
| #283 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |
| #284 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #285 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #286 | Breeze Cache | 25 | 218 | 800 | 400k+ | | | Non-prefixed global variable |
| #287 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #288 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 25 | 99 | 1,040 | 700k+ | | | Non-prefixed global variable |
| #289 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #290 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #291 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #292 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | | | Non-prefixed class |
| #293 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 554 | 982 | 200k+ | | | Output is not escaped |
| #294 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | | | Non-prefixed function |
| #295 | Events Made Easy | 25 | 506 | 6,317 | 1k+ | | | Non-prefixed function |
| #296 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #297 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #298 | Gallery Images Ape | 25 | 588 | 341 | 1k+ | | | Output is not escaped |
| #299 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #300 | Genesis Club Lite | 25 | 513 | 317 | 900 | | | Output is not escaped |