| #251 | Fullscreen Menu | 23 | 537 | 1,287 | 2k+ | | | Non-prefixed global variable |
| #252 | AR for WordPress | 23 | 151 | 499 | 400 | | | Non-prefixed global variable |
| #253 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #254 | Shortcodes and extra features for Phlox theme | 23 | 412 | 424 | 90k+ | | | Output is not escaped |
| #255 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | | Text Domain Mismatch |
| #256 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | | | Output is not escaped |
| #257 | Beds24 Online Booking | 23 | 532 | 374 | 2k+ | | | wp function not compatible with requires wp |
| #258 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 23 | 1,053 | 967 | 700k+ | | | Missing Translators Comment |
| #259 | BSK PDF Manager | 23 | 1,576 | 625 | 7k+ | | | Text Domain Mismatch |
| #260 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | | | Non-prefixed global variable |
| #261 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #262 | Cart Notices for WooCommerce | 23 | 650 | 471 | 2k+ | | | Text Domain Mismatch |
| #263 | Products Suggestions for WooCommerce | 23 | 718 | 502 | 700 | | | Output is not escaped |
| #264 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. | 23 | 750 | 1,359 | 60k+ | | | Non-prefixed global variable |
| #265 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 485 | 1,155 | 5k+ | | | Non-prefixed global variable |
| #266 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 2,074 | 9k+ | | | Non-prefixed global variable |
| #267 | CLUEVO LMS, E-Learning Platform | 23 | 1,843 | 1,176 | 400 | | | Text Domain Mismatch |
| #268 | Content Aware Sidebars – Fastest Widget Area Plugin | 23 | 993 | 1,738 | 30k+ | | | Non-prefixed global variable |
| #269 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,245 | 1,275 | 10k+ | | | Non-prefixed global variable |
| #270 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #271 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 1k+ | | | Non-prefixed global variable |
| #272 | Free Theme Builder for Elementor – CRT Addons (Header, Footer, Archive, WooCommerce & 50+ Widgets) | 23 | 791 | 2,331 | 400 | | | Non-prefixed global variable |
| #273 | Currency Exchange for WooCommerce | 23 | 703 | 502 | 500 | | | Output is not escaped |
| #274 | CWW Companion | 23 | 307 | 223 | 1k+ | | | Output is not escaped |
| #275 | Auto Post Cleaner | 23 | 715 | 1,378 | 1k+ | | | Non-prefixed global variable |
| #276 | Disable Bloat for WordPress & WooCommerce | 23 | 863 | 1,325 | 10k+ | | | Non-prefixed global variable |
| #277 | Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification | 23 | 675 | 643 | 1k+ | | | Unsafe printing function |
| #278 | EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder | 23 | 355 | 1,541 | 2k+ | | | Non-prefixed global variable |
| #279 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | | Missing direct file access protection |
| #280 | Error Log Monitor | 23 | 694 | 1,414 | 20k+ | | | Non-prefixed global variable |
| #281 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | | | Text Domain Mismatch |
| #282 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #283 | Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light | 23 | 386 | 999 | 400 | | | Non-prefixed global variable |
| #284 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #285 | Fastcache by Host.it | 23 | 1,327 | 203 | 700 | | | Text Domain Mismatch |
| #286 | Featured Images in RSS for Mailchimp & More | 23 | 780 | 1,299 | 20k+ | | | Non-prefixed global variable |
| #287 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #288 | Filr – Secure document library | 23 | 775 | 1,317 | 800 | | | Non-prefixed global variable |
| #289 | Five-Star Ratings Shortcode | 23 | 604 | 1,317 | 600 | | | Non-prefixed global variable |
| #290 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | | Output is not escaped |
| #291 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #292 | Freshdesk (official) | 23 | 194 | 386 | 900 | | | Non-prefixed function |
| #293 | Front End PM | 23 | 978 | 2,264 | 5k+ | | | Non-prefixed global variable |
| #294 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | | | Non-prefixed global variable |
| #295 | Futurio Extra | 23 | 787 | 205 | 20k+ | | | Text Domain Mismatch |
| #296 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #297 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | | Output is not escaped |
| #298 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,621 | 2,744 | 10k+ | | | Output is not escaped |
| #299 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | | Short PHP open tag found |
| #300 | Anti-Malware Security and Brute-Force Firewall | 23 | 543 | 965 | 100k+ | | | Output is not escaped |