| #251 | Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode | 23 | 933 | 2,002 | 900 | | | Non-prefixed global variable |
| #252 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #253 | WPMobile.App | 23 | 2,983 | 1,527 | 3k+ | | | Output is not escaped |
| #254 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #255 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | | | Direct Query |
| #256 | XT Ajax Add To Cart for WooCommerce | 23 | 1,003 | 1,690 | 1k+ | | | Non-prefixed global variable |
| #257 | XT Quick View for WooCommerce | 23 | 1,079 | 1,829 | 400 | | | Non-prefixed global variable |
| #258 | XT Variation Swatches for WooCommerce | 23 | 1,051 | 1,834 | 600 | | | Non-prefixed global variable |
| #259 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #260 | 404 Solution | 24 | 486 | 1,338 | 10k+ | | | Non-prefixed class |
| #261 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,230 | 1,464 | 7k+ | | | Output is not escaped |
| #262 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | | | Output is not escaped |
| #263 | Ivory Search – WordPress Search Plugin | 24 | 1,173 | 1,688 | 100k+ | | | Non-prefixed global variable |
| #264 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #265 | Affiliates Manager | 24 | 1,268 | 653 | 9k+ | | | Unsafe printing function |
| #266 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #267 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | | Non-prefixed global variable |
| #268 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #269 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #270 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | | Non-prefixed global variable |
| #271 | Banner Management For WooCommerce | 24 | 865 | 1,862 | 2k+ | | | Non-prefixed global variable |
| #272 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,837 | 1,063 | 1k+ | | | Text Domain Mismatch |
| #273 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #274 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #275 | Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News | 24 | 699 | 1,693 | 30k+ | | | Non-prefixed global variable |
| #276 | BrikPanel — WooCommerce Dashboard, Sales Report, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 3,961 | 1,281 | 400 | | | Text Domain Mismatch |
| #277 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 24 | 485 | 623 | 4k+ | | | Output is not escaped |
| #278 | Calculated Fields Form | 24 | 311 | 608 | 40k+ | | | Non-prefixed global variable |
| #279 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 825 | 1,079 | 200k+ | | | Missing nonce verification |
| #280 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #281 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #282 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 828 | 3,665 | 500 | | | Request data is not unslashed |
| #283 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #284 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #285 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #286 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #287 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #288 | Customer Reviews for WooCommerce | 24 | 2,206 | 2,443 | 80k+ | | | Output is not escaped |
| #289 | Democracy Poll | 24 | 387 | 436 | 7k+ | | | Short PHP open tag found |
| #290 | Digital License Manager | 24 | 295 | 670 | 700 | | | Non-prefixed hook name |
| #291 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 381 | 1k+ | | | Nonce verification recommended |
| #292 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,006 | 500 | | | Non-prefixed global variable |
| #293 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #294 | ECPay Ecommerce for WooCommerce | 24 | 491 | 739 | 2k+ | | | Missing nonce verification |
| #295 | EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more | 24 | 669 | 1,550 | 100k+ | | | Output is not escaped |
| #296 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #297 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 107 | 1,461 | 10k+ | | | Non-prefixed global variable |
| #298 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | | | Non-prefixed global variable |
| #299 | Event Tickets and Registration | 24 | 3,411 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #300 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |