| #301 | Fix Alt Text | 24 | 544 | 346 | 1k+ | | | Non Singular String Literal Domain |
| #302 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #303 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #304 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | | | Text Domain Mismatch |
| #305 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #306 | GD Mail Queue | 24 | 502 | 582 | 700 | | | Output is not escaped |
| #307 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #308 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #309 | Easy Google Maps | 24 | 1,764 | 389 | 20k+ | | | Non Singular String Literal Domain |
| #310 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #311 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #312 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | | | Output is not escaped |
| #313 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | | | Non-prefixed global variable |
| #314 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,847 | 937 | 100k+ | | | Output is not escaped |
| #315 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | | | Text Domain Mismatch |
| #316 | Listdom: AI-powered Business Directory with Classifieds Ads Listings | 24 | 4,582 | 3,122 | 1k+ | | | Output is not escaped |
| #317 | Local Pickup for WooCommerce | 24 | 550 | 1,388 | 1k+ | | | Non-prefixed global variable |
| #318 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #319 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #320 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #321 | Admin Tweaks | 24 | 1,507 | 206 | 1k+ | | | Text Domain Mismatch |
| #322 | Mass Pages/Posts Creator | 24 | 736 | 1,364 | 1k+ | | | Non-prefixed global variable |
| #323 | Receive customer payments on Woocommerce | 24 | 549 | 1,419 | 1k+ | | | Non-prefixed global variable |
| #324 | Timetable and Event Schedule by MotoPress | 24 | 456 | 232 | 30k+ | | | Output is not escaped |
| #325 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,220 | 1,399 | 2k+ | | | Text Domain Mismatch |
| #326 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | | | Unsafe printing function |
| #327 | Ninja Forms – The Contact Form Builder That Grows With You | 24 | 749 | 1,525 | 600k+ | | | Nonce verification recommended |
| #328 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | | Text Domain Mismatch |
| #329 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #330 | Participants Database | 24 | 951 | 894 | 7k+ | | | SQL query is not prepared |
| #331 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | | Output is not escaped |
| #332 | Post Export Import with Media | 24 | 619 | 1,334 | 1k+ | | | Non-prefixed global variable |
| #333 | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 24 | 599 | 1,532 | 10k+ | | | Non-prefixed global variable |
| #334 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #335 | Product Catalog Simple | 24 | 1,555 | 1,982 | 1k+ | | | Output is not escaped |
| #336 | Premmerce Brands for WooCommerce | 24 | 700 | 1,344 | 2k+ | | | Non-prefixed global variable |
| #337 | PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin | 24 | 449 | 1,137 | 200k+ | | | Nonce verification recommended |
| #338 | Product Editor Pro – WooCommerce Bulk Edit: Prices, Stock, Images, Titles, CSV Import & More | 24 | 2,154 | 4,833 | 1k+ | | | Non-prefixed global variable |
| #339 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | | | Nonce verification recommended |
| #340 | Pz-LinkCard | 24 | 951 | 1,581 | 20k+ | | | Non-prefixed global variable |
| #341 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 70k+ | | | Unsafe printing function |
| #342 | Registrations for the Events Calendar – Event Registration Plugin | 24 | 405 | 943 | 7k+ | | | Non-prefixed global variable |
| #343 | Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More | 24 | 141 | 685 | 100k+ | | | Non-prefixed global variable |
| #344 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 414 | 573 | 10k+ | | | Missing Translators Comment |
| #345 | RS WP Book Showcase – A Complete Book Catalogue & Library System | 24 | 910 | 343 | 1k+ | | | Text Domain Mismatch |
| #346 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |
| #347 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,191 | 769 | 30k+ | | | Output is not escaped |
| #348 | SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit | 24 | 605 | 928 | 1k+ | | | Non-prefixed global variable |
| #349 | SEO Ultimate | 24 | 437 | 269 | 10k+ | | | Output is not escaped |
| #350 | Servebolt Optimizer | 24 | 1,958 | 681 | 1k+ | | | Text Domain Mismatch |