| #351 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 25 | 198 | 712 | 10k+ | | | Nonce verification recommended |
| #352 | PDF Invoice for WooCommerce + Drag and Drop Template Builder | 25 | 1,008 | 216 | 400 | | | wp function not compatible with requires wp |
| #353 | QuadMenu – Mega Menu | 25 | 2,128 | 455 | 10k+ | | | Output is not escaped |
| #354 | Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor | 25 | 9 | 981 | 5k+ | | | Non-prefixed global variable |
| #355 | Sensei LMS – Online Courses, Quizzes, & Learning | 25 | 56 | 928 | 10k+ | | | Nonce verification recommended |
| #356 | SEO Booster | 25 | 393 | 1,468 | 1k+ | | | Non-prefixed global variable |
| #357 | Themify Event Post | 25 | 397 | 143 | 3k+ | | | Output is not escaped |
| #358 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | | | Non-prefixed global variable |
| #359 | Ultimate Bootstrap Elements for Elementor | 25 | 6,326 | 122 | 6k+ | | | Text Domain Mismatch |
| #360 | Ultimate Post Kit Addons for Elementor | 25 | 182 | 412 | 30k+ | | | Missing nonce verification |
| #361 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | | | Text Domain Mismatch |
| #362 | Webcomic | 25 | 593 | 308 | 600 | | | Output is not escaped |
| #363 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 25 | 279 | 518 | 4k+ | | | Non-prefixed global variable |
| #364 | Product Table for WooCommerce | 25 | 183 | 896 | 5k+ | | | Non-prefixed global variable |
| #365 | Pay with Vipps and MobilePay for WooCommerce | 25 | 846 | 514 | 5k+ | | | Output is not escaped |
| #366 | HUSKY – Products Filter Professional for WooCommerce | 25 | | 1,895 | 90k+ | | | Non-prefixed global variable |
| #367 | Wordfence Login Security | 25 | 248 | 418 | 70k+ | | | Output is not escaped |
| #368 | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | 25 | 2,652 | 2,091 | 10k+ | | | Text Domain Mismatch |
| #369 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 610 | 2,465 | 600k+ | | | Non-prefixed global variable |
| #370 | Team Members Showcase | 25 | 591 | 1,494 | 4k+ | | | Non-prefixed global variable |
| #371 | YT Player – Embed and Customize Video Players | 25 | 3,163 | 261 | 1k+ | | | Output is not escaped |
| #372 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 6k+ | | | Exception output is not escaped |
| #373 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #374 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | | Output is not escaped |
| #375 | JustTables – WooCommerce Product Table | 26 | 534 | 652 | 600 | | | Non-prefixed global variable |
| #376 | Klarna for WooCommerce | 26 | 284 | 507 | 30k+ | | | Dynamic hook name |
| #377 | Loco Translate | 26 | 454 | 242 | 1m+ | | | Output is not escaped |
| #378 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |
| #379 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 576 | 6k+ | | | Request data is not unslashed |
| #380 | PDF for WPForms + Drag and Drop Template Builder | 26 | 674 | 113 | 1k+ | | | wp function not compatible with requires wp |
| #381 | Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | 26 | 525 | 240 | 600 | | | Text Domain Mismatch |
| #382 | Profile Extra Fields by BestWebSoft | 26 | 514 | 532 | 2k+ | | | Text Domain Mismatch |
| #383 | StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart | 26 | 125 | 420 | 2k+ | | | Non-prefixed global variable |
| #384 | UpdraftCentral Dashboard | 26 | 267 | 180 | 6k+ | | | Missing Translators Comment |
| #385 | Virtue/Ascend/Pinnacle Toolkit | 26 | 605 | 300 | 30k+ | | | Output is not escaped |
| #386 | Addon Elements for Elementor (formerly Elementor Addon Elements) | 27 | 4,065 | 103 | 90k+ | | | Text Domain Mismatch |
| #387 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 144 | 265 | 50k+ | | | Non-prefixed global variable |
| #388 | Contact Form Generator : Creative form builder for WordPress | 27 | 1,076 | 1,510 | 800 | | | Output is not escaped |
| #389 | Custom Scrollbar | 27 | 184 | 191 | 2k+ | | | Output is not escaped |
| #390 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 27 | 213 | 495 | 2k+ | | | Non-prefixed global variable |
| #391 | Hester Core | 27 | 253 | 103 | 10k+ | | | Output is not escaped |
| #392 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #393 | MW WP Form | 27 | 334 | 219 | 200k+ | | | Output is not escaped |
| #394 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | | | Output is not escaped |
| #395 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #396 | RS Elements Elementor Addon | 27 | 2,026 | 321 | 500 | | | Text Domain Mismatch |
| #397 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 27 | 25 | 1,320 | 3k+ | | | Non-prefixed global variable |
| #398 | Verge3D Publishing and E-Commerce | 27 | 245 | 298 | 400 | | | Nonce verification recommended |
| #399 | Tabbed Category Product Listing for Woocommerce | 27 | 423 | 111 | 1k+ | | | Text Domain Mismatch |
| #400 | WP Job Manager | 27 | 93 | 582 | 80k+ | | | Non-prefixed hook name |