| #201 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | | Output is not escaped |
| #202 | Related Posts Thumbnails Plugin for WordPress | 26 | 382 | 198 | 20k+ | | | Output is not escaped |
| #203 | Sliced Invoices – WordPress Invoice Plugin | 26 | 684 | 455 | 5k+ | | | Output is not escaped |
| #204 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | | Direct Query |
| #205 | Set Price Note (Units, Offers, Editions) for WooCommerce | 26 | 596 | 1,307 | 800 | | | Non-prefixed global variable |
| #206 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 149 | 273 | 50k+ | | | Non-prefixed global variable |
| #207 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #208 | WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | 27 | 692 | 381 | 3k+ | | | Text Domain Mismatch |
| #209 | Gallery – Photo Albums Plugin | 27 | 647 | 252 | 2k+ | | | Output is not escaped |
| #210 | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 27 | 1,629 | 360 | 7k+ | | | Unsafe printing function |
| #211 | GSpeech TTS – WordPress Text To Speech Plugin | 27 | 842 | 333 | 3k+ | | | Output is not escaped |
| #212 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #213 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #214 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #215 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #216 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | | Text Domain Mismatch |
| #217 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 27 | 25 | 1,320 | 3k+ | | | Non-prefixed global variable |
| #218 | Ultimate Watermark – Image Watermark, Image Protection & Bulk Watermarking | 27 | 164 | 303 | 1k+ | | | Nonce verification recommended |
| #219 | Under Construction, Coming Soon & Maintenance Mode | 27 | 401 | 148 | 10k+ | | | Output is not escaped |
| #220 | Video Gallery for WooCommerce – Add Product Video & Featured Video | 27 | 116 | 476 | 3k+ | | | Non-prefixed global variable |
| #221 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #222 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #223 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #224 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #225 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms | 28 | 659 | 359 | 400 | | | Text Domain Mismatch |
| #226 | Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin | 28 | 639 | 85 | 1k+ | | | Text Domain Mismatch |
| #227 | Deposits & Partial Payments for WooCommerce – Bayna | 28 | 593 | 336 | 1k+ | | | Output is not escaped |
| #228 | Educare – Students & Result Management System | 28 | 1,114 | 1,043 | 800 | | | Missing nonce verification |
| #229 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #230 | HootKit | 28 | 429 | 1,295 | 8k+ | | | Non-prefixed global variable |
| #231 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #232 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #233 | Perfect Brands for WooCommerce | 28 | 112 | 143 | 40k+ | | | Non-prefixed constant |
| #234 | Responsive Lightbox & Gallery | 28 | 139 | 513 | 100k+ | | | Non-prefixed hook name |
| #235 | Transliterator – Multilingual and Multi-script Text Conversion | 28 | 305 | 322 | 3k+ | | | Output is not escaped |
| #236 | Product Gallery Slider, Additional Variation Images for WooCommerce | 28 | 552 | 316 | 20k+ | | | Output is not escaped |
| #237 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #238 | Advanced coupon for WooCommerce | 29 | 472 | 242 | 900 | | | Text Domain Mismatch |
| #239 | Alt Text AI – Automatically generate image alt text for SEO and accessibility | 29 | 72 | 280 | 20k+ | | | Non-prefixed global variable |
| #240 | Order Delivery Date Time & Pickup for WooCommerce | 29 | 667 | 244 | 500 | | | Output is not escaped |
| #241 | Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms | 29 | 236 | 369 | 2k+ | | | Non-prefixed global variable |
| #242 | Countdown, Coming Soon, Maintenance – Countdown & Clock | 29 | 1,735 | 143 | 10k+ | | | Non Singular String Literal Domain |
| #243 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #244 | Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms | 29 | 625 | 351 | 1k+ | | | Text Domain Mismatch |
| #245 | Wishlist for WooCommerce | 29 | 610 | 296 | 600 | | | Output is not escaped |
| #246 | Liteweight Podcast – Host and Embed Podcast Episodes | 29 | 536 | 239 | 500 | | | Output is not escaped |
| #247 | Post Views Counter | 29 | 179 | 398 | 200k+ | | | Non-prefixed hook name |
| #248 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | | Direct Query |
| #249 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #250 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |