| #251 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 164 | 439 | 100k+ | | | Interpolated SQL is not prepared |
| #252 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #253 | Pre-Orders for WooCommerce | 30 | 568 | 261 | 7k+ | | | Output is not escaped |
| #254 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #255 | UX Flat | 30 | 539 | 203 | 1k+ | | | Missing Arg Domain |
| #256 | Checkout with Cash App on WooCommerce | 30 | 122 | 308 | 2k+ | | | Non-prefixed global variable |
| #257 | WPOrLogin – Custom Login, Social Login, Limit Attempts, Hide Login & reCAPTCHA | 30 | 484 | 222 | 2k+ | | | Unsafe printing function |
| #258 | Extra Product Options Builder for WooCommerce | 31 | 113 | 194 | 2k+ | | | Non-prefixed global variable |
| #259 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #260 | Compliance by Hu-manity.co | 31 | 153 | 335 | 900k+ | | | Missing nonce verification |
| #261 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |
| #262 | WP Gravity Forms Constant Contact Plugin | 31 | 684 | 164 | 600 | | | Text Domain Mismatch |
| #263 | GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets | 31 | 402 | 156 | 1k+ | | | Text Domain Mismatch |
| #264 | Accordion FAQ – Compatible With All Page Builder (Elementor, Gutenberg) | 31 | 460 | 201 | 30k+ | | | Non Singular String Literal Domain |
| #265 | Coming Soon Page & Maintenance Mode | 31 | 613 | 266 | 3k+ | | | Text Domain Mismatch |
| #266 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 31 | 45 | 373 | 4m+ | | | Non-prefixed global variable |
| #267 | Swatchly – Product Variation Swatches for WooCommerce | 31 | 540 | 214 | 5k+ | | | Output is not escaped |
| #268 | Team Builder – Team Member Showcase With Grid and slider, Compatible With Elementor, Gutenberg | 31 | 459 | 282 | 7k+ | | | Non Singular String Literal Domain |
| #269 | Discussion Board – WordPress Forum Plugin | 31 | 105 | 153 | 2k+ | | | Request data is not unslashed |
| #270 | HireZoot – Job Listings, Career Page & Recruitment Tool | 31 | 14 | 555 | 40k+ | | | Non-prefixed global variable |
| #271 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | | | Nonce verification recommended |
| #272 | WP ULike – Like & Dislike Buttons for Engagement and Feedback | 31 | 269 | 358 | 60k+ | | | Output is not escaped |
| #273 | Affiliate Coupons – Coupon Display Manager – Excellent Tool for Affiliate Marketers | 32 | 183 | 61 | 1k+ | | | Output is not escaped |
| #274 | aThemes Blocks | 32 | 192 | 1,034 | 6k+ | | | Non-prefixed global variable |
| #275 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #276 | Download Attachments | 32 | 69 | 188 | 8k+ | | | Non-prefixed hook name |
| #277 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | 32 | 560 | 198 | 5k+ | | | Text Domain Mismatch |
| #278 | Gallery Box | 32 | 395 | 43 | 1k+ | | | Text Domain Mismatch |
| #279 | WP Gravity Forms HubSpot | 32 | 771 | 160 | 600 | | | Text Domain Mismatch |
| #280 | CRM Perks Integration for Gravity Forms and Salesforce | 32 | 807 | 178 | 1k+ | | | Text Domain Mismatch |
| #281 | WP Gravity Forms Zoho CRM and Bigin | 32 | 750 | 174 | 400 | | | Text Domain Mismatch |
| #282 | Members – Membership & User Role Editor Plugin | 32 | 233 | 259 | 300k+ | | | Output is not escaped |
| #283 | Responsive Filterable Portfolio Gallery – Media Grid & Video Portfolio | 32 | 436 | 163 | 1k+ | | | Output is not escaped |
| #284 | Restrict Usernames Emails Characters | 32 | 327 | 367 | 1k+ | | | Output is not escaped |
| #285 | SEOPress – AI SEO Plugin & On-site SEO | 32 | 138 | 429 | 300k+ | | | Non-prefixed global variable |
| #286 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 33 | 57 | 204 | 1k+ | | | Non-prefixed global variable |
| #287 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 33 | 377 | 139 | 20k+ | | | Unsafe printing function |
| #288 | IP2Location Redirection | 33 | 198 | 122 | 7k+ | | | Output is not escaped |
| #289 | News Announcement Scroll | 33 | 237 | 259 | 2k+ | | | Non-prefixed global variable |
| #290 | Service Box – Icon Box Showcase | 33 | 385 | 230 | 3k+ | | | Non Singular String Literal Domain |
| #291 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #292 | Simple Sticky Add To Cart For WooCommerce | 33 | 401 | 70 | 900 | | | Text Domain Mismatch |
| #293 | Display Posts As List, Grid, Thumbs | 33 | 442 | 241 | 900 | | | Output is not escaped |
| #294 | Mercado Pago payments for WooCommerce | 33 | 614 | 63 | 100k+ | | | Short PHP open tag found |
| #295 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | | Missing Arg Domain |
| #296 | Connector for Gravity Forms and Google Sheets | 33 | 692 | 155 | 3k+ | | | Text Domain Mismatch |
| #297 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #298 | Advanced Coupons for WooCommerce Coupons & Store Credit | 34 | 74 | 214 | 20k+ | | | Non-prefixed global variable |
| #299 | Checkout Field Editor for WooCommerce – Checkout Manager | 34 | 122 | 64 | 20k+ | | | Text Domain Mismatch |
| #300 | Inavii Social Feed – Live Social Proof Gallery | 34 | 532 | 180 | 9k+ | | | Text Domain Mismatch |