| #301 | IP2Location Country Blocker | 34 | 295 | 88 | 30k+ | | | Output is not escaped |
| #302 | MantraBrain Starter Sites | MantraBrain Theme Demo Importer | 34 | 117 | 61 | 1k+ | | | Output is not escaped |
| #303 | Meta Tag Manager | 34 | 142 | 321 | 80k+ | | | Nonce verification recommended |
| #304 | MPL-Publisher — Ebook & Audiobook Creator | 34 | 489 | 76 | 800 | | | Text Domain Mismatch |
| #305 | Progress Bar & Skill Bar | 34 | 175 | 179 | 1k+ | | | Non Singular String Literal Domain |
| #306 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | | | Text Domain Mismatch |
| #307 | Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | 34 | 261 | 863 | 20k+ | | | Non-prefixed global variable |
| #308 | Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin | 34 | 230 | 154 | 2k+ | | | Output is not escaped |
| #309 | Insert Headers And Footers | 34 | 83 | 113 | 300k+ | | | Non-prefixed global variable |
| #310 | WP Mail Logging | 34 | 76 | 258 | 300k+ | | | Nonce verification recommended |
| #311 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #312 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #313 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #314 | CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress | 35 | 20 | 10 | 100k+ | | | Missing Arg Domain |
| #315 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #316 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 20k+ | | | Text Domain Mismatch |
| #317 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | | | Text Domain Mismatch |
| #318 | BTCPay Server – Accept Bitcoin payments in WooCommerce | 35 | 48 | 86 | 1k+ | | | Missing nonce verification |
| #319 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 6k+ | | | Text Domain Mismatch |
| #320 | CF7 Views – Complete Entry Management for Contact Form 7 | 35 | 172 | 181 | 1k+ | | | Output is not escaped |
| #321 | Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | 35 | 30 | 168 | 1k+ | | | Non-prefixed global variable |
| #322 | Duplica – Duplicate Posts, Pages, Custom Posts or Users | 35 | 14 | 31 | 2k+ | | | Non-prefixed global variable |
| #323 | Email Validator for Contact Form 7 | 35 | 111 | 74 | 500 | | | SQL query is not prepared |
| #324 | Flat Preloader | 35 | 40 | 15 | 3k+ | | | Output is not escaped |
| #325 | Heartbeat Control | 35 | 27 | 18 | 80k+ | | | Missing Arg Domain |
| #326 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | | | Text Domain Mismatch |
| #327 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | | | Non-prefixed global variable |
| #328 | Login Page Styler – Custom WordPress Login Page Customizer & Security | 35 | 125 | 168 | 2k+ | | | Missing Arg Domain |
| #329 | Mini Ajax Cart for WooCommerce | 35 | 297 | 240 | 900 | | | Text Domain Mismatch |
| #330 | Restrict Elementor Widgets, Columns and Sections | 35 | 18 | 53 | 500 | | | Non-prefixed function |
| #331 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 82 | 148 | 100k+ | | | Output is not escaped |
| #332 | Simple History – Track, Log, and Audit WordPress Changes | 35 | 32 | 122 | 300k+ | | | Non-prefixed global variable |
| #333 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons | 35 | 33 | 293 | 10k+ | | | Non-prefixed global variable |
| #334 | Under Construction | 35 | 3 | 0 | 600k+ | | | Hidden files included |
| #335 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | | Text Domain Mismatch |
| #336 | Stock Manager for WooCommerce | 35 | 5 | 45 | 20k+ | | | Non-prefixed global variable |
| #337 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #338 | WP Duplicate Page | 35 | 44 | 50 | 60k+ | | | Text Domain Mismatch |
| #339 | WP-Paginate | 35 | 37 | 55 | 20k+ | | | Input is not validated |
| #340 | Integration for WooCommerce and QuickBooks | 35 | 263 | 125 | 1k+ | | | Output is not escaped |
| #341 | wpLingua – Automatic translation – Translate and make website multilingual | 35 | 79 | 167 | 2k+ | | | Nonce verification recommended |
| #342 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |
| #343 | Bulk Post Update Date | 36 | 96 | 66 | 10k+ | | | Unsafe printing function |
| #344 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #345 | Coming Soon, Under Construction & Maintenance Mode By Dazzler | 36 | 173 | 132 | 7k+ | | | Text Domain Mismatch |
| #346 | Dynamic Visibility for Elementor | 36 | 56 | 89 | 50k+ | | | Non-prefixed hook name |
| #347 | Easy Support Videos – Embed videos in the admin | 36 | 160 | 95 | 500 | | | Output is not escaped |
| #348 | Product Carousel Slider for Elementor | 36 | 148 | 63 | 1k+ | | | Text Domain Mismatch |
| #349 | Image Watermark | 36 | 76 | 179 | 40k+ | | | Missing nonce verification |
| #350 | Insert Headers and Footers Code – HT Script | 36 | 391 | 34 | 7k+ | | | Text Domain Mismatch |