| #201 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 161 | 280 | 60k+ | | Short PHP open tag found |
| #202 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | Non-prefixed global variable |
| #203 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | Unsafe printing function |
| #204 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | Text Domain Mismatch |
| #205 | Simple Newsletter Plugin – Noptin | 24 | 66 | 591 | 10k+ | | Non-prefixed global variable |
| #206 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | Text Domain Mismatch |
| #207 | Sailthru for WordPress | 24 | 239 | 266 | 2k+ | | Non-prefixed global variable |
| #208 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | | Output is not escaped |
| #209 | Smart Variations Images & Swatches for WooCommerce | 24 | 990 | 1,486 | 1k+ | | Non-prefixed global variable |
| #210 | Tiered Pricing Table for WooCommerce | 24 | 658 | 1,881 | 10k+ | | Non-prefixed global variable |
| #211 | Timber | 24 | 85 | 128 | 20k+ | | Non-prefixed hook name |
| #212 | Ultimate Addons for Beaver Builder – Lite | 24 | 2,751 | 486 | 20k+ | | Text Domain Mismatch |
| #213 | Vimeography: Vimeo Video Gallery WordPress Plugin | 24 | 98 | 212 | 5k+ | | Nonce verification recommended |
| #214 | PDF Ink Lite – Free PDF Watermark & Password Protection | 24 | 226 | 561 | 2k+ | | Non-prefixed global variable |
| #215 | WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors | 24 | 168 | 584 | 4k+ | | Non-prefixed class |
| #216 | Country Based Payments for WooCommerce | 24 | 531 | 1,295 | 3k+ | | Non-prefixed global variable |
| #217 | WP Layouts | 24 | 349 | 146 | 3k+ | | Text Domain Mismatch |
| #218 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | 24 | 91 | 1,725 | 7k+ | | Non-prefixed hook name |
| #219 | YayCurrency – WooCommerce Multi-Currency Switcher | 24 | 373 | 623 | 8k+ | | Text Domain Mismatch |
| #220 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | Nonce verification recommended |
| #221 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | Non-prefixed hook name |
| #222 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 25 | 187 | 493 | 2k+ | | Non-prefixed global variable |
| #223 | Live Composer – Free WordPress Website Builder | 25 | 1,216 | 427 | 10k+ | | Output is not escaped |
| #224 | Qyrr – simply and modern QR-Code creation | 25 | 531 | 1,312 | 2k+ | | Non-prefixed global variable |
| #225 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | Exception output is not escaped |
| #226 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | | Non-prefixed global variable |
| #227 | Ultimate Post Kit Addons for Elementor | 25 | 182 | 412 | 30k+ | | Missing nonce verification |
| #228 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 25 | 279 | 518 | 4k+ | | Non-prefixed global variable |
| #229 | Wordfence Login Security | 25 | 248 | 418 | 70k+ | | Output is not escaped |
| #230 | FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) | 26 | 591 | 416 | 2k+ | | Exception output is not escaped |
| #231 | Barion Payment Gateway for WooCommerce | 26 | 71 | 221 | 6k+ | | Non-prefixed global variable |
| #232 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | Output is not escaped |
| #233 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | Exception output is not escaped |
| #234 | SP Move Login | 26 | 881 | 215 | 6k+ | | Text Domain Mismatch |
| #235 | Visitors Online by BestWebSoft | 26 | 512 | 269 | 1k+ | | Text Domain Mismatch |
| #236 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | Direct Query |
| #237 | Accordions – Responsive Accordion & FAQ Plugin for WordPress | 27 | 554 | 158 | 1k+ | | Text Domain Mismatch |
| #238 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | | Non-prefixed global variable |
| #239 | Login Security Solution | 27 | 216 | 154 | 4k+ | | Output is not escaped |
| #240 | MakeCommerce for WooCommerce | 27 | 826 | 452 | 3k+ | | Text Domain Mismatch |
| #241 | MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) | 27 | 154 | 551 | 5k+ | | Non-prefixed global variable |
| #242 | Packlink PRO for WooCommerce | 27 | 130 | 154 | 20k+ | | Non-prefixed global variable |
| #243 | StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart | 27 | 89 | 377 | 2k+ | | Non-prefixed global variable |
| #244 | WP Booking System – Booking Calendar | 27 | 502 | 550 | 20k+ | | Output is not escaped |
| #245 | WP Chat App | 27 | 120 | 274 | 100k+ | | Alternative PHP tag found |
| #246 | AForms — Form Builder for Price Calculator & Cost Estimation | 28 | 564 | 95 | 3k+ | | Text Domain Mismatch |
| #247 | AJAX Login and Registration modal popup + inline form | 28 | 157 | 261 | 3k+ | | Output is not escaped |
| #248 | Fluent Support – Helpdesk & Customer Support Ticket System | 28 | 50 | 271 | 10k+ | | Direct Query |
| #249 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 300k+ | | Missing Arg Domain |
| #250 | Laposta Signup Basic | 28 | 275 | 66 | 2k+ | | Output is not escaped |