| #151 | Extra Product Options Builder for WooCommerce | 30 | 112 | 210 | 2k+ | | | Non-prefixed global variable |
| #152 | Bitcoin Payments – Blockonomics | 30 | 206 | 214 | 2k+ | | | Output is not escaped |
| #153 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #154 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 28 | 722 | 200k+ | | | Non-prefixed global variable |
| #155 | Stackable – Page Builder Gutenberg Blocks | 30 | 482 | 87 | 100k+ | | | Non Singular String Literal Domain |
| #156 | Themify Portfolio Post | 30 | 217 | 80 | 30k+ | | | Text Domain Mismatch |
| #157 | Ultimate Post Kit Addons for Elementor | 30 | 13 | 403 | 30k+ | | | Missing nonce verification |
| #158 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 30 | 52 | 535 | 2k+ | | | Non-prefixed global variable |
| #159 | Delivery & Pickup Date Time for WooCommerce | 30 | 440 | 435 | 5k+ | | | Non-prefixed global variable |
| #160 | Return Refund and Exchange For WooCommerce | 30 | 25 | 724 | 4k+ | | | Non-prefixed global variable |
| #161 | HireZoot – Job Listings, Career Page & Recruitment Tool | 30 | 15 | 563 | 30k+ | | | Non-prefixed global variable |
| #162 | Yaad Sarig Payment Gateway For WC | 30 | 160 | 277 | 2k+ | | | Nonce verification recommended |
| #163 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #164 | MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | 31 | 673 | 275 | 2k+ | | | Text Domain Mismatch |
| #165 | MainWP Dashboard: Self-hosted WordPress Management for Agencies | 31 | 96 | 325 | 20k+ | | | Interpolated SQL is not prepared |
| #166 | WowRevenue – Product Bundles & Bulk Discounts | 31 | 14 | 2,056 | 1k+ | | | Non-prefixed global variable |
| #167 | Themify Store Locator | 31 | 237 | 125 | 500 | | | Text Domain Mismatch |
| #168 | Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | 31 | 61 | 292 | 4k+ | | | Post Not In exclude |
| #169 | Dynamic XML Sitemaps Generator for Google | 31 | 75 | 417 | 20k+ | | | Non-prefixed global variable |
| #170 | Advanced Access Manager – Access Governance for WordPress | 32 | 849 | 62 | 100k+ | | | Output is not escaped |
| #171 | Custom WP Store Locator | 32 | 26 | 245 | 400 | | | Non-prefixed global variable |
| #172 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 32 | 166 | 70 | 10k+ | | | Output is not escaped |
| #173 | Web Push Notifications – Webpushr | 32 | 168 | 287 | 10k+ | | | Output is not escaped |
| #174 | DHL eCommerce (Benelux) for WooCommerce | 33 | 221 | 330 | 2k+ | | | Nonce verification recommended |
| #175 | Plugin Organizer | 33 | 325 | 257 | 10k+ | | | Output is not escaped |
| #176 | Revolut Gateway for WooCommerce | 33 | 85 | 162 | 6k+ | | | Input is not sanitized |
| #177 | RTMKit | 33 | 11 | 388 | 50k+ | | | Non-prefixed global variable |
| #178 | Split Test For Elementor | 33 | 98 | 134 | 3k+ | | | Non-prefixed global variable |
| #179 | Pay. Payment Methods for WooCommerce | 33 | 318 | 104 | 3k+ | | | Non Singular String Literal Domain |
| #180 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 6k+ | | | Missing Arg Domain |
| #181 | Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages | 33 | 29 | 417 | 10k+ | | | Non-prefixed global variable |
| #182 | Auto Listings – Car Listings & Car Dealership Plugin for WordPress | 34 | 80 | 318 | 2k+ | | | Non-prefixed global variable |
| #183 | Nexi XPay | 34 | 495 | 275 | 7k+ | | | Text Domain Mismatch |
| #184 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 34 | 34 | 188 | 1k+ | | | Non-prefixed global variable |
| #185 | Kybernaut IČO DIČ | 34 | 80 | 58 | 2k+ | | | Missing nonce verification |
| #186 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 34 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #187 | Ad Invalid Click Protector (AICP) | 35 | 78 | 45 | 10k+ | | | Text Domain Mismatch |
| #188 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #189 | Arconix Shortcodes | 35 | 122 | 73 | 4k+ | | | Output is not escaped |
| #190 | Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro | 35 | 35 | 139 | 20k+ | | | Non-prefixed class |
| #191 | Better Plugin Compatibility Control | 35 | 7 | 4 | 4k+ | | | trademarked term |
| #192 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 23 | 68 | 30k+ | | | Non-prefixed hook name |
| #193 | Cloudflare | 35 | 28 | 85 | 200k+ | | | Non-prefixed namespace |
| #194 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 34 | 424 | 40k+ | | | Missing nonce verification |
| #195 | Conditional Menus | 35 | 93 | 68 | 60k+ | | | Text Domain Mismatch |
| #196 | Currency per Product for WooCommerce | 35 | 46 | 24 | 2k+ | | | Text Domain Mismatch |
| #197 | Custom Order Numbers for WooCommerce | 35 | 6 | 32 | 20k+ | | | Non-prefixed hook name |
| #198 | Custom Order Status for WooCommerce | 35 | 41 | 55 | 10k+ | | | Non-prefixed hook name |
| #199 | Events Calendar by FooEvents | 35 | 57 | 59 | 4k+ | | | Non-prefixed global variable |
| #200 | Glossary | 35 | 170 | 94 | 2k+ | | | Non Singular String Literal Domain |