| #251 | Broadcast | 38 | 22 | 107 | 1k+ | | | Direct Query |
| #252 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 38 | 167 | 72 | 5k+ | | | Text Domain Mismatch |
| #253 | Amazon Pay for WooCommerce | 38 | 30 | 117 | 10k+ | | | Non-prefixed class |
| #254 | Real-Time Post Statistics for WordPress | 38 | 43 | 65 | 1k+ | | | date date |
| #255 | Export WooCommerce Orders, Products, Customers & Coupons to Google Sheets | 38 | 53 | 90 | 700 | | | Output is not escaped |
| #256 | Gift Up Gift Cards for WordPress and WooCommerce | 39 | 94 | 60 | 5k+ | | | Output is not escaped |
| #257 | Graphina – Charts and Graphs For Elementor | 39 | 1,910 | 113 | 10k+ | | | Text Domain Mismatch |
| #258 | Greek Multi Tool – Greeklish Slugs, Permalinks & Transliteration | 39 | 160 | 82 | 1k+ | | | Unsafe printing function |
| #259 | Permalink Manager for WooCommerce | 39 | 115 | 20 | 8k+ | | | Short PHP open tag found |
| #260 | Easy Booking – WooCommerce Booking & Reservation Plugin | 39 | 62 | 67 | 4k+ | | | Non-prefixed global variable |
| #261 | Admin Search | 40 | 31 | 47 | 1k+ | | | Output is not escaped |
| #262 | Advanced Product Search For WooCommerce | 40 | 159 | 38 | 4k+ | | | Text Domain Mismatch |
| #263 | amCharts: Charts and Maps | 40 | 263 | 113 | 2k+ | | | Text Domain Mismatch |
| #264 | Pixel Tag Manager for WooCommerce – Google Analytics 4, Google Ads, and More Pixels | 40 | 69 | 228 | 3k+ | | | Missing nonce verification |
| #265 | Search with Typesense | 40 | 81 | 122 | 700 | | | Non-prefixed global variable |
| #266 | UiChemy — Figma Converter for Elementor, Gutenberg and Bricks | 40 | 7 | 100 | 9k+ | | | Nonce verification recommended |
| #267 | Country Based Restrictions for WooCommerce | 40 | 20 | 68 | 5k+ | | | Request data is not unslashed |
| #268 | NP Quote Request for WooCommerce | 40 | 91 | 145 | 8k+ | | | Non-prefixed global variable |
| #269 | Autocomplete Google Address | 41 | 22 | 67 | 2k+ | | | Nonce verification recommended |
| #270 | First payment date for WooCommerce Subscriptions | 41 | 45 | 25 | 400 | | | Output is not escaped |
| #271 | Kama SpamBlock | 41 | 37 | 11 | 5k+ | | | Heredoc Output Not Escaped |
| #272 | LIQUID BLOCKS – Slider, Carousel, Accordion | 41 | 52 | 34 | 4k+ | | | Unsafe printing function |
| #273 | WP Content Copy Protection & No Right Click | 41 | 127 | 135 | 100k+ | | | Unsafe printing function |
| #274 | WP User Profile Restriction | 41 | 42 | 9 | 400 | | | Output is not escaped |
| #275 | ActiveTrail – Contact Form 7 | 42 | 16 | 106 | 600 | | | Missing nonce verification |
| #276 | Announcer – Sticky Message Banner & Notification Bar | 42 | 111 | 27 | 10k+ | | | Output is not escaped |
| #277 | Goolytics – Simple Google Analytics | 42 | 37 | 5 | 3k+ | | | Unsafe printing function |
| #278 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 42 | 32 | 73 | 6k+ | | | Non-prefixed global variable |
| #279 | Ultimate Coming Soon Page, Maintenance Mode & Under Construction – Gutenberg Block Builder & Landing Page | 42 | 15 | 89 | 9k+ | | | Non-prefixed global variable |
| #280 | UPI QR Code Payment Gateway | 42 | 179 | 28 | 1k+ | | | Text Domain Mismatch |
| #281 | WP Media Category Management | 42 | 10 | 176 | 6k+ | | | Nonce verification recommended |
| #282 | LukasApps CAPTCHA tools for Contact Form 7 | 43 | 3 | 72 | 100k+ | | | Request data is not unslashed |
| #283 | Cookie Bar | 43 | 37 | 3 | 10k+ | | | Unsafe printing function |
| #284 | Exit Popup | 43 | 57 | 5 | 1k+ | | | Output is not escaped |
| #285 | LIQUID SPEECH BALLOON | 43 | 35 | 28 | 10k+ | | | Output is not escaped |
| #286 | SEO Backlink Monitor | 43 | 86 | 105 | 700 | | | Output is not escaped |
| #287 | Active Campaign & Contact Form 7 | 43 | 40 | 27 | 3k+ | | | Output is not escaped |
| #288 | StockPack – Stock photos from Unsplash, Adobe Stock and more | 46 | 35 | 51 | 6k+ | | | Nonce verification recommended |
| #289 | WPB Category Slider for WooCommerce – Responsive Product Category Carousel & Enhanced UX | 46 | 101 | 16 | 700 | | | Non Singular String Literal Domain |
| #290 | Better Badge – Custom Product Badges for WooCommerce | 47 | 22 | 47 | 500 | | | Non Singular String Literal Domain |
| #291 | FooSales – Point of Sale (POS) for WooCommerce | 47 | 97 | 191 | 700 | | | Non-prefixed global variable |
| #292 | 3CX Free Live Chat, Calls & Messaging | 47 | 24 | 16 | 100k+ | | | Output is not escaped |
| #293 | Import into Easy Property Listings | 49 | 335 | 24 | 1k+ | | | Text Domain Mismatch |
| #294 | CallPage – Callback Widget | 50 | 40 | 17 | 1k+ | | | Non Singular String Literal Domain |
| #295 | MB Custom Post Types & Custom Taxonomies | 50 | 61 | 55 | 10k+ | | | Missing Translators Comment |
| #296 | KIA Subtitle | 51 | 21 | 19 | 7k+ | | | Non-prefixed global variable |
| #297 | Firelight Lightbox | 52 | 78 | 97 | 200k+ | | | Non-prefixed global variable |
| #298 | Easy Property Listings | 52 | 22 | 63 | 5k+ | | | Post Not In exclude |
| #299 | Post My CF7 Form | 52 | 25 | 196 | 2k+ | | | Non-prefixed global variable |
| #300 | Maintenance Mode | 53 | 2 | 76 | 7k+ | | | Direct Query |