| #301 | Advanced Custom Order Status for WooCommerce | 54 | 45 | 33 | 500 | | | Text Domain Mismatch |
| #302 | Discount Rules for WooCommerce – Disco | Dynamic Pricing, Conditions, Bulk, Bundle, BOGO | 54 | 1 | 61 | 3k+ | | | Request data is not unslashed |
| #303 | Gravity Forms + Custom Post Types | 54 | 44 | 7 | 10k+ | | | Output is not escaped |
| #304 | LexonRank: AI Link Building, Free Backlinks, Geo & Local SEO Automation | 55 | 15 | 20 | 900 | | | Nonce verification recommended |
| #305 | UiCore Elements – Free widgets and templates for Elementor | 55 | 38 | 30 | 40k+ | | | Output is not escaped |
| #306 | WC Moneris Payment Gateway | 56 | 82 | 20 | 900 | | | Text Domain Mismatch |
| #307 | MC4WP: Mailchimp for WordPress | 57 | 1 | 238 | 1m+ | | | Non-prefixed global variable |
| #308 | Universal Google Analytics (GA3 and GA4) | 57 | 28 | 2 | 400 | | | Output is not escaped |
| #309 | WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click | 60 | 22 | 9 | 6k+ | | | Output is not escaped |
| #310 | Falcon – WordPress Optimizations & Tweaks | 62 | 47 | 66 | 2k+ | | | Short PHP open tag found |
| #311 | SmartVideo – Video Player and CDN | 62 | 412 | 47 | 1k+ | | | Text Domain Mismatch |
| #312 | Classic Editor and Classic Widgets | 63 | 19 | 41 | 20k+ | | | Nonce verification recommended |
| #313 | MooWoodle – WordPress Moodle LMS Integration, Sell Moodle Courses via WooCommerce | 63 | 10 | 45 | 800 | | | No Caching |
| #314 | MultiSafepay plugin for WooCommerce | 64 | 13 | 35 | 3k+ | | | Missing nonce verification |
| #315 | Inpost Paczkomaty | 65 | 30 | 60 | 8k+ | | | Text Domain Mismatch |
| #316 | Lime Connect (formerly Userlike) – WordPress Live Chat plugin | 65 | 22 | 3 | 900 | | | Output is not escaped |
| #317 | Fullscreen Galleria | 66 | 35 | 8 | 800 | | | Output is not escaped |
| #318 | WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation | 66 | 8 | 89 | 1k+ | | | Non-prefixed global variable |
| #319 | User Profile Picture | 66 | 9 | 8 | 4k+ | | | Missing nonce verification |
| #320 | Integration for Elementor forms – Sendinblue | 67 | 96 | 56 | 7k+ | | | Text Domain Mismatch |
| #321 | Smartarget – Chat Buttons & Engagement Apps | 68 | 31 | 11 | 900 | | | Non Singular String Literal Domain |
| #322 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #323 | 简数采集器 | 69 | 5 | 25 | 1k+ | | | Request data is not unslashed |
| #324 | SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) | 69 | 17 | 952 | 7k+ | | | Non-prefixed global variable |
| #325 | Multiple Roles | 74 | 8 | 18 | 5k+ | | | Non-prefixed global variable |
| #326 | AI Chatbot for WooCommerce – StoreAgent | 74 | 4 | 203 | 500 | | | Non-prefixed global variable |
| #327 | Ultimate Data Table Addon For Elementor | 75 | 8 | 7 | 1k+ | | | Exception output is not escaped |
| #328 | Addonify – WooCommerce Wishlist | 76 | 30 | 43 | 1k+ | | | Non-prefixed global variable |
| #329 | Lucky Orange | 76 | 56 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #330 | RS Template Builder For Elementor – Complete Control Over Headers, Footers & More | 76 | 14 | 56 | 2k+ | | | Post Not In exclude |
| #331 | Super RSS Reader – Add attractive RSS Feed Widget | 76 | 24 | 5 | 9k+ | | | Output is not escaped |
| #332 | Taggbox: Social Media Feed Widget | 76 | 24 | 114 | 1k+ | | | Direct Query |
| #333 | Modern Footnotes | 77 | 18 | 6 | 6k+ | | | Output is not escaped |
| #334 | Tagembed: Social Media Feeds and Customer Reviews Widget | 77 | 21 | 137 | 9k+ | | | Non-prefixed function |
| #335 | Image Alt Text | 78 | 5 | 19 | 9k+ | | | Nonce verification recommended |
| #336 | Master QR Code Generator – Fast & Easy QR Code Solution | 78 | 21 | 59 | 400 | | | Non-prefixed global variable |
| #337 | Media Focus Point | 78 | 12 | 6 | 6k+ | | | Output is not escaped |
| #338 | Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist | 79 | 121 | 42 | 3k+ | | | Text Domain Mismatch |
| #339 | MB Relationships | 82 | 1 | 35 | 1k+ | | | Non-prefixed class |
| #340 | Power Captcha reCAPTCHA | 82 | 4 | 8 | 900 | | | Database parameter is not escaped |
| #341 | Starter Templates by Gradient Themes | 83 | 27 | 7 | 3k+ | | | Text Domain Mismatch |
| #342 | RumbleTalk Live Group Chat – HTML5 | 83 | 9 | 13 | 700 | | | Missing direct file access protection |
| #343 | Stape Conversion Tracking | 84 | 24 | 4 | 10k+ | | | Non Singular String Literal Domain |
| #344 | GazChap's WooCommerce Auto Category Product Thumbnails | 85 | 4 | 8 | 1k+ | | | trademarked term |
| #345 | Unlimited Theme Addon For Elementor | 86 | 74 | 68 | 600 | | | Missing direct file access protection |
| #346 | Record of Consent Extension for Complianz | 87 | 2 | 3 | 500 | | | Interpolated SQL is not prepared |
| #347 | Variations as Single Product – Display Single Variation for WooCommerce | 87 | 9 | 33 | 1k+ | | | Direct Query |
| #348 | Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More | 88 | 20 | 116 | 40k+ | | | Non-prefixed hook name |
| #349 | GTM4WP – A Google Tag Manager (GTM) plugin for WordPress | 88 | 64 | 80 | 700k+ | | | Non-prefixed global variable |
| #350 | Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | 88 | 5 | 6 | 50k+ | | | Setting is missing a sanitization callback |