| #351 | Captivate Sync | 24 | 173 | 557 | 1k+ | | | Non-prefixed global variable |
| #352 | Categorify – WordPress Media Library Category & File Manager | 24 | 573 | 1,385 | 1k+ | | | Non-prefixed global variable |
| #353 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #354 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 825 | 1,079 | 200k+ | | | Missing nonce verification |
| #355 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #356 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #357 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #358 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 828 | 3,665 | 500 | | | Request data is not unslashed |
| #359 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #360 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 24 | 529 | 357 | 1k+ | | | Text Domain Mismatch |
| #361 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | | | Non-prefixed global variable |
| #362 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #363 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #364 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #365 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 306 | 518 | 80k+ | | | Non-prefixed namespace |
| #366 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,665 | 4k+ | | | Non-prefixed global variable |
| #367 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #368 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 381 | 1k+ | | | Nonce verification recommended |
| #369 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | | | Non-prefixed global variable |
| #370 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #371 | ECPay Ecommerce for WooCommerce | 24 | 491 | 739 | 2k+ | | | Missing nonce verification |
| #372 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | | | Request data is not unslashed |
| #373 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | | Non-prefixed hook name |
| #374 | EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more | 24 | 669 | 1,550 | 100k+ | | | Output is not escaped |
| #375 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 107 | 1,461 | 10k+ | | | Non-prefixed global variable |
| #376 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | | | Non-prefixed global variable |
| #377 | Event Tickets and Registration | 24 | 3,411 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #378 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #379 | FileBird – WordPress Media Library Folders & File Manager | 24 | 239 | 377 | 200k+ | | | wp function not compatible with requires wp |
| #380 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #381 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #382 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | | | Non-prefixed global variable |
| #383 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #384 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 324 | 10k+ | | | Text Domain Mismatch |
| #385 | Genealogical Tree – Family Tree & Ancestry for WordPress | 24 | 560 | 1,641 | 600 | | | Non-prefixed global variable |
| #386 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #387 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #388 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 118 | 442 | 300k+ | | | Nonce verification recommended |
| #389 | Simple Calendar – Google Calendar Plugin | 24 | 2,053 | 592 | 50k+ | | | Missing direct file access protection |
| #390 | Grid/List View for WooCommerce | 24 | 1,127 | 543 | 2k+ | | | Output is not escaped |
| #391 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | | | Non-prefixed global variable |
| #392 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,410 | 866 | 70k+ | | | Text Domain Mismatch |
| #393 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #394 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | | | Non-prefixed global variable |
| #395 | Kenta Blocks – Responsive Blocks and block templates library | 24 | 564 | 1,405 | 2k+ | | | Non-prefixed global variable |
| #396 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 161 | 280 | 60k+ | | | Short PHP open tag found |
| #397 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,847 | 937 | 100k+ | | | Output is not escaped |
| #398 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | | | Non-prefixed global variable |
| #399 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | | | Text Domain Mismatch |
| #400 | Listdom: AI-powered Business Directory with Classifieds Ads Listings | 24 | 4,582 | 3,122 | 1k+ | | | Output is not escaped |