| #201 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 28 | 132 | 256 | 50k+ | | Non-prefixed global variable |
| #202 | گیتلند | درگاه پرداخت هوشمند گیتلند | 28 | 327 | 235 | 2k+ | | Output is not escaped |
| #203 | Geo Mashup | 28 | 775 | 232 | 1k+ | | Text Domain Mismatch |
| #204 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 300k+ | | Missing Arg Domain |
| #205 | Loginfy – Custom Login Page Customizer | 28 | 338 | 398 | 2k+ | | Output is not escaped |
| #206 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | | Non-prefixed global variable |
| #207 | Store Hours for WooCommerce | 28 | 525 | 60 | 2k+ | | Output is not escaped |
| #208 | Perfect Brands for WooCommerce | 28 | 112 | 143 | 40k+ | | Non-prefixed constant |
| #209 | ووکامرس فارسی | 28 | 157 | 215 | 90k+ | | Output is not escaped |
| #210 | Product Sort and Display for WooCommerce | 28 | 199 | 235 | 2k+ | | Output is not escaped |
| #211 | WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce | 28 | 173 | 226 | 5k+ | | Output is not escaped |
| #212 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | | Missing Translators Comment |
| #213 | Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | 29 | 20 | 825 | 20k+ | | Non-prefixed namespace |
| #214 | Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization | 29 | 80 | 162 | 200k+ | | Nonce verification recommended |
| #215 | Page View Count | 29 | 108 | 247 | 10k+ | | Dynamic hook name |
| #216 | Responder | 29 | 77 | 185 | 3k+ | | Non-prefixed global variable |
| #217 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | Direct Query |
| #218 | Shiptastic for WooCommerce | 29 | 136 | 630 | 10k+ | | Non-prefixed global variable |
| #219 | BuddyPress Builder for Elementor – BuddyBuilder | 29 | 348 | 329 | 1k+ | | Text Domain Mismatch |
| #220 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | Output is not escaped |
| #221 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | Missing direct file access protection |
| #222 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | Text Domain Mismatch |
| #223 | WP Popular Posts | 29 | 77 | 300 | 100k+ | | Non-prefixed global variable |
| #224 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | | Non-prefixed global variable |
| #225 | Kargo Takip, Kargo SMS, İlçe Mahalle Sözleşme by Hezarfen | 30 | 69 | 276 | 2k+ | | Non-prefixed global variable |
| #226 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | | Non-prefixed global variable |
| #227 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | Database parameter is not escaped |
| #228 | SmartCrawl SEO checker, analyzer & optimizer | 30 | 347 | 1,307 | 20k+ | | Non-prefixed global variable |
| #229 | WooCommerce Stripe Payment Gateway | 30 | 173 | 591 | 700k+ | | Non-prefixed hook name |
| #230 | WooPayments: Integrated WooCommerce Payments | 30 | 177 | 298 | 900k+ | | Exception output is not escaped |
| #231 | WCPOS – Point of Sale (POS) plugin for WooCommerce | 30 | 77 | 228 | 5k+ | | Nonce verification recommended |
| #232 | WooCommerce Tax (formerly WooCommerce Shipping & Tax) | 30 | 103 | 198 | 600k+ | | Non-prefixed class |
| #233 | WP 2FA – Two-factor authentication for WordPress | 30 | 269 | 380 | 100k+ | | Exception output is not escaped |
| #234 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | Output is not escaped |
| #235 | a3 Lazy Load | 31 | 83 | 240 | 90k+ | | Dynamic hook name |
| #236 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | Nonce verification recommended |
| #237 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | Text Domain Mismatch |
| #238 | MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | 31 | 664 | 273 | 3k+ | | Text Domain Mismatch |
| #239 | Up2pay e-Transactions WooCommerce Payment Gateway | 31 | 459 | 175 | 4k+ | | Text Domain Mismatch |
| #240 | FastDup – Fastest WordPress Migration & Duplicator | 31 | 83 | 66 | 5k+ | | wp function not compatible with requires wp |
| #241 | Form Vibes – Database Manager for Forms | 31 | 176 | 284 | 10k+ | | Text Domain Mismatch |
| #242 | FraudLabs Pro for WooCommerce | 31 | 169 | 213 | 1k+ | | Request data is not unslashed |
| #243 | Melapress Login Security | 31 | 69 | 278 | 2k+ | | Non-prefixed global variable |
| #244 | افزونه پیامک ووکامرس Persian WooCommerce SMS | 31 | 72 | 269 | 40k+ | | Nonce verification recommended |
| #245 | Swatchly – Product Variation Swatches for WooCommerce | 31 | 540 | 214 | 5k+ | | Output is not escaped |
| #246 | WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More | 31 | 165 | 271 | 5m+ | | Non-prefixed global variable |
| #247 | PayPal Zettle POS for WooCommerce | 31 | 302 | 44 | 4k+ | | Exception output is not escaped |
| #248 | Advanced Access Manager – Access Governance for WordPress | 32 | 849 | 62 | 100k+ | | Output is not escaped |
| #249 | aThemes Blocks | 32 | 192 | 1,034 | 6k+ | | Non-prefixed global variable |
| #250 | Speed Kit | 32 | 296 | 73 | 2k+ | | Output is not escaped |