| #301 | Stackable – Page Builder Gutenberg Blocks | 31 | 477 | 90 | 100k+ | | | Non Singular String Literal Domain |
| #302 | Health Check & Troubleshooting | 35 | 264 | 238 | 300k+ | | | Missing Arg Domain |
| #303 | Widget Importer & Exporter | 98 | 9 | 1 | 200k+ | | | wp function not compatible with requires wp |
| #304 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |
| #305 | Sticky Header Effects for Elementor | 69 | 354 | 71 | 300k+ | | | Text Domain Mismatch |
| #306 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | | | SQL query is not prepared |
| #307 | Pods – Custom Content Types and Fields | 41 | 5 | 233 | 100k+ | | | Direct Query |
| #308 | TinyPNG – JPEG, PNG & WebP image compression | 72 | 40 | 73 | 100k+ | | | Non-prefixed global variable |
| #309 | OneSignal – Web Push Notifications | 38 | 53 | 64 | 70k+ | | | Output is not escaped |
| #310 | Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager | 34 | 32 | 307 | 100k+ | | | Non-prefixed global variable |
| #311 | MaxButtons – Create buttons | 25 | 626 | 404 | 70k+ | | | Output is not escaped |
| #312 | BlogVault Backup & Staging | 82 | 53 | 22 | 80k+ | | | Missing direct file access protection |
| #313 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #314 | CMB2 | 36 | 148 | 19 | 300k+ | | | Output is not escaped |
| #315 | WP Content Copy Protection & No Right Click | 42 | 126 | 135 | 100k+ | | | Unsafe printing function |
| #316 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #317 | YITH WooCommerce Ajax Product Filter | 23 | 463 | 1,527 | 80k+ | | | Non-prefixed global variable |
| #318 | Booking Calendar | 54 | 28 | 85 | 50k+ | | | Mixed line endings |
| #319 | VK Blocks | 85 | 79 | 4 | 100k+ | | | Missing direct file access protection |
| #320 | Strong Testimonials | 23 | 194 | 393 | 90k+ | | | Nonce verification recommended |
| #321 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 316 | 639 | 90k+ | | | Output is not escaped |
| #322 | Blog2Social: Social Media Auto Post & Scheduler | 32 | 7 | 957 | 50k+ | | | Direct Query |
| #323 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #324 | Force Regenerate Thumbnails | 35 | 12 | 17 | 200k+ | | | unlink unlink |
| #325 | WP Armour – Honeypot Anti Spam | 40 | 54 | 66 | 400k+ | | | Missing nonce verification |
| #326 | MapPress Maps for WordPress | 32 | 695 | 133 | 30k+ | | | Missing Arg Domain |
| #327 | BackUpWordPress | 27 | 245 | 271 | 90k+ | | | Non-prefixed global variable |
| #328 | TikTok | 35 | 31 | 22 | 200k+ | | | Missing Arg Domain |
| #329 | Post Duplicator | 60 | 33 | 24 | 200k+ | | | Missing direct file access protection |
| #330 | XML Sitemap & Google News | 47 | 270 | 224 | 100k+ | | | Non-prefixed global variable |
| #331 | Page Links To | 38 | 31 | 40 | 100k+ | | | Unsafe printing function |
| #332 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #333 | WP Job Manager | 27 | 93 | 582 | 80k+ | | | Non-prefixed hook name |
| #334 | Mollie Payments for WooCommerce | 33 | 70 | 123 | 100k+ | | | Dynamic hook name |
| #335 | Media Cleaner: Clean your WordPress! | 25 | 269 | 520 | 90k+ | | | Direct Query |
| #336 | Simple Custom Post Order | 47 | 9 | 76 | 300k+ | | | Direct Query |
| #337 | White Label CMS | 33 | 412 | 202 | 200k+ | | | Unsafe printing function |
| #338 | WP Mail Logging | 34 | 76 | 258 | 300k+ | | | Nonce verification recommended |
| #339 | WP Rollback – Rollback Plugins and Themes | 98 | 1 | 9 | 300k+ | | | Non-prefixed hook name |
| #340 | Tawk.To Live Chat | 89 | 102 | 27 | 100k+ | | | wp function not compatible with requires wp |
| #341 | Imsanity | 35 | 32 | 29 | 200k+ | | | Direct Query |
| #342 | Starter Sites & Templates by Neve | 35 | 28 | 88 | 100k+ | | | Non-prefixed hook name |
| #343 | Image Widget | 35 | 165 | 31 | 100k+ | | | Output is not escaped |
| #344 | The SEO Framework – Fast, Automated, Effortless. | 31 | 363 | 609 | 200k+ | | | Non-prefixed global variable |
| #345 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #346 | Duplicate Post | 27 | 447 | 274 | 300k+ | | | Unsafe printing function |
| #347 | Astra Widgets | 86 | 10 | 15 | 200k+ | | | Missing direct file access protection |
| #348 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,894 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #349 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 334 | 471 | 10k+ | | | Non-prefixed global variable |
| #350 | BulletProof Security | 0 | 5,048 | 4,949 | 20k+ | | | Output is not escaped |