| #351 | Responsive Menu – Create Mobile-Friendly Menu | 34 | 68 | 40 | 70k+ | | | Nonce verification recommended |
| #352 | Menu Icons by Themeisle – Add Icons to Navigation Menus | 51 | 34 | 22 | 100k+ | | | Output is not escaped |
| #353 | Quads Ads Manager for Google AdSense | 99 | | 8 | 20k+ | | | Non-prefixed constant |
| #354 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #355 | JetBackup – Backup, Restore & Migrate | 10 | 1,563 | 149 | 200k+ | | | Exception output is not escaped |
| #356 | Disqus Comment System | 54 | 17 | 33 | 40k+ | | | Non-prefixed hook name |
| #357 | Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | 62 | 81 | 100 | 40k+ | | | Missing direct file access protection |
| #358 | Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 31 | 837 | 295 | 100k+ | | | Unsafe printing function |
| #359 | List category posts | 37 | 161 | 17 | 80k+ | | | Output is not escaped |
| #360 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 22 | 444 | 243 | 200k+ | | | Text Domain Mismatch |
| #361 | Presto Player | 35 | 37 | 78 | 100k+ | | | Missing Arg Domain |
| #362 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 663 | 3,353 | 50k+ | | | Non-prefixed global variable |
| #363 | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | 23 | 170 | 821 | 40k+ | | | Non-prefixed global variable |
| #364 | SpeedyCache – Cache, Optimization, Performance | 31 | 65 | 118 | 600k+ | | | Input is not validated |
| #365 | Simple Share Buttons Adder | 83 | 157 | 202 | 40k+ | | | Missing direct file access protection |
| #366 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #367 | WebP Express | 21 | 160 | 427 | 300k+ | | | Non-prefixed global variable |
| #368 | Product Import Export for WooCommerce – Import Export Product CSV Suite | 64 | 246 | 766 | 80k+ | | | Non-prefixed global variable |
| #369 | Simple Page Ordering | 82 | 11 | 9 | 100k+ | | | Missing Arg Domain |
| #370 | Theme My Login | 32 | 251 | 549 | 60k+ | | | Non-prefixed function |
| #371 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #372 | Qi Addons For Elementor | 79 | 33 | 339 | 200k+ | | | Non-prefixed global variable |
| #373 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,397 | 30k+ | | | Non-prefixed global variable |
| #374 | Tutor LMS – eLearning and online course solution | 24 | 328 | 4,409 | 100k+ | | | Non-prefixed global variable |
| #375 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | 48 | 63 | 273 | 100k+ | | | Non-prefixed global variable |
| #376 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #377 | Companion Auto Update | 33 | 159 | 298 | 40k+ | | | Direct Query |
| #378 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #379 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #380 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | | | Non-prefixed namespace |
| #381 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #382 | XPoster – Share to Bluesky and Mastodon | 62 | 26 | 36 | 10k+ | | | Missing nonce verification |
| #383 | ReCaptcha v2 for Contact Form 7 | 44 | 12 | 30 | 200k+ | | | Nonce verification recommended |
| #384 | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 23 | 91 | 694 | 300k+ | | | Non-prefixed namespace |
| #385 | 3CX Free Live Chat, Calls & Messaging | 47 | 24 | 16 | 100k+ | | | Output is not escaped |
| #386 | Activity Log – Monitor & Record User Changes | 38 | 81 | 149 | 200k+ | | | Nonce verification recommended |
| #387 | WP-Members Membership Plugin | 24 | 669 | 382 | 50k+ | | | Output is not escaped |
| #388 | Advanced Order Export For WooCommerce | 91 | | 475 | 100k+ | | | Non-prefixed hook name |
| #389 | Optimize Database after Deleting Revisions | 36 | 644 | 127 | 60k+ | | | Output is not escaped |
| #390 | Real Media Library: Media Library Folder & File Manager | 47 | 1 | 365 | 100k+ | | | Direct Query |
| #391 | AdRotate Banner Manager | 25 | 1,363 | 846 | 20k+ | | | Unsafe printing function |
| #392 | Colibri Page Builder | 82 | 138 | 31 | 90k+ | | | Missing direct file access protection |
| #393 | FiboSearch – Ajax Search for WooCommerce | 25 | 603 | 302 | 100k+ | | | Output is not escaped |
| #394 | WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat | 35 | 28 | 31 | 90k+ | | | Input is not sanitized |
| #395 | 301 Redirects – Redirect Manager | 88 | 6 | 71 | 300k+ | | | Non-prefixed global variable |
| #396 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 958 | 738 | 60k+ | | | Text Domain Mismatch |
| #397 | WP Recipe Maker | 24 | 494 | 942 | 50k+ | | | Non-prefixed global variable |
| #398 | Contact Form & SMTP Plugin for WordPress by PirateForms | 93 | 14 | 102 | 30k+ | | | Non-prefixed hook name |
| #399 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,088 | 888 | 60k+ | | | SQL query is not prepared |
| #400 | Greenshift – animation and page builder blocks | 34 | 33 | 272 | 70k+ | | | Non-prefixed global variable |