| #151 | Advanced Contact form 7 DB | 24 | 764 | 1,960 | 70k+ | | | Non-prefixed global variable |
| #152 | Advanced FAQ Manager | 43 | 8 | 59 | 2k+ | | | Input is not sanitized |
| #153 | Advanced Media Offloader | 38 | 57 | 93 | 5k+ | | | error log error log |
| #154 | SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | 36 | 4 | 342 | 2k+ | | | Nonce verification recommended |
| #155 | Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates | 99 | | 13 | 10k+ | | | Non-prefixed constant |
| #156 | Arconix Shortcodes | 34 | 129 | 108 | 4k+ | | | Output is not escaped |
| #157 | Arile Extra | 30 | 537 | 570 | 10k+ | | | Non-prefixed global variable |
| #158 | Auto Block Recovery | 99 | 1 | 1 | 600 | | | Missing direct file access protection |
| #159 | AxiaChat AI – Free AI Chatbot (Answers Customers Automatically) | 41 | 1 | 135 | 2k+ | | | Interpolated SQL is not prepared |
| #160 | Bangla Web Fonts | 93 | 3 | 0 | 2k+ | | | Non Enqueued Stylesheet |
| #161 | Bayarcash WooCommerce | 34 | 148 | 138 | 700 | | | Non Singular String Literal Domain |
| #162 | BD Courier Order Ratio Checker | 100 | | 4 | 2k+ | | | Non-prefixed class |
| #163 | Before After Image Comparison Slider for Elementor | 38 | 63 | 36 | 10k+ | | | Text Domain Mismatch |
| #164 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | | | Text Domain Mismatch |
| #165 | Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | 93 | 2 | 4 | 10k+ | | | Missing Version |
| #166 | Block AI Crawlers | 100 | | 0 | 1k+ | | | No open findings |
| #167 | Block Editor Colors | 88 | 23 | 9 | 3k+ | | | Missing Arg Domain |
| #168 | Blocks CSS: CSS Editor for Gutenberg Blocks | 99 | | 5 | 5k+ | | | trademarked term |
| #169 | BNE Testimonials | 29 | 521 | 102 | 1k+ | | | Output is not escaped |
| #170 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #171 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #172 | BuddyPress | 23 | 584 | 9,012 | 100k+ | | | Non-prefixed function |
| #173 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #174 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #175 | bunny.net – WordPress CDN Plugin | 37 | 165 | 159 | 10k+ | | | Output is not escaped |
| #176 | Cache Warmer | 38 | 32 | 219 | 1k+ | | | Interpolated SQL is not prepared |
| #177 | Canvas | 90 | 2 | 115 | 10k+ | | | Non-prefixed global variable |
| #178 | Captivate Sync | 24 | 173 | 557 | 1k+ | | | Non-prefixed global variable |
| #179 | CBX Bookmark & Favorite | 99 | | 4 | 1k+ | | | error log error log |
| #180 | Grid & Styler For Contact Form 7 And Divi | 23 | 548 | 1,341 | 500 | | | Non-prefixed global variable |
| #181 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #182 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 825 | 1,079 | 200k+ | | | Missing nonce verification |
| #183 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #184 | Complianz – Terms and Conditions | 95 | 13 | 26 | 300k+ | | | Non-prefixed global variable |
| #185 | Cool Timeline (Horizontal & Vertical Timeline) | 95 | | 13 | 20k+ | | | Non-prefixed class |
| #186 | Theme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons | 31 | 393 | 329 | 6k+ | | | Missing direct file access protection |
| #187 | CryptAPI Payment Gateway for WooCommerce | 49 | 185 | 23 | 400 | | | Text Domain Mismatch |
| #188 | Cryptocurrency Widgets Pack | 40 | 222 | 52 | 700 | | | Unsafe printing function |
| #189 | Custom Contact Forms | 40 | 13 | 106 | 6k+ | | | Missing nonce verification |
| #190 | Dashboard Cleaner | 39 | 40 | 91 | 500 | | | Missing nonce verification |
| #191 | Disable Block Editor FullScreen mode | 87 | 6 | 2 | 1k+ | | | Output is not escaped |
| #192 | Dynamic Pricing and Discount Rules | 51 | 24 | 65 | 1k+ | | | Non Singular String Literal Text |
| #193 | Yoast Duplicate Post | 70 | 8 | 88 | 3m+ | | | Nonce verification recommended |
| #194 | FluentSnippets – High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager | 56 | 31 | 27 | 50k+ | | | Nonce verification recommended |
| #195 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | | | Non-prefixed global variable |
| #196 | EmailKit – Email Customizer for WooCommerce & WP | 74 | 17 | 82 | 70k+ | | | slow db query meta query |
| #197 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | 22 | 828 | 5,969 | 5k+ | | | Direct Query |
| #198 | EXIF Remover | 100 | | 0 | 400 | | | No open findings |
| #199 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #200 | Payment Gateway of PayPal for WooCommerce | 41 | 44 | 184 | 7k+ | | | Nonce verification recommended |