| #301 | Rollbar | 39 | 75 | 14 | 400 | | | Output is not escaped |
| #302 | RSVP and Event Management | 24 | 345 | 624 | 3k+ | | | Direct Query |
| #303 | Salat Times | 40 | 235 | 20 | 500 | | | Output is not escaped |
| #304 | Manago AI & Leadoo AI | 23 | 644 | 429 | 1k+ | | | Unsafe printing function |
| #305 | Secure Passkeys | 43 | 145 | 83 | 1k+ | | | Exception output is not escaped |
| #306 | Shared Files – File Upload & Download Manager | 39 | 5 | 184 | 4k+ | | | Nonce verification recommended |
| #307 | Shibboleth | 100 | | 0 | 3k+ | | | No open findings |
| #308 | Snippet Shortcodes | 38 | 359 | 133 | 4k+ | | | Non Singular String Literal Domain |
| #309 | Simple Chat Button | 91 | | 4 | 40k+ | | | Nonce verification recommended |
| #310 | Code Embed | 100 | | 0 | 10k+ | | | No open findings |
| #311 | Simple Side Tab | 43 | 28 | 17 | 10k+ | | | Unsafe printing function |
| #312 | Slider Hero with Video Background, Animation | 24 | 36 | 905 | 3k+ | | | Non-prefixed hook name |
| #313 | Smooth Scrolling | 100 | | 1 | 700 | | | Post Not In exclude |
| #314 | Social Engine | 29 | 133 | 90 | 600 | | | Exception output is not escaped |
| #315 | SportsPress – Sports Club & League Manager | 23 | 459 | 2,246 | 10k+ | | | Non-prefixed global variable |
| #316 | ST Elementor Addons | 28 | 224 | 374 | 500 | | | Non-prefixed global variable |
| #317 | Sticky Elementor – Sticky Header, Menu Color After Sticky, Logo Swap & Back to Top Button | 94 | 1 | 0 | 500 | | | Output is not escaped |
| #318 | StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini | 42 | 2 | 110 | 1k+ | | | Interpolated SQL is not prepared |
| #319 | Change Storefront Footer Copyright Text | 74 | 71 | 21 | 4k+ | | | Text Domain Mismatch |
| #320 | Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress | 41 | 27 | 168 | 2k+ | | | Request data is not unslashed |
| #321 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #322 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #323 | Taxonomy Switcher | 48 | 22 | 36 | 2k+ | | | Nonce verification recommended |
| #324 | The Courier Guy Shipping for WooCommerce | 35 | 57 | 107 | 3k+ | | | Missing nonce verification |
| #325 | ThemeHunk Customizer | 23 | 3,968 | 582 | 6k+ | | | Text Domain Mismatch |
| #326 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #327 | UddoktaPay | 99 | | 5 | 1k+ | | | Non-prefixed hook name |
| #328 | Use Any Font | Custom Font Uploader | 39 | 36 | 55 | 200k+ | | | Request data is not unslashed |
| #329 | User Posts Limit | 44 | 82 | 22 | 2k+ | | | Output is not escaped |
| #330 | Virtual Classroom – Video Conferencing & Online Meeting with BigBlueButton | 37 | 45 | 140 | 400 | | | Nonce verification recommended |
| #331 | Visma Pay for Woocommerce | 40 | 27 | 37 | 2k+ | | | Output is not escaped |
| #332 | Viva.com | Smart Checkout for WooCommerce | 91 | | 30 | 6k+ | | | Direct Query |
| #333 | VK Post Author Display | 36 | 87 | 113 | 10k+ | | | Non-prefixed function |
| #334 | WCFM – Frontend Manager for WooCommerce | 22 | 4,754 | 5,054 | 20k+ | | | Non-prefixed global variable |
| #335 | Custom Post Types and Custom Fields creator – WCK | 30 | 1,299 | 137 | 10k+ | | | Text Domain Mismatch |
| #336 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #337 | Affiliate Sales in Google Analytics and other tools | 38 | 23 | 84 | 1k+ | | | Request data is not unslashed |
| #338 | Bulk Edit Products for WooCommerce – WP Sheet Editor | 25 | 957 | 968 | 10k+ | | | Text Domain Mismatch |
| #339 | Bulk Edit Coupons for WooCommerce – WP Sheet Editor | 25 | 1,022 | 982 | 500 | | | Text Domain Mismatch |
| #340 | Flat Rate Shipping Method for WooCommerce | 25 | 1,242 | 1,778 | 5k+ | | | Non-prefixed global variable |
| #341 | Orders Tracking for WooCommerce | 37 | 7 | 312 | 10k+ | | | Request data is not unslashed |
| #342 | Eurobank WooCommerce Payment Gateway | 40 | 66 | 43 | 2k+ | | | Non Singular String Literal Domain |
| #343 | Country Based Restrictions for WooCommerce | 41 | 27 | 67 | 5k+ | | | Request data is not unslashed |
| #344 | Quick View for WooCommerce | 94 | | 163 | 2k+ | | | Non-prefixed global variable |
| #345 | Simla.com | 95 | 22 | 58 | 400 | | | Non-prefixed class |
| #346 | Store Vacation Lite for WooCommerce | 100 | | 2 | 10k+ | | | Discouraged text-domain loading |
| #347 | Additional Variation Images Gallery for WooCommerce | 40 | 60 | 129 | 20k+ | | | Non-prefixed global variable |
| #348 | Wallet for WooCommerce | 40 | 32 | 524 | 20k+ | | | Non-prefixed hook name |
| #349 | WC – APG Free Shipping | 100 | | 3 | 1k+ | | | trademarked term |
| #350 | Direct Checkout for WooCommerce | 72 | 77 | 35 | 80k+ | | | Text Domain Mismatch |