| #151 | SiteOrigin Widgets Bundle | 23 | 607 | 455 | 400k+ | | | Output is not escaped |
| #152 | Template Kit – Import | 77 | 41 | 60 | 400k+ | | | Non-prefixed global variable |
| #153 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 222 | 400k+ | | | Nonce verification recommended |
| #154 | TranslatePress – Translate Multilingual sites with AI Translation | 25 | 452 | 1,541 | 400k+ | | | Non-prefixed hook name |
| #155 | Checkout Field Editor (Checkout Manager) for WooCommerce | 41 | 9 | 88 | 400k+ | | | Nonce verification recommended |
| #156 | WooCommerce Legacy REST API | 31 | 324 | 177 | 400k+ | | | Missing Translators Comment |
| #157 | LightStart – Maintenance Mode, Coming Soon and Landing Page Builder | 34 | 42 | 312 | 400k+ | | | Request data is not unslashed |
| #158 | YITH WooCommerce Wishlist | 24 | 448 | 1,486 | 400k+ | | | Non-prefixed global variable |
| #159 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,241 | 811 | 300k+ | | | Output is not escaped |
| #160 | AddToAny Share Buttons | 37 | 123 | 164 | 300k+ | | | Unsafe printing function |
| #161 | Admin Menu Editor | 32 | 159 | 233 | 300k+ | | | Non-prefixed global variable |
| #162 | Blocksy Companion | 81 | | 1,069 | 300k+ | | | Non-prefixed global variable |
| #163 | Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links | 98 | 1 | 15 | 300k+ | | | Non-prefixed global variable |
| #164 | Child Theme Configurator | 32 | 442 | 267 | 300k+ | | | Unsafe printing function |
| #165 | CMB2 | 36 | 148 | 19 | 300k+ | | | Output is not escaped |
| #166 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #167 | Complianz – Terms and Conditions | 94 | 14 | 26 | 300k+ | | | Non-prefixed global variable |
| #168 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #169 | Duplicate Post | 27 | 447 | 274 | 300k+ | | | Unsafe printing function |
| #170 | Cyr-To-Lat | 54 | 16 | 48 | 300k+ | | | Dynamic hook name |
| #171 | 301 Redirects – Redirect Manager | 88 | 6 | 71 | 300k+ | | | Non-prefixed global variable |
| #172 | Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More | 21 | 52 | 1,959 | 300k+ | | | Non-prefixed global variable |
| #173 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #174 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 118 | 442 | 300k+ | | | Nonce verification recommended |
| #175 | Gutenberg | 22 | 628 | 342 | 300k+ | | | Missing direct file access protection |
| #176 | Head, Footer and Post Injections | 55 | 9 | 52 | 300k+ | | | Non-prefixed global variable |
| #177 | Health Check & Troubleshooting | 35 | 264 | 238 | 300k+ | | | Missing Arg Domain |
| #178 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 62 | 300k+ | | | Output is not escaped |
| #179 | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 23 | 91 | 693 | 300k+ | | | Non-prefixed namespace |
| #180 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 300k+ | | | Missing Arg Domain |
| #181 | Limit Login Attempts | 40 | 81 | 38 | 300k+ | | | Output is not escaped |
| #182 | Max Mega Menu | 37 | 249 | 174 | 300k+ | | | Output is not escaped |
| #183 | Members – Membership & User Role Editor Plugin | 33 | 234 | 244 | 300k+ | | | Output is not escaped |
| #184 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 54 | 344 | 93 | 300k+ | | | Offloaded Content |
| #185 | Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content | 25 | 681 | 1,513 | 300k+ | | | Non-prefixed global variable |
| #186 | PDF Embedder | 91 | 1 | 7 | 300k+ | | | Non-prefixed class |
| #187 | Pinterest for WooCommerce | 53 | 44 | 30 | 300k+ | | | Exception output is not escaped |
| #188 | Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | 22 | 1,581 | 2,326 | 300k+ | | | Non-prefixed global variable |
| #189 | Really Simple CAPTCHA | 98 | 2 | 2 | 300k+ | | | Non-prefixed constant |
| #190 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 799 | 300k+ | | | Non-prefixed global variable |
| #191 | Simple Custom Post Order | 48 | 10 | 77 | 300k+ | | | Direct Query |
| #192 | Simple History – Track, Log, and Audit WordPress Changes | 35 | 32 | 122 | 300k+ | | | Non-prefixed global variable |
| #193 | Sticky Header Effects for Elementor | 38 | 243 | 71 | 300k+ | | | Text Domain Mismatch |
| #194 | Easy Updates Manager | 48 | 13 | 182 | 300k+ | | | Non-prefixed global variable |
| #195 | SureRank SEO – Smart Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema | 77 | 58 | 94 | 300k+ | | | Non-prefixed hook name |
| #196 | Unlimited Elements For Elementor | 24 | 710 | 2,093 | 300k+ | | | Non-prefixed global variable |
| #197 | WebP Express | 21 | 160 | 427 | 300k+ | | | Non-prefixed global variable |
| #198 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | | Direct Query |
| #199 | Variation Swatches for WooCommerce | 59 | 11 | 64 | 300k+ | | | Non-prefixed global variable |
| #200 | PDF Invoices & Packing Slips for WooCommerce | 35 | 35 | 956 | 300k+ | | | Non-prefixed hook name |