| #301 | Element Pack – Widgets, Templates & Addons for Elementor | 19 | 10,446 | 525 | 100k+ | | | Text Domain Mismatch |
| #302 | Prime Slider Addons for Elementor | 18 | 3,500 | 229 | 100k+ | | | Text Domain Mismatch |
| #303 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #304 | BBQ Firewall – Fast & Powerful Firewall Security | 44 | 17 | 17 | 100k+ | | | Output is not escaped |
| #305 | BuddyPress | 22 | 583 | 9,008 | 100k+ | | | Non-prefixed function |
| #306 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #307 | Captcha Code | 97 | 17 | 12 | 100k+ | | | wp function not compatible with requires wp |
| #308 | Conditional Fields for Contact Form 7 | 41 | 113 | 52 | 100k+ | | | Output is not escaped |
| #309 | Check & Log Email – Easy Email Testing & Mail logging | 95 | 3 | 11 | 100k+ | | | Non-prefixed constant |
| #310 | Flexible SSL for CloudFlare | 35 | 9 | 6 | 100k+ | | | Output is not escaped |
| #311 | CloudSecure WP Security | 29 | 74 | 350 | 100k+ | | | Request data is not unslashed |
| #312 | Admin Columns | 25 | 613 | 995 | 100k+ | | | Non-prefixed namespace |
| #313 | Connect Polylang for Elementor | 73 | 1 | 21 | 100k+ | | | Nonce verification recommended |
| #314 | Contact Form 7 – Dynamic Text Extension | 39 | 103 | 28 | 100k+ | | | Output is not escaped |
| #315 | Contact Form 7 Captcha | 41 | 7 | 75 | 100k+ | | | Request data is not unslashed |
| #316 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #317 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
| #318 | Custom Permalinks | 91 | 197 | 1 | 100k+ | | | wp function not compatible with requires wp |
| #319 | Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager | 34 | 32 | 307 | 100k+ | | | Non-prefixed global variable |
| #320 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #321 | Customizer Export/Import | 47 | 14 | 15 | 100k+ | | | Unsafe printing function |
| #322 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #323 | Disable Comments | 42 | 44 | 19 | 100k+ | | | Unsafe printing function |
| #324 | Disable and Remove Google Fonts | GDPR & DSGVO friendly | 35 | 21 | 8 | 100k+ | | | Missing Translators Comment |
| #325 | Disable XML-RPC-API | 35 | 444 | 52 | 100k+ | | | Text Domain Mismatch |
| #326 | Download Manager | 22 | 2,283 | 1,335 | 100k+ | | | Output is not escaped |
| #327 | Duplicate Menu | 66 | 11 | 7 | 100k+ | | | Unsafe printing function |
| #328 | Easy Google Fonts | 90 | 12 | 26 | 100k+ | | | Non-prefixed hook name |
| #329 | Edit Author Slug | 74 | 5 | 8 | 100k+ | | | Output is not escaped |
| #330 | ECS – Ele Custom Skin for Elementor | 34 | 99 | 205 | 100k+ | | | Text Domain Mismatch |
| #331 | Email Address Encoder | 41 | 109 | 8 | 100k+ | | | wp function not compatible with requires wp |
| #332 | EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more | 24 | 669 | 1,550 | 100k+ | | | Output is not escaped |
| #333 | Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More | 92 | 17 | 65 | 100k+ | | | Non-prefixed global variable |
| #334 | Feeds for YouTube (YouTube video, channel, and gallery plugin) | 21 | 558 | 978 | 100k+ | | | Output is not escaped |
| #335 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 19 | 1,218 | 901 | 100k+ | | | Exception output is not escaped |
| #336 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | | | Request data is not unslashed |
| #337 | Weight Based Shipping Table Rate for WooCommerce – Flexible Shipping | 34 | 124 | 156 | 100k+ | | | Nonce verification recommended |
| #338 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 610 | 1,365 | 100k+ | | | Non-prefixed global variable |
| #339 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #340 | GiveWP – Donation Plugin and Fundraising Platform | 20 | 3,432 | 3,575 | 100k+ | | | Output is not escaped |
| #341 | reCaptcha by BestWebSoft | 29 | 474 | 272 | 100k+ | | | Text Domain Mismatch |
| #342 | Translate WordPress – Google Language Translator | 26 | 200 | 317 | 100k+ | | | Non-prefixed global variable |
| #343 | Anti-Malware Security and Brute-Force Firewall | 23 | 543 | 965 | 100k+ | | | Output is not escaped |
| #344 | Gravatar Enhanced – Avatars, Profiles, and Privacy | 51 | 38 | 48 | 100k+ | | | Dynamic hook name |
| #345 | Gravity Forms Zero Spam | 94 | 4 | 9 | 100k+ | | | trademarked term |
| #346 | Head & Footer Code | 82 | 1 | 15 | 100k+ | | | Non-prefixed constant |
| #347 | WP Ghost (Hide My WP Ghost) – Security & Firewall | 85 | 6 | 373 | 100k+ | | | Non-prefixed global variable |
| #348 | Easy HTTPS Redirection (SSL) | 29 | 266 | 152 | 100k+ | | | Unsafe printing function |
| #349 | Image Widget | 35 | 165 | 31 | 100k+ | | | Output is not escaped |
| #350 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | | Non-prefixed global variable |