| #351 | IndexNow Plugin | 63 | 14 | 91 | 100k+ | | | error log error log |
| #352 | Instant Images – One-click Image Uploads from Unsplash, Openverse, Pixabay, Pexels, and Giphy | 63 | 31 | 16 | 100k+ | | | Missing direct file access protection |
| #353 | Inline Related Posts | 64 | 17 | 39 | 100k+ | | | Nonce verification recommended |
| #354 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #355 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | | Non-prefixed global variable |
| #356 | Klaviyo | 79 | 26 | 86 | 100k+ | | | Non-prefixed function |
| #357 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,847 | 937 | 100k+ | | | Output is not escaped |
| #358 | Local Google Fonts | 93 | 3 | 15 | 100k+ | | | Non-prefixed global variable |
| #359 | Login Lockdown & Protection | 94 | 5 | 15 | 100k+ | | | Non-prefixed global variable |
| #360 | LuckyWP Table of Contents | 39 | 438 | 62 | 100k+ | | | Output is not escaped |
| #361 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #362 | MainWP Child Reports | 35 | 49 | 116 | 100k+ | | | Non-prefixed hook name |
| #363 | Make Column Clickable for Elementor | 97 | 5 | 2 | 100k+ | | | Non-prefixed hook name |
| #364 | Manage Notification E-mails | 36 | 129 | 98 | 100k+ | | | Non-prefixed function |
| #365 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,911 | 877 | 100k+ | | | Exception output is not escaped |
| #366 | Menu Icons by Themeisle – Add Icons to Navigation Menus | 51 | 34 | 22 | 100k+ | | | Output is not escaped |
| #367 | Menu Image, Icons made easy | 23 | 591 | 1,406 | 100k+ | | | Non-prefixed global variable |
| #368 | Minimal Coming Soon – Coming Soon Page | 88 | 7 | 143 | 100k+ | | | Non-prefixed global variable |
| #369 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 436 | 100k+ | | | Text Domain Mismatch |
| #370 | Mollie Payments for WooCommerce | 33 | 70 | 123 | 100k+ | | | Dynamic hook name |
| #371 | MouseWheel Smooth Scroll | 41 | 104 | 7 | 100k+ | | | Text Domain Mismatch |
| #372 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #373 | NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall | 22 | 1,266 | 2,059 | 100k+ | | | Non-prefixed global variable |
| #374 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 316 | 639 | 100k+ | | | Output is not escaped |
| #375 | No Category Base (WPML) | 87 | 5 | 5 | 100k+ | | | Missing direct file access protection |
| #376 | MailerLite – Signup forms (official) | 36 | 430 | 158 | 100k+ | | | Output is not escaped |
| #377 | Newsletters, Email Marketing, SMS and Popups by Omnisend | 35 | 4 | 2 | 100k+ | | | Hidden files included |
| #378 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | | | Non-prefixed global variable |
| #379 | Page Links To | 38 | 31 | 40 | 100k+ | | | Unsafe printing function |
| #380 | Page scroll to id | 37 | 38 | 120 | 100k+ | | | Missing nonce verification |
| #381 | Performance Lab | 99 | | 21 | 100k+ | | | Text Domain Mismatch |
| #382 | Permalink Manager Pro | 100 | 1 | 1 | 100k+ | | | Missing Translators Comment |
| #383 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | | | Output is not escaped |
| #384 | Pods – Custom Content Types and Fields | 41 | 5 | 233 | 100k+ | | | Direct Query |
| #385 | Popups for Divi | 89 | 99 | 57 | 100k+ | | | Text Domain Mismatch |
| #386 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | 48 | 63 | 273 | 100k+ | | | Non-prefixed global variable |
| #387 | Presto Player | 35 | 37 | 77 | 100k+ | | | Missing Arg Domain |
| #388 | Public Post Preview | 57 | 8 | 11 | 100k+ | | | Nonce verification recommended |
| #389 | WebSub (FKA. PubSubHubbub) | 98 | 5 | 4 | 100k+ | | | Non-prefixed hook name |
| #390 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #391 | Real Media Library: Media Library Folder & File Manager | 47 | 1 | 365 | 100k+ | | | Direct Query |
| #392 | Recent Posts Widget With Thumbnails | 37 | 222 | 46 | 100k+ | | | Output is not escaped |
| #393 | Redirection | 23 | 523 | 457 | 100k+ | | | Non-prefixed global variable |
| #394 | Relevanssi – A Better Search | 32 | 86 | 266 | 100k+ | | | Missing direct file access protection |
| #395 | reSmush.it : The original free image compressor and optimizer plugin | 25 | 155 | 69 | 100k+ | | | Output is not escaped |
| #396 | Responsive Lightbox & Gallery | 28 | 139 | 513 | 100k+ | | | Non-prefixed hook name |
| #397 | Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More | 24 | 141 | 685 | 100k+ | | | Non-prefixed global variable |
| #398 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 557 | 541 | 100k+ | | | Output is not escaped |
| #399 | LazyLoad Plugin – Lazy Load Images, Videos, and Iframes | 40 | 31 | 17 | 100k+ | | | Output is not escaped |
| #400 | Social Sharing Plugin – Sassy Social Share | 22 | 1,689 | 233 | 100k+ | | | wp function not compatible with requires wp |