| #151 | rapidmail: Newsletter & E-Mail Marketing for WooCommerce | 37 | 79 | 47 | 400 | | | Text Domain Mismatch |
| #152 | Dashboard Cleaner | 39 | 40 | 91 | 500 | | | Missing nonce verification |
| #153 | WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce | 24 | 761 | 1,612 | 900 | | | Non-prefixed global variable |
| #154 | Autopay dla WooCommerce | 32 | 95 | 83 | 900 | | | Output is not escaped |
| #155 | Virtuaria PagBank / PagSeguro for WooCommerce | 58 | | 152 | 1k+ | | | Non-prefixed global variable |
| #156 | Block for Font Awesome | 98 | 7 | 4 | 1k+ | | | Offloaded Content |
| #157 | Alma – Pay in installments or later for WooCommerce | 41 | 116 | 68 | 1k+ | | | Exception output is not escaped |
| #158 | گیتلند | درگاه پرداخت هوشمند گیتلند | 28 | 327 | 235 | 2k+ | | | Output is not escaped |
| #159 | CDEKDelivery | 46 | | 75 | 2k+ | | | Nonce verification recommended |
| #160 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #161 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,370 | 7k+ | | | Non-prefixed global variable |
| #162 | Image Alt Text | 78 | 5 | 19 | 9k+ | | | Nonce verification recommended |
| #163 | Advance Product Search- Voice & Ajax Search for WooCommerce | 35 | 125 | 92 | 10k+ | | | Text Domain Mismatch |
| #164 | Flexible Product Fields (WooCommerce Product Addons) – WooCommerce Product Page Editor | 67 | 57 | 98 | 10k+ | | | Non-prefixed global variable |
| #165 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | | | Non-prefixed global variable |
| #166 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 25 | 198 | 712 | 10k+ | | | Nonce verification recommended |
| #167 | MailChimp Forms by MailMunch | 34 | 120 | 55 | 10k+ | | | Output is not escaped |
| #168 | Data Tables Generator by Supsystic | 22 | 158 | 152 | 10k+ | | | Exception output is not escaped |
| #169 | Stream | 81 | 5 | 80 | 80k+ | | | Direct Query |
| #170 | Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) | 69 | 33 | 379 | 200k+ | | | Direct Query |
| #171 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 46 | 1m+ | | | Direct Query |
| #172 | OttoKit: All-in-One Automation Platform | 25 | 1,536 | 1,825 | 90k+ | | | Missing direct file access protection |
| #173 | WebToffee EU Order Withdrawal Button for WooCommerce | 100 | | 0 | 500 | | | No open findings |
| #174 | ShopMagic – Twilio SMS | 35 | 2 | 10 | 800 | | | Non-prefixed global variable |
| #175 | pensopay Payments v2 | 59 | 413 | 32 | 1k+ | | | Non Singular String Literal Domain |
| #176 | Turbo Addons Elementor | 100 | | 2 | 2k+ | | | No PHP code found |
| #177 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #178 | OSS Aliyun | 41 | 19 | 40 | 3k+ | | | Request data is not unslashed |
| #179 | MultiParcels Shipping For WooCommerce | 23 | 179 | 356 | 4k+ | | | Request data is not unslashed |
| #180 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 474 | 1,153 | 5k+ | | | Non-prefixed global variable |
| #181 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #182 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,621 | 2,744 | 10k+ | | | Output is not escaped |
| #183 | CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor | 37 | 47 | 90 | 40k+ | | | Dynamic hook name |
| #184 | Bulk Download for Gravity Forms | 35 | 5 | 2 | 400 | | | Hidden files included |
| #185 | WPC Frequently Bought Together for WooCommerce | 40 | 63 | 109 | 10k+ | | | Output is not escaped |
| #186 | Welcart e-Commerce | 22 | 10,378 | 10,931 | 10k+ | | | Text Domain Mismatch |
| #187 | FormLayer | 96 | | 2 | 50k+ | | | Nonce verification recommended |
| #188 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | | Non-prefixed hook name |
| #189 | Live Chat & AI Chatbot – onWebChat | 41 | 32 | 90 | 700 | | | error log error log |
| #190 | WP Helper Premium | 23 | 3,908 | 1,517 | 1k+ | | | Text Domain Mismatch |
| #191 | Pixelgrade Assistant | 30 | 1,350 | 153 | 2k+ | | | Text Domain Mismatch |
| #192 | Ziina | 35 | 10 | 25 | 2k+ | | | Input is not sanitized |
| #193 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 66 | 429 | 4k+ | | | Non-prefixed global variable |
| #194 | Hostinger Tools | 81 | 14 | 22 | 3m+ | | | wp function not compatible with requires wp |
| #195 | Trusty Whistleblowing Solution | 44 | 234 | 16 | 400 | | | Text Domain Mismatch |
| #196 | WishSuite – Wishlist for WooCommerce | 38 | 76 | 133 | 1k+ | | | Output is not escaped |
| #197 | WP Simple HTML Sitemap | 99 | 2 | 3 | 3k+ | | | trademarked term |
| #198 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,211 | 1,930 | 9k+ | | | Non-prefixed global variable |
| #199 | Kubio AI Page Builder | 60 | 283 | 77 | 90k+ | | | Missing direct file access protection |
| #200 | Gianism | 29 | 391 | 154 | 700 | | | Text Domain Mismatch |