| #351 | Eurobank WooCommerce Payment Gateway | 40 | 66 | 43 | 2k+ | | | Non Singular String Literal Domain |
| #352 | Pay in Store WooCommerce Payment Gateway | 87 | 26 | 5 | 2k+ | | | Non Singular String Literal Domain |
| #353 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #354 | Shortcodes Finder | 100 | | 1 | 4k+ | | | Non-prefixed class |
| #355 | ProfileGrid – User Profiles, Groups and Communities | 24 | 483 | 2,461 | 6k+ | | | Non-prefixed global variable |
| #356 | Team Members – Multi Language Supported Team Plugin | 24 | 2,081 | 11,206 | 7k+ | | | Non-prefixed global variable |
| #357 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #358 | Checkout Field Editor for WooCommerce – Checkout Manager | 34 | 122 | 64 | 20k+ | | | Text Domain Mismatch |
| #359 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 24 | 68 | 30k+ | | | Non-prefixed hook name |
| #360 | Tutor LMS Elementor Addons | 31 | 227 | 453 | 30k+ | | | Non-prefixed global variable |
| #361 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | | | Missing Translators Comment |
| #362 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,777 | 394 | 40k+ | | | Text Domain Mismatch |
| #363 | Download Monitor | 19 | 424 | 1,362 | 80k+ | | | Non-prefixed hook name |
| #364 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #365 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 225 | 400k+ | | | Nonce verification recommended |
| #366 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 931 | 718 | 500k+ | | | Exception output is not escaped |
| #367 | LovedByAI – Generative Engine Optimization, AI Search, GEO, AEO | 94 | | 16 | 600 | | | Direct Query |
| #368 | Skroutz & Bestprice XML feed for WooCommerce | 39 | 135 | 3 | 1k+ | | | Output is not escaped |
| #369 | Viva Payments – Viva Wallet WooCommerce Payment Gateway | 36 | 97 | 32 | 1k+ | | | Non Singular String Literal Domain |
| #370 | Team Section Block – Showcase Team Members with Layout Options | 83 | 1 | 21 | 1k+ | | | Non-prefixed namespace |
| #371 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #372 | Chartify – WordPress Chart Plugin | 33 | 76 | 411 | 3k+ | | | Non-prefixed global variable |
| #373 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | 22 | 828 | 5,969 | 5k+ | | | Direct Query |
| #374 | Embedder for Google Reviews | 28 | 530 | 1,333 | 6k+ | | | Non-prefixed global variable |
| #375 | AI ChatBot for eCommerce – WoowBot | 24 | 145 | 528 | 900 | | | Request data is not unslashed |
| #376 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #377 | Portfolio Filter Gallery – Photo Gallery | 99 | 3 | 2 | 20k+ | | | Offloaded Content |
| #378 | Secure Copy Content Protection and Content Locking | 25 | 958 | 799 | 20k+ | | | Output is not escaped |
| #379 | Phoenix Media Rename | 37 | 180 | 104 | 50k+ | | | Output is not escaped |
| #380 | Tutor LMS – eLearning and online course solution | 24 | 328 | 4,409 | 100k+ | | | Non-prefixed global variable |
| #381 | GHL Contact Form 7 Bridge – Send Contact Form 7 leads to GHL CRM | 94 | 6 | 17 | 400 | | | Non-prefixed global variable |
| #382 | wallee | 24 | 331 | 220 | 400 | | | Exception output is not escaped |
| #383 | BjornTech PayPal POS integration for WooCommerce | 34 | 68 | 182 | 700 | | | Non-prefixed hook name |
| #384 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #385 | Smart Marketing SMS and Newsletters Forms | 23 | 2,233 | 1,019 | 1k+ | | | Text Domain Mismatch |
| #386 | WowRevenue – Product Bundles & Bulk Discounts | 32 | 13 | 2,027 | 1k+ | | | Non-prefixed global variable |
| #387 | AI WP Writer – SEO content generator, chatGPT, Gemini | 33 | 581 | 531 | 3k+ | | | Text Domain Mismatch |
| #388 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 56 | 437 | 4k+ | | | Non-prefixed global variable |
| #389 | Flat Rate Shipping Method for WooCommerce | 25 | 1,242 | 1,778 | 5k+ | | | Non-prefixed global variable |
| #390 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,653 | 5,078 | 8k+ | | | Non-prefixed global variable |
| #391 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #392 | Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager | 92 | | 16 | 10k+ | | | Direct Query |
| #393 | Cool Timeline (Horizontal & Vertical Timeline) | 95 | | 13 | 20k+ | | | Non-prefixed class |
| #394 | Visitor Traffic Real Time Statistics | 24 | 472 | 927 | 30k+ | | | Non-prefixed global variable |
| #395 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #396 | Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) | 99 | 1 | 3 | 70k+ | | | Non-prefixed class |
| #397 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #398 | WP 2FA – Two-factor authentication for WordPress | 25 | 283 | 716 | 100k+ | | | Non-prefixed global variable |
| #399 | Email Deliverability – SMTP Replacement, Email API Deliverability & Email Log | 74 | 8 | 23 | 200k+ | | | Output is not escaped |
| #400 | Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget | 41 | 47 | 38 | 500k+ | | | Output is not escaped |