| #251 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #252 | RealPress – Real Estate Plugin | 22 | 604 | 1,167 | 500 | | | Non-prefixed global variable |
| #253 | Restrict User Access – Ultimate Membership & Content Protection | 22 | 977 | 1,840 | 10k+ | | | Non-prefixed global variable |
| #254 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #255 | Social Sharing Plugin – Sassy Social Share | 22 | 1,689 | 233 | 100k+ | | | wp function not compatible with requires wp |
| #256 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #257 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #258 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 800 | 300k+ | | | Non-prefixed global variable |
| #259 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | | Non-prefixed global variable |
| #260 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | | Text Domain Mismatch |
| #261 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #262 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #263 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | | Output is not escaped |
| #264 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 751 | 1,605 | 10k+ | | | Non-prefixed global variable |
| #265 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #266 | SVG Flags – Beautiful Scalable Flags For All Countries! | 22 | 755 | 1,251 | 2k+ | | | Non-prefixed global variable |
| #267 | Swift Performance Lite | 22 | 2,346 | 1,325 | 6k+ | | | Text Domain Mismatch |
| #268 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #269 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #270 | The Moneytizer | 22 | 751 | 271 | 1k+ | | | Text Domain Mismatch |
| #271 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #272 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | | Non-prefixed global variable |
| #273 | Ultimate Carousel For Divi | 22 | 590 | 1,566 | 800 | | | Non-prefixed global variable |
| #274 | Ultimeter | 22 | 751 | 1,344 | 1k+ | | | Non-prefixed global variable |
| #275 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 22 | 522 | 2,367 | 40k+ | | | Direct Query |
| #276 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | | Output is not escaped |
| #277 | Unlimited Elements Blocks Library | 22 | 708 | 1,822 | 400 | | | Non-prefixed global variable |
| #278 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 700 | | | Nonce verification recommended |
| #279 | Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links | 22 | 1,044 | 1,797 | 20k+ | | | Non-prefixed global variable |
| #280 | UpStream: a Project Management Plugin for WordPress | 22 | 683 | 703 | 600 | | | Non-prefixed global variable |
| #281 | Welcart e-Commerce | 22 | 10,378 | 10,931 | 10k+ | | | Text Domain Mismatch |
| #282 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 22 | 444 | 243 | 200k+ | | | Text Domain Mismatch |
| #283 | Walker Core | 22 | 1,351 | 1,436 | 700 | | | Non-prefixed global variable |
| #284 | WCFM – Frontend Manager for WooCommerce | 22 | 4,754 | 5,054 | 20k+ | | | Non-prefixed global variable |
| #285 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,934 | 1,966 | 10k+ | | | Non-prefixed global variable |
| #286 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #287 | Peach Payments Gateway | 22 | 334 | 143 | 1k+ | | | Non Singular String Literal Domain |
| #288 | Wenprise WeChatPay Payment Gateway For WooCommerce | 22 | 443 | 178 | 400 | | | Exception output is not escaped |
| #289 | Fraud Prevention For WooCommerce and EDD | 22 | 572 | 1,394 | 5k+ | | | Non-prefixed global variable |
| #290 | WooCommerce | 22 | 1,359 | 6,172 | 7m+ | | | Non-prefixed global variable |
| #291 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | | Text Domain Mismatch |
| #292 | CoDesigner – All in One Elementor WooCommerce Builder | 22 | 4,131 | 774 | 5k+ | | | Text Domain Mismatch |
| #293 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #294 | ManageWP Worker | 22 | 507 | 565 | 1m+ | | | Non-prefixed class |
| #295 | WP Affiliate Disclosure | 22 | 1,358 | 1,504 | 1k+ | | | Non-prefixed global variable |
| #296 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #297 | Master Accordion ( Former WP Awesome FAQ Plugin ) | 22 | 1,774 | 1,286 | 700 | | | Non-prefixed global variable |
| #298 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 910 | 1,835 | 1k+ | | | Non-prefixed global variable |
| #299 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #300 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |