| #501 | Affiliates | 25 | 689 | 1,483 | 2k+ | | | Output is not escaped |
| #502 | FiboSearch – Ajax Search for WooCommerce | 25 | 603 | 302 | 100k+ | | | Output is not escaped |
| #503 | AliExpress Dropshipping Plugin for WooCommerce Stores | 25 | 550 | 728 | 5k+ | | | Text Domain Mismatch |
| #504 | Animated Number Counters | 25 | 463 | 1,932 | 2k+ | | | Non-prefixed global variable |
| #505 | Appointment Booking Calendar | 25 | 327 | 1,055 | 1k+ | | | Non-prefixed global variable |
| #506 | Appointment Hour Booking – Booking Calendar | 25 | 262 | 1,253 | 10k+ | | | Non-prefixed global variable |
| #507 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,638 | 1,304 | 10k+ | | | Non Singular String Literal Domain |
| #508 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |
| #509 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #510 | BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites | 25 | 1,327 | 1,714 | 10k+ | | | Non-prefixed global variable |
| #511 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #512 | Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | 25 | 260 | 1,561 | 1k+ | | | Non-prefixed global variable |
| #513 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #514 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #515 | Breeze Cache | 25 | 218 | 800 | 400k+ | | | Non-prefixed global variable |
| #516 | Broken Link Checker | 25 | 727 | 600 | 500k+ | | | Output is not escaped |
| #517 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #518 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #519 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #520 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #521 | CheckoutWC Lite | 25 | 1,399 | 852 | 3k+ | | | Text Domain Mismatch |
| #522 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #523 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | | | Text Domain Mismatch |
| #524 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #525 | Conditional Payment Methods for WooCommerce | 25 | 548 | 1,398 | 1k+ | | | Non-prefixed global variable |
| #526 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #527 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #528 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #529 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #530 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #531 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #532 | ELEX WooCommerce Dynamic Pricing and Discounts | 25 | 478 | 748 | 800 | | | Text Domain Mismatch |
| #533 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | | | Non-prefixed function |
| #534 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 800 | | | Non-prefixed global variable |
| #535 | F4 Post Tree | 25 | 536 | 1,332 | 500 | | | Non-prefixed global variable |
| #536 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #537 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #538 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 610 | 1,365 | 100k+ | | | Non-prefixed global variable |
| #539 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #540 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #541 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #542 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #543 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #544 | GD Rating System | 25 | 1,511 | 1,043 | 1k+ | | | Output is not escaped |
| #545 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #546 | GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content | 25 | 88 | 863 | 6k+ | | | Non-prefixed global variable |
| #547 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | | | Text Domain Mismatch |
| #548 | Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews | 25 | 645 | 1,585 | 1k+ | | | Non-prefixed global variable |
| #549 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #550 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |