| #551 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #552 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #553 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 818 | 1,092 | 200k+ | | | Missing nonce verification |
| #554 | Smart Online Order for Clover | 24 | 1,746 | 1,246 | 1k+ | | | Text Domain Mismatch |
| #555 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #556 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #557 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #558 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 828 | 3,665 | 500 | | | Request data is not unslashed |
| #559 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #560 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #561 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 24 | 529 | 357 | 1k+ | | | Text Domain Mismatch |
| #562 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | | | Non-prefixed global variable |
| #563 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #564 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #565 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #566 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #567 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #568 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #569 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | | | Non-prefixed namespace |
| #570 | WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments | 24 | 587 | 1,430 | 20k+ | | | Non-prefixed global variable |
| #571 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | | | Non-prefixed global variable |
| #572 | Democracy Poll | 24 | 387 | 436 | 7k+ | | | Short PHP open tag found |
| #573 | Deployer for Git | 24 | 541 | 1,336 | 500 | | | Non-prefixed global variable |
| #574 | DFX Automatic Role Changer for WooCommerce | 24 | 597 | 1,308 | 400 | | | Non-prefixed global variable |
| #575 | Digital License Manager | 24 | 295 | 670 | 800 | | | Non-prefixed hook name |
| #576 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | | | Non-prefixed hook name |
| #577 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #578 | Drop Shadow Boxes | 24 | 642 | 1,290 | 4k+ | | | Non-prefixed global variable |
| #579 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | | | Non-prefixed global variable |
| #580 | Dynamic Widgets | 24 | 631 | 812 | 10k+ | | | Non-prefixed global variable |
| #581 | Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | 24 | 194 | 381 | 1k+ | | | Nonce verification recommended |
| #582 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | | | Non-prefixed global variable |
| #583 | Easy Modal | 24 | 564 | 299 | 7k+ | | | Unsafe printing function |
| #584 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #585 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #586 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | | | Request data is not unslashed |
| #587 | Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | 24 | 652 | 1,495 | 60k+ | | | Non-prefixed hook name |
| #588 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #589 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #590 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 112 | 1,497 | 10k+ | | | Non-prefixed global variable |
| #591 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | | | Non-prefixed global variable |
| #592 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #593 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #594 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #595 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #596 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | | | Unsafe printing function |
| #597 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #598 | Featured Image from URL (FIFU) | 24 | 1,654 | 418 | 70k+ | | | Non Singular String Literal Domain |
| #599 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | | | Output is not escaped |
| #600 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |