| #451 | Booking Package | 25 | 1,697 | 3,977 | 10k+ | | | Missing nonce verification |
| #452 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #453 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #454 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #455 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #456 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 3k+ | | | Text Domain Mismatch |
| #457 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #458 | Admin Columns | 25 | 613 | 995 | 100k+ | | | Non-prefixed namespace |
| #459 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #460 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #461 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #462 | Event Genius – Event Management, Events Calendar, Registration, and RSVP | 25 | 181 | 1,579 | 500 | | | Non-prefixed global variable |
| #463 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #464 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 319 | 454 | 7k+ | | | Non-prefixed global variable |
| #465 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #466 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #467 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #468 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #469 | GD Rating System | 25 | 1,511 | 1,043 | 1k+ | | | Output is not escaped |
| #470 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #471 | Genesis Club Lite | 25 | 513 | 317 | 900 | | | Output is not escaped |
| #472 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |
| #473 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | | | Nonce verification recommended |
| #474 | Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | 25 | 789 | 313 | 30k+ | | | Text Domain Mismatch |
| #475 | Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More | 25 | 1,784 | 2,222 | 2k+ | | | Non-prefixed global variable |
| #476 | Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews | 25 | 645 | 1,585 | 1k+ | | | Non-prefixed global variable |
| #477 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 235 | 699 | 2k+ | | | Non-prefixed global variable |
| #478 | Image SEO – AI-Driven Image SEO Optimizer | 25 | 350 | 328 | 1k+ | | | Text Domain Mismatch |
| #479 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #480 | JoomSport – for Sports: Team & League, Football, Hockey & more | 25 | 523 | 1,747 | 1k+ | | | Direct Query |
| #481 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #482 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | | | Unsafe printing function |
| #483 | Live Composer – Free WordPress Website Builder | 25 | 1,216 | 427 | 10k+ | | | Output is not escaped |
| #484 | M Chart | 25 | 558 | 1,465 | 3k+ | | | Non-prefixed global variable |
| #485 | My Calendar – Accessible Event Manager | 25 | 10 | 2,205 | 20k+ | | | Non-prefixed function |
| #486 | MyFatoorah – WooCommerce | 25 | 191 | 89 | 2k+ | | | Output is not escaped |
| #487 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 25 | 196 | 712 | 10k+ | | | Nonce verification recommended |
| #488 | Notifications for Forms & WordPress Actions | 25 | 309 | 282 | 1k+ | | | Text Domain Mismatch |
| #489 | Object Sync for Salesforce | 25 | 192 | 296 | 500 | | | Non-prefixed global variable |
| #490 | PDF Invoice for WooCommerce + Drag and Drop Template Builder | 25 | 1,008 | 216 | 400 | | | wp function not compatible with requires wp |
| #491 | Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | 25 | 489 | 1,413 | 7k+ | | | Non-prefixed global variable |
| #492 | Restrict – membership, site, content and user access restrictions for WordPress | 25 | 539 | 1,401 | 2k+ | | | Non-prefixed global variable |
| #493 | Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor | 25 | 9 | 982 | 5k+ | | | Non-prefixed global variable |
| #494 | Secure Copy Content Protection and Content Locking | 25 | 958 | 799 | 20k+ | | | Output is not escaped |
| #495 | Sensei LMS – Online Courses, Quizzes, & Learning | 25 | 56 | 928 | 10k+ | | | Nonce verification recommended |
| #496 | SEO Repair Kit – Meta Manager, Schema Manager, SEO Content Monitoring, GSC Integration, Keyword & Rank Tracking | 25 | 196 | 902 | 2k+ | | | Direct Query |
| #497 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | | Exception output is not escaped |
| #498 | SimpLy Gallery | 25 | 532 | 1,422 | 40k+ | | | Non-prefixed global variable |
| #499 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 958 | 738 | 60k+ | | | Text Domain Mismatch |
| #500 | Affiliate Program Suite — SliceWP Affiliates | 25 | 1,291 | 2,089 | 10k+ | | | Output is not escaped |