| #601 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #602 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | | | Missing Translators Comment |
| #603 | StreamWeasels Online Status Bar | 24 | 555 | 1,349 | 500 | | | Non-prefixed global variable |
| #604 | StreamWeasels YouTube Integration | 24 | 544 | 1,384 | 1k+ | | | Non-prefixed global variable |
| #605 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #606 | Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform | 24 | 431 | 1,010 | 10k+ | | | Output is not escaped |
| #607 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 360 | 1,472 | 1k+ | | | Nonce verification recommended |
| #608 | Tainacan | 24 | 138 | 592 | 1k+ | | | Direct Query |
| #609 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 225 | 300k+ | | | Nonce verification recommended |
| #610 | Terms and Conditions Popup for WooCommerce | 24 | 633 | 438 | 1k+ | | | Text Domain Mismatch |
| #611 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #612 | Tutor LMS – eLearning and online course solution | 24 | 328 | 4,409 | 100k+ | | | Non-prefixed global variable |
| #613 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #614 | Ultimate Maps by Supsystic | 24 | 1,034 | 374 | 10k+ | | | Non Singular String Literal Domain |
| #615 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | 24 | 938 | 2,935 | 200k+ | | | Non-prefixed global variable |
| #616 | Ultimate Post Kit Addons for Elementor | 24 | 183 | 412 | 30k+ | | | Missing nonce verification |
| #617 | Ultimate WP Mail | 24 | 400 | 546 | 700 | | | Unsafe printing function |
| #618 | UpdraftPlus: WP Backup & Migration Plugin | 24 | 277 | 299 | 3m+ | | | Non-prefixed global variable |
| #619 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 663 | 3,353 | 50k+ | | | Non-prefixed global variable |
| #620 | UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | 24 | 441 | 235 | 200k+ | | | Text Domain Mismatch |
| #621 | Video Conferencing with Zoom | 24 | 1,105 | 440 | 10k+ | | | Unsafe printing function |
| #622 | VikRentItems Flexible Rental Management System | 24 | 4,755 | 4,639 | 600 | | | Non-prefixed global variable |
| #623 | Vimeography: Vimeo Video Gallery WordPress Plugin | 24 | 98 | 212 | 5k+ | | | Nonce verification recommended |
| #624 | Visitor Traffic Real Time Statistics | 24 | 472 | 927 | 30k+ | | | Non-prefixed global variable |
| #625 | PDF Ink Lite – Free PDF Watermark & Password Protection | 24 | 226 | 561 | 2k+ | | | Non-prefixed global variable |
| #626 | WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce | 24 | 733 | 499 | 5k+ | | | Output is not escaped |
| #627 | Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels | 24 | 1,615 | 1,377 | 70k+ | | | Text Domain Mismatch |
| #628 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | | | Output is not escaped |
| #629 | Widget Detector for Elementor | 24 | 1,057 | 1,567 | 1k+ | | | Non-prefixed global variable |
| #630 | Coupon Affiliates – Affiliate Plugin for WooCommerce | 24 | 947 | 3,133 | 5k+ | | | Non-prefixed global variable |
| #631 | Payment Gateway for PayPal on WooCommerce | 24 | 163 | 664 | 10k+ | | | Non-prefixed hook name |
| #632 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | | Non-prefixed global variable |
| #633 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | | Non Singular String Literal Domain |
| #634 | European VAT Compliance Assistant for WooCommerce | 24 | 515 | 317 | 3k+ | | | Output is not escaped |
| #635 | Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers | 24 | 480 | 1,272 | 7k+ | | | Non-prefixed function |
| #636 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | | | SQL query is not prepared |
| #637 | AI ChatBot for WooCommerce – WoowBot | 24 | 144 | 524 | 900 | | | Request data is not unslashed |
| #638 | WordLift – AI powered SEO – Schema | 24 | 278 | 949 | 400 | | | Non-prefixed hook name |
| #639 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 159 | 386 | 10m+ | | | Non-prefixed global variable |
| #640 | WP Admin Audit | 24 | 1,051 | 781 | 1k+ | | | error log print r |
| #641 | WP-Appbox | 24 | 418 | 390 | 2k+ | | | Missing Arg Domain |
| #642 | Auto Affiliate Links | 24 | 381 | 416 | 3k+ | | | Output is not escaped |
| #643 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #644 | Iptanus File Upload | 24 | 509 | 1,325 | 10k+ | | | Non-prefixed function |
| #645 | WP Helper Premium | 24 | 3,909 | 1,517 | 1k+ | | | Text Domain Mismatch |
| #646 | WP Hotel Booking | 24 | 901 | 1,532 | 7k+ | | | Non-prefixed global variable |
| #647 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #648 | WP-Members Membership Plugin | 24 | 669 | 382 | 50k+ | | | Output is not escaped |
| #649 | WP Notification Bell | 24 | 736 | 1,591 | 700 | | | Non-prefixed global variable |
| #650 | پارسی دیت – Parsi Date | 24 | 106 | 291 | 100k+ | | | Non-prefixed hook name |