| #501 | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 25 | 691 | 1,581 | 50k+ | | | Non-prefixed global variable |
| #502 | Ultimate Post Kit Addons for Elementor | 25 | 182 | 412 | 30k+ | | | Missing nonce verification |
| #503 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | | | Text Domain Mismatch |
| #504 | Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP | 25 | 205 | 959 | 500 | | | Request data is not unslashed |
| #505 | VikAppointments Services Booking Calendar | 25 | 9,753 | 5,207 | 500 | | | Output is not escaped |
| #506 | VikBooking Hotel Booking Engine & PMS | 25 | 13,244 | 8,314 | 8k+ | | | Output is not escaped |
| #507 | VikRentCar Car Rental Management System | 25 | 5,537 | 5,048 | 4k+ | | | Non-prefixed global variable |
| #508 | VikRestaurants Table Reservations and Take-Away | 25 | 11,644 | 4,932 | 600 | | | Output is not escaped |
| #509 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #510 | Advanced Shipment Tracking for WooCommerce | 25 | 501 | 724 | 60k+ | | | Non-prefixed global variable |
| #511 | Product Table for WooCommerce | 25 | 183 | 896 | 5k+ | | | Non-prefixed global variable |
| #512 | Pay with Vipps and MobilePay for WooCommerce | 25 | 846 | 514 | 5k+ | | | Output is not escaped |
| #513 | WordPress Importer | 25 | 238 | 110 | 2m+ | | | Output is not escaped |
| #514 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 137 | 353 | 60k+ | | | Input is not sanitized |
| #515 | WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards | 25 | 1,431 | 1,270 | 10k+ | | | Output is not escaped |
| #516 | WP Review Slider | 25 | 1,186 | 2,279 | 6k+ | | | Non-prefixed global variable |
| #517 | WP Google Review Slider | 25 | 1,367 | 2,584 | 30k+ | | | Non-prefixed global variable |
| #518 | WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, Security | 25 | 727 | 1,554 | 50k+ | | | Non-prefixed global variable |
| #519 | WP-Polls | 25 | 618 | 639 | 40k+ | | | Unsafe printing function |
| #520 | Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF | 25 | 158 | 118 | 60k+ | | | Non-prefixed global variable |
| #521 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | | | Exception output is not escaped |
| #522 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 252 | 566 | 1m+ | | | Non-prefixed hook name |
| #523 | Wp Social Login and Register Social Counter | 25 | 80 | 738 | 90k+ | | | Non-prefixed global variable |
| #524 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 610 | 2,465 | 600k+ | | | Non-prefixed global variable |
| #525 | WP Super Cache | 25 | 800 | 989 | 1m+ | | | Output is not escaped |
| #526 | WP Time Slots Booking Form | 25 | 439 | 1,137 | 1k+ | | | Non-prefixed global variable |
| #527 | WPvivid — Backup, Migration & Staging | 25 | 899 | 1,461 | 900k+ | | | Non-prefixed namespace |
| #528 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 6k+ | | | Exception output is not escaped |
| #529 | AI Content Writing Assistant | 26 | 1,069 | 516 | 700 | | | Text Domain Mismatch |
| #530 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #531 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 400k+ | | | Non-prefixed global variable |
| #532 | ELEX WooCommerce Google Shopping (Google Product Feed) | 26 | 226 | 242 | 1k+ | | | Text Domain Mismatch |
| #533 | ezCache | 26 | 127 | 269 | 10k+ | | | Direct Query |
| #534 | Ibtana – WordPress Website Builder | 26 | 173 | 409 | 10k+ | | | Non-prefixed global variable |
| #535 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #536 | Loco Translate | 26 | 454 | 242 | 1m+ | | | Output is not escaped |
| #537 | Media File Renamer: Rename for better SEO (AI-Powered) | 26 | 154 | 170 | 40k+ | | | Direct Query |
| #538 | Paytium: Mollie payment forms & donations | 26 | 506 | 551 | 3k+ | | | Unsafe printing function |
| #539 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | | Output is not escaped |
| #540 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #541 | Profile Extra Fields by BestWebSoft | 26 | 514 | 532 | 2k+ | | | Text Domain Mismatch |
| #542 | Role Based Pricing for Woo by Meow Crew | 26 | 548 | 1,354 | 2k+ | | | Non-prefixed global variable |
| #543 | Send Users Email – Email Subscribers, Email Marketing Newsletter | 26 | 188 | 415 | 5k+ | | | Non-prefixed global variable |
| #544 | SP Move Login | 26 | 881 | 215 | 6k+ | | | Text Domain Mismatch |
| #545 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 26 | 351 | 232 | 3k+ | | | Unsafe printing function |
| #546 | Theater for WordPress | 26 | 348 | 344 | 600 | | | Output is not escaped |
| #547 | URL Image Importer | 26 | 142 | 239 | 700 | | | Missing nonce verification |
| #548 | Visitors Online by BestWebSoft | 26 | 512 | 269 | 1k+ | | | Text Domain Mismatch |
| #549 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 26 | 265 | 793 | 30k+ | | | Missing nonce verification |
| #550 | Faktur Pro for WooCommerce | 26 | 416 | 218 | 1k+ | | | Text Domain Mismatch |