| #501 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | | | Non-prefixed global variable |
| #502 | HT Mega Addons for Elementor – Elementor Widgets & Template Builder | 24 | 12,352 | 1,474 | 70k+ | | | Text Domain Mismatch |
| #503 | Import from YML | 24 | 97 | 306 | 400 | | | Non-prefixed global variable |
| #504 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #505 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | | | Direct Query |
| #506 | Keap Official Opt-in Forms | 24 | 829 | 1,046 | 1k+ | | | Non-prefixed global variable |
| #507 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #508 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | | | Output is not escaped |
| #509 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | | | Non-prefixed global variable |
| #510 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | | | Output is not escaped |
| #511 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | | Output is not escaped |
| #512 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | | | Text Domain Mismatch |
| #513 | Load More Products for WooCommerce | 24 | 731 | 459 | 20k+ | | | Text Domain Mismatch |
| #514 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | | | Non-prefixed global variable |
| #515 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #516 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #517 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #518 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #519 | Admin Tweaks | 24 | 1,507 | 206 | 900 | | | Text Domain Mismatch |
| #520 | Media Library Folders | 24 | 889 | 807 | 10k+ | | | Text Domain Mismatch |
| #521 | Min and Max Quantity for WooCommerce | 24 | 603 | 459 | 20k+ | | | Text Domain Mismatch |
| #522 | Timetable and Event Schedule by MotoPress | 24 | 456 | 232 | 30k+ | | | Output is not escaped |
| #523 | MT Addons for Elementor | 24 | 3,073 | 1,442 | 2k+ | | | Text Domain Mismatch |
| #524 | Musician's Pack for Elementor – Music Website Widgets & Templates | 24 | 1,725 | 228 | 500 | | | Text Domain Mismatch |
| #525 | Music Player for Elementor – Audio Player & Podcast Player | 24 | 608 | 1,302 | 10k+ | | | Non-prefixed global variable |
| #526 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | | | Unsafe printing function |
| #527 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #528 | New User Approve | 24 | 652 | 1,415 | 20k+ | | | Non-prefixed global variable |
| #529 | Newsletter – Send awesome emails from WordPress | 24 | 898 | 2,219 | 200k+ | | | Non-prefixed global variable |
| #530 | Newsletter Subscription Form – User Subscriptions Form, Capture Email | 24 | 385 | 829 | 1k+ | | | Non-prefixed global variable |
| #531 | Ninja Forms – The Contact Form Builder That Grows With You | 24 | 749 | 1,533 | 600k+ | | | Nonce verification recommended |
| #532 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | | | Non-prefixed global variable |
| #533 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | | Text Domain Mismatch |
| #534 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #535 | Pagination Styler for WooCommerce | 24 | 799 | 448 | 1k+ | | | Output is not escaped |
| #536 | Participants Database | 24 | 950 | 894 | 7k+ | | | SQL query is not prepared |
| #537 | PayPal Brasil para WooCommerce | 24 | 554 | 329 | 1k+ | | | Unsafe printing function |
| #538 | PDF for Gravity Forms + Drag And Drop Template Builder | 24 | 1,457 | 260 | 400 | | | wp function not compatible with requires wp |
| #539 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,176 | 2,416 | 500k+ | | | Non-prefixed namespace |
| #540 | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 24 | 599 | 1,532 | 10k+ | | | Non-prefixed global variable |
| #541 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #542 | Product Catalog Simple | 24 | 1,555 | 1,982 | 1k+ | | | Output is not escaped |
| #543 | Premmerce Brands for WooCommerce | 24 | 700 | 1,344 | 2k+ | | | Non-prefixed global variable |
| #544 | Premmerce Product Filter for WooCommerce | 24 | 817 | 1,486 | 2k+ | | | Non-prefixed global variable |
| #545 | Product Editor Pro – WooCommerce Bulk Edit: Prices, Stock, Images, Titles, CSV Import & More | 24 | 2,154 | 4,833 | 1k+ | | | Non-prefixed global variable |
| #546 | Product Tabs Manager for WooCommerce | 24 | 634 | 482 | 2k+ | | | Text Domain Mismatch |
| #547 | Product Watermark for WooCommerce | 24 | 685 | 459 | 2k+ | | | Text Domain Mismatch |
| #548 | Products Compare for WooCommerce | 24 | 1,022 | 695 | 1k+ | | | Output is not escaped |
| #549 | ProfileGrid – User Profiles, Groups and Communities | 24 | 484 | 2,461 | 5k+ | | | Non-prefixed global variable |
| #550 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | | | Nonce verification recommended |