| #651 | All 404 Redirect to Homepage | 25 | 140 | 301 | 200k+ | | | date date |
| #652 | AIO Forms – Craft Complex Forms Easily | 25 | 189 | 418 | 700 | | | Mixed line endings |
| #653 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #654 | Animated Number Counters | 25 | 463 | 1,932 | 2k+ | | | Non-prefixed global variable |
| #655 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |
| #656 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #657 | BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites | 25 | 1,327 | 1,714 | 10k+ | | | Non-prefixed global variable |
| #658 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #659 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | | Output is not escaped |
| #660 | Booking Package | 25 | 1,697 | 3,977 | 10k+ | | | Missing nonce verification |
| #661 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,088 | 888 | 60k+ | | | SQL query is not prepared |
| #662 | Breeze Cache | 25 | 218 | 800 | 400k+ | | | Non-prefixed global variable |
| #663 | Broken Link Checker | 25 | 727 | 600 | 500k+ | | | Output is not escaped |
| #664 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #665 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #666 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #667 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #668 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #669 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 3k+ | | | Text Domain Mismatch |
| #670 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #671 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #672 | Admin Columns | 25 | 613 | 995 | 100k+ | | | Non-prefixed namespace |
| #673 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | | | Text Domain Mismatch |
| #674 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #675 | Coinbase Business Gateway for WooCommerce | 25 | 569 | 1,317 | 800 | | | Non-prefixed global variable |
| #676 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 25 | 498 | 355 | 1k+ | | | Text Domain Mismatch |
| #677 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #678 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #679 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #680 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | | | Non-prefixed class |
| #681 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 554 | 982 | 200k+ | | | Output is not escaped |
| #682 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #683 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #684 | ELEX WooCommerce Dynamic Pricing and Discounts | 25 | 478 | 748 | 800 | | | Text Domain Mismatch |
| #685 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | | | Non-prefixed function |
| #686 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 800 | | | Non-prefixed global variable |
| #687 | F4 Post Tree | 25 | 536 | 1,332 | 500 | | | Non-prefixed global variable |
| #688 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #689 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #690 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 319 | 454 | 7k+ | | | Non-prefixed global variable |
| #691 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #692 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #693 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #694 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #695 | Gallery Images Ape | 25 | 588 | 341 | 1k+ | | | Output is not escaped |
| #696 | GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content | 25 | 88 | 863 | 6k+ | | | Non-prefixed global variable |
| #697 | Genesis Club Lite | 25 | 513 | 317 | 900 | | | Output is not escaped |
| #698 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |
| #699 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | | Non Singular String Literal Domain |
| #700 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | | | Nonce verification recommended |