| #451 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #452 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #453 | BlockMeister – Block Pattern Builder | 24 | 580 | 1,405 | 1k+ | | | Non-prefixed global variable |
| #454 | Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News | 24 | 699 | 1,693 | 30k+ | | | Non-prefixed global variable |
| #455 | Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | 24 | 262 | 1,718 | 1k+ | | | Non-prefixed global variable |
| #456 | Branda – White Label & Branding, Free Login Page Customizer | 24 | 3,174 | 820 | 20k+ | | | Text Domain Mismatch |
| #457 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | | | Text Domain Mismatch |
| #458 | BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 4,313 | 1,425 | 500 | | | Text Domain Mismatch |
| #459 | BuddyPress Group Email Subscription | 24 | 51 | 336 | 1k+ | | | Non-prefixed function |
| #460 | Builderall for WordPress | 24 | 4,778 | 1,307 | 1k+ | | | Text Domain Mismatch |
| #461 | Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder | 24 | 576 | 1,344 | 70k+ | | | Non-prefixed global variable |
| #462 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 344 | 609 | 40k+ | | | Non-prefixed global variable |
| #463 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #464 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #465 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #466 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #467 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 818 | 1,092 | 200k+ | | | Missing nonce verification |
| #468 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #469 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #470 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 842 | 3,717 | 500 | | | Request data is not unslashed |
| #471 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #472 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #473 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #474 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #475 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #476 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #477 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #478 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #479 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | | | Non-prefixed global variable |
| #480 | Democracy Poll | 24 | 387 | 436 | 7k+ | | | Short PHP open tag found |
| #481 | DFX Automatic Role Changer for WooCommerce | 24 | 597 | 1,308 | 400 | | | Non-prefixed global variable |
| #482 | Digital License Manager | 24 | 295 | 670 | 800 | | | Non-prefixed hook name |
| #483 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | | | Non-prefixed hook name |
| #484 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | | | Non-prefixed global variable |
| #485 | Easy Form Builder by WhiteStudio – Drag & Drop Form Builder | 24 | 211 | 415 | 1k+ | | | Nonce verification recommended |
| #486 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | | | Non-prefixed global variable |
| #487 | Easy Modal | 24 | 564 | 299 | 7k+ | | | Unsafe printing function |
| #488 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #489 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #490 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | | | Request data is not unslashed |
| #491 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #492 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #493 | Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | 24 | 112 | 1,497 | 10k+ | | | Non-prefixed global variable |
| #494 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | | | Non-prefixed global variable |
| #495 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #496 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #497 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #498 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #499 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #500 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |