| #451 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #452 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 842 | 3,717 | 500 | | | Request data is not unslashed |
| #453 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,034 | 1,396 | 300k+ | | | Non-prefixed global variable |
| #454 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | | | Non-prefixed global variable |
| #455 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #456 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #457 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #458 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #459 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #460 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | | | Non-prefixed namespace |
| #461 | WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments | 24 | 587 | 1,430 | 20k+ | | | Non-prefixed global variable |
| #462 | Digital License Manager | 24 | 295 | 670 | 800 | | | Non-prefixed hook name |
| #463 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #464 | Easy Invoice – Invoice Generator, PDF Quotes & Payments | 24 | 1,366 | 2,013 | 500 | | | Non-prefixed global variable |
| #465 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #466 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #467 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | | | Request data is not unslashed |
| #468 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #469 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #470 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | 24 | 120 | 684 | 200k+ | | | Non-prefixed global variable |
| #471 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #472 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #473 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #474 | Fast Velocity Minify | 24 | 283 | 254 | 40k+ | | | Unsafe printing function |
| #475 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #476 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #477 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | | | Non-prefixed global variable |
| #478 | Force Sell for WooCommerce | 24 | 697 | 455 | 600 | | | Text Domain Mismatch |
| #479 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | | | Non-prefixed global variable |
| #480 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | | | Non-prefixed global variable |
| #481 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | | | Text Domain Mismatch |
| #482 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #483 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #484 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 322 | 10k+ | | | Text Domain Mismatch |
| #485 | GD Mail Queue | 24 | 502 | 582 | 700 | | | Output is not escaped |
| #486 | GEO my WP | 24 | 554 | 2,091 | 3k+ | | | Non-prefixed hook name |
| #487 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #488 | Connector Wizard (formerly LC Wizard) | 24 | 249 | 448 | 1k+ | | | Non-prefixed function |
| #489 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #490 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 158 | 436 | 300k+ | | | Nonce verification recommended |
| #491 | Grid/List View for WooCommerce | 24 | 1,116 | 546 | 2k+ | | | Output is not escaped |
| #492 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | | | Non-prefixed global variable |
| #493 | Hide Shipping Method For WooCommerce | 24 | 946 | 1,447 | 10k+ | | | Non-prefixed global variable |
| #494 | HT Mega Addons for Elementor – Elementor Widgets & Template Builder | 24 | 12,352 | 1,474 | 70k+ | | | Text Domain Mismatch |
| #495 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,410 | 866 | 70k+ | | | Text Domain Mismatch |
| #496 | Import from YML | 24 | 97 | 306 | 400 | | | Non-prefixed global variable |
| #497 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #498 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | | | Direct Query |
| #499 | Keap Official Opt-in Forms | 24 | 829 | 1,046 | 1k+ | | | Non-prefixed global variable |
| #500 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |