| #501 | Download Attachments | 32 | 69 | 188 | 8k+ | | | Non-prefixed hook name |
| #502 | Fable Extra | 32 | 79 | 282 | 4k+ | | | Non-prefixed global variable |
| #503 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 32 | 396 | 142 | 20k+ | | | Output is not escaped |
| #504 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #505 | Members – Membership & User Role Editor Plugin | 32 | 233 | 259 | 300k+ | | | Output is not escaped |
| #506 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 32 | 159 | 62 | 10k+ | | | Output is not escaped |
| #507 | Opal Mega Menu | 32 | 419 | 119 | 400 | | | Text Domain Mismatch |
| #508 | Restrict Usernames Emails Characters | 32 | 327 | 367 | 1k+ | | | Output is not escaped |
| #509 | WowRevenue – Product Bundles & Bulk Discounts | 32 | 13 | 2,027 | 1k+ | | | Non-prefixed global variable |
| #510 | RSS for Yandex Turbo | 32 | 687 | 307 | 20k+ | | | Unsafe printing function |
| #511 | Site Search 360 | 32 | 202 | 213 | 400 | | | Output is not escaped |
| #512 | Sky Addons for Elementor | 32 | 85 | 351 | 2k+ | | | Non-prefixed namespace |
| #513 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |
| #514 | UiCore Blocks – Free WordPress Gutenberg Blocks | 32 | 59 | 394 | 500 | | | Non-prefixed global variable |
| #515 | Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | 32 | 57 | 293 | 4k+ | | | Post Not In exclude |
| #516 | Secure Client Portal and Private File Sharing Plugin – User Private Files | 32 | 183 | 525 | 1k+ | | | Non-prefixed global variable |
| #517 | SEOPress – AI SEO Plugin & On-site SEO | 32 | 138 | 429 | 300k+ | | | Non-prefixed global variable |
| #518 | WPCasa – Real Estate for WordPress | 32 | 85 | 429 | 1k+ | | | Non-prefixed global variable |
| #519 | YITH Infinite Scrolling | 32 | 387 | 1,417 | 10k+ | | | Non-prefixed global variable |
| #520 | YITH WooCommerce Badge Management | 32 | 413 | 1,446 | 10k+ | | | Non-prefixed global variable |
| #521 | YITH WooCommerce Compare | 32 | 422 | 1,508 | 100k+ | | | Non-prefixed global variable |
| #522 | YITH WooCommerce Quick View | 32 | 388 | 1,420 | 90k+ | | | Non-prefixed global variable |
| #523 | Auto Listings – Car Listings & Car Dealership Plugin for WordPress | 33 | 80 | 321 | 2k+ | | | Non-prefixed global variable |
| #524 | Premium Portfolio Features for Phlox theme | 33 | 204 | 137 | 40k+ | | | Output is not escaped |
| #525 | Nexi XPay | 33 | 496 | 277 | 6k+ | | | Text Domain Mismatch |
| #526 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 33 | 57 | 204 | 1k+ | | | Non-prefixed global variable |
| #527 | Companion Sitemap Generator – Simple, Smart, and SEO-Ready | 33 | 118 | 57 | 7k+ | | | Missing Translators Comment |
| #528 | Conekta Payment Gateway | 33 | 240 | 61 | 2k+ | | | Text Domain Mismatch |
| #529 | Contact List – Online Staff Directory & Address Book | 33 | 118 | 342 | 1k+ | | | Nonce verification recommended |
| #530 | Chwazi – Delivery & Pickup Scheduling for WooCommerce | 33 | 563 | 192 | 600 | | | Text Domain Mismatch |
| #531 | FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN | 33 | 51 | 333 | 4k+ | | | Request data is not unslashed |
| #532 | GetResponse Forms by Optin Cat | 33 | 68 | 138 | 1k+ | | | Missing direct file access protection |
| #533 | Ultimate Addons for Elementor | 33 | 81 | 291 | 2m+ | | | Non-prefixed class |
| #534 | Image Source Control Lite – Show Image Credits and Captions | 33 | 140 | 221 | 3k+ | | | Non-prefixed hook name |
| #535 | Intagrate Lite | 33 | 94 | 152 | 4k+ | | | date date |
| #536 | IssueM | 33 | 56 | 173 | 600 | | | Request data is not unslashed |
| #537 | JetWidgets for Elementor and WooCommerce | 33 | 187 | 146 | 8k+ | | | Text Domain Mismatch |
| #538 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #539 | FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor | 33 | 356 | 271 | 500 | | | Output is not escaped |
| #540 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | | Missing Translators Comment |
| #541 | RTMKit | 33 | 11 | 388 | 50k+ | | | Non-prefixed global variable |
| #542 | WP Twitter Auto Publish | 33 | 442 | 171 | 4k+ | | | Output is not escaped |
| #543 | Multi-Carrier EasyPost Shipping Methods & Address Validation for WooCommerce | 33 | 424 | 69 | 400 | | | Non Singular String Literal Domain |
| #544 | Multi-Carrier Shippo Shipping Rates & Address Validation for WooCommerce | 33 | 411 | 73 | 3k+ | | | Non Singular String Literal Domain |
| #545 | White Label CMS | 33 | 409 | 207 | 200k+ | | | Unsafe printing function |
| #546 | WPoperation Elementor Addons | 33 | 891 | 52 | 1k+ | | | Text Domain Mismatch |
| #547 | XML Sitemaps | 33 | 65 | 62 | 2k+ | | | Output is not escaped |
| #548 | Advanced Coupons for WooCommerce Coupons & Store Credit | 34 | 74 | 214 | 20k+ | | | Non-prefixed global variable |
| #549 | Advanced Twenty Seventeen | 34 | 247 | 98 | 3k+ | | | Text Domain Mismatch |
| #550 | BuddyPress & BuddyBoss Member Profile Forms | 34 | 154 | 121 | 400 | | | Text Domain Mismatch |