| #2151 | IranDargah Payment Gateway for Woocommerce | 66 | 66 | 26 | 400 | | | Text Domain Mismatch |
| #2152 | Free Property Valuation (Lead Generator) / Kostenlose Immobilienbewertung | 66 | 11 | 5 | 600 | | | Unsafe printing function |
| #2153 | LeadBack – Callback, Chatbot and Live Chat Widgets for WordPress sites | 66 | 17 | 5 | 600 | | | Unsafe printing function |
| #2154 | Plugin Compatibility Checker | 66 | 73 | 18 | 9k+ | | | Text Domain Mismatch |
| #2155 | Product Size Chart For WooCommerce | 66 | 9 | 22 | 6k+ | | | Non-prefixed hook name |
| #2156 | Mailchimp Widget by ProteusThemes | 66 | 17 | 9 | 1k+ | | | Output is not escaped |
| #2157 | Shortcode for Current Date | 66 | 27 | 12 | 10k+ | | | Text Domain Mismatch |
| #2158 | TAO Schedule Update | 66 | 37 | 11 | 2k+ | | | Text Domain Mismatch |
| #2159 | Frenet Shipping Gateway for WooCommerce – Correios, Etiquetas e Rastreio | 66 | 22 | 31 | 4k+ | | | Non-prefixed global variable |
| #2160 | Video Popup for Elementor – WPTD | 66 | 33 | 13 | 1k+ | | | Output is not escaped |
| #2161 | Dynamic Text Field For Contact Form 7 | 67 | 20 | 7 | 1k+ | | | Unsafe printing function |
| #2162 | EU Cookies Bar for WordPress | 67 | 3 | 69 | 9k+ | | | Request data is not unslashed |
| #2163 | Flexible Product Fields (WooCommerce Product Addons) – WooCommerce Product Page Editor | 67 | 57 | 98 | 10k+ | | | Non-prefixed global variable |
| #2164 | GravityExport Lite for Gravity Forms | 67 | 48 | 14 | 10k+ | | | Output is not escaped |
| #2165 | Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize | 67 | 293 | 80 | 9k+ | | | Text Domain Mismatch |
| #2166 | MetaTag | 67 | 7 | 13 | 600 | | | Input is not validated |
| #2167 | Product Specifications for Woocommerce | 67 | 12 | 80 | 1k+ | | | Non-prefixed global variable |
| #2168 | Safelayout Elegant Icons – WordPress icons | 67 | 3 | 17 | 700 | | | Input is not validated |
| #2169 | Simple Calendar – Advanced Custom Fields | 67 | 18 | 6 | 400 | | | Output is not escaped |
| #2170 | Cart links for WooCommerce | 67 | 13 | 16 | 500 | | | Text Domain Mismatch |
| #2171 | WP Forms + Sprout Invoices – Easy Invoice & Quote Submissions | 67 | 40 | 12 | 400 | | | Text Domain Mismatch |
| #2172 | Webyx for Elementor – Fullpage Fullscreen Scrolling Websites | 67 | 684 | 10 | 500 | | | Non Singular String Literal Domain |
| #2173 | Widget Contact Form 7 | 67 | 22 | 2 | 1k+ | | | Output is not escaped |
| #2174 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | | | Non-prefixed function |
| #2175 | Controls for Contact Form 7 (Redirects, Analytics & Tracking) | 68 | 4 | 14 | 10k+ | | | Missing nonce verification |
| #2176 | Content Security Policy Manager | 68 | 19 | 2 | 2k+ | | | Output is not escaped |
| #2177 | Free Assets Library – Openverse/Pixabay 600+ Million Images | 68 | 44 | 36 | 4k+ | | | Text Domain Mismatch |
| #2178 | Hreflang Manager – Hreflang Implementation for International SEO | 68 | 21 | 15 | 8k+ | | | wp function not compatible with requires wp |
| #2179 | POS Entegratör – Gurmehub Ödeme Eklentisi | 68 | 1,321 | 69 | 1k+ | | | Text Domain Mismatch |
| #2180 | Hide Title | 68 | 13 | 6 | 900 | | | Output is not escaped |
| #2181 | Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls | 68 | 21 | 18 | 1k+ | | | Output is not escaped |
| #2182 | Protection Against DDoS | 68 | 22 | 5 | 3k+ | | | Output is not escaped |
| #2183 | SKT Page Builder | 68 | 15 | 49 | 2k+ | | | Missing nonce verification |
| #2184 | Smartarget – Chat Buttons & Engagement Apps | 68 | 31 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #2185 | Template List Metabox | 68 | 14 | 10 | 900 | | | Missing Arg Domain |
| #2186 | Thank You Page for WooCommerce | 68 | 6 | 27 | 10k+ | | | Non-prefixed global variable |
| #2187 | Ever Accounting – Accounting & Invoicing Solution for Small Businesses | 68 | 69 | 661 | 1k+ | | | Non-prefixed hook name |
| #2188 | Solid Mail – SMTP email and logging made by SolidWP | 68 | 16 | 17 | 60k+ | | | Database parameter is not escaped |
| #2189 | AdOpt | Easy Multi-Regulations Cookie Banner. | 69 | 22 | 27 | 7k+ | | | Missing direct file access protection |
| #2190 | WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | 69 | 452 | 25 | 1k+ | | | Text Domain Mismatch |
| #2191 | Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons | 69 | 22 | 24 | 30k+ | | | Text Domain Mismatch |
| #2192 | Colorize Mobile Browser Address bar | 69 | 26 | 3 | 1k+ | | | Output is not escaped |
| #2193 | Easy Auto Reload – Auto Refresh | 69 | 37 | 12 | 1k+ | | | Text Domain Mismatch |
| #2194 | Hand Talk | 69 | 34 | 4 | 400 | | | Output is not escaped |
| #2195 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #2196 | Media Slider for Photos Images Videos | 69 | 10 | 23 | 2k+ | | | Missing Version |
| #2197 | PDF.js Viewer | 69 | 14 | 38 | 20k+ | | | Non-prefixed global variable |
| #2198 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 600 | | | Non-prefixed global variable |
| #2199 | Search by SKU for Woocommerce | 69 | 13 | 10 | 10k+ | | | Direct Query |
| #2200 | Simple Mathjax | 69 | 29 | 3 | 4k+ | | | Short PHP open tag found |