| #2501 | Unlimited Theme Addon For Elementor | 86 | 74 | 68 | 600 | | | Missing direct file access protection |
| #2502 | Variation Swatches for WooCommerce – Color, Image & Size Swatches | 86 | 2 | 17 | 200k+ | | | Request data is not unslashed |
| #2503 | VenoMaps – OpenStreetMap & Privacy-Friendly Geo Maps | 86 | 20 | 6 | 400 | | | wp function not compatible with requires wp |
| #2504 | WP fancybox | 86 | 7 | 8 | 1k+ | | | Output is not escaped |
| #2505 | WP YouTube Live | 86 | 28 | 24 | 1k+ | | | Non-prefixed function |
| #2506 | Яндекс Поделиться | 86 | 9 | 4 | 900 | | | Unsafe printing function |
| #2507 | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 87 | | 18 | 10k+ | | | Database parameter is not escaped |
| #2508 | Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo | 87 | 567 | 41 | 40k+ | | | Text Domain Mismatch |
| #2509 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | | | Non-prefixed global variable |
| #2510 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #2511 | Autolinks Manager – SEO Auto Linker | 87 | 7 | 16 | 1k+ | | | Database parameter is not escaped |
| #2512 | Donorbox – Free Recurring Donation Plugin and Fundraising Platform | 87 | 5 | 6 | 8k+ | | | Missing Arg Domain |
| #2513 | GTM Kit – Google Tag Manager & GA4 integration | 87 | 5 | 17 | 30k+ | | | Missing direct file access protection |
| #2514 | Simple Slider Block – Create Sliders From Core Blocks | 87 | 6 | 34 | 600 | | | Non-prefixed global variable |
| #2515 | Image Optimization – Compress Images and Convert to WebP or AVIF | 87 | 15 | 24 | 1m+ | | | Missing Translators Comment |
| #2516 | Image Ticker Carousel | by Creavi | 87 | 2 | 17 | 400 | | | Nonce verification recommended |
| #2517 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | | | Non-prefixed global variable |
| #2518 | Livebeep – Chatbot, Live Chat, CRM & Digital Marketing | 87 | 7 | 4 | 400 | | | Output is not escaped |
| #2519 | Booking Engine by Lodgify | 87 | 5 | 15 | 700 | | | Non-prefixed global variable |
| #2520 | Minimum Purchase Amount For Woo Cart – For WooCommerce | 87 | 72 | 8 | 5k+ | | | Text Domain Mismatch |
| #2521 | Bulk Page Generator and Mass Page Builder – Page Generator | 87 | 26 | 87 | 4k+ | | | Non-prefixed global variable |
| #2522 | Parallax Section Block – Add Parallax Scrolling Effects to Sections. | 87 | 3 | 22 | 3k+ | | | Non-prefixed global variable |
| #2523 | ParcelWILL (Formerly ParcelPanel) – Shipment Tracking, Tracking & Order Tracking for WooCommerce | 87 | 6 | 81 | 7k+ | | | Non-prefixed global variable |
| #2524 | Recently Viewed Products for WooCommerce – Carousel, Widget, Block & Email | 87 | 2 | 18 | 1k+ | | | Database parameter is not escaped |
| #2525 | Dynamic Fields Engine – Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations | 87 | | 15 | 1k+ | | | slow db query meta key |
| #2526 | Slide-out Menu – Mobile Friendly modern navigation | 87 | 5 | 22 | 500 | | | Non-prefixed global variable |
| #2527 | Variations as Single Product – Display Single Variation for WooCommerce | 87 | 8 | 33 | 1k+ | | | Direct Query |
| #2528 | WebPlus Gateway for LiqPay on WooCommerce | 87 | 45 | 5 | 1k+ | | | wp function not compatible with requires wp |
| #2529 | Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More | 88 | 20 | 116 | 40k+ | | | Non-prefixed hook name |
| #2530 | Serious Slider | 88 | 7 | 9 | 20k+ | | | Non-prefixed global variable |
| #2531 | Custom Header Footer Scripts for Customizer | 88 | 6 | 5 | 2k+ | | | Non-prefixed function |
| #2532 | Duplicate Pages, Posts and CPT | 88 | 2 | 5 | 5k+ | | | Input is not sanitized |
| #2533 | Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | 88 | 5 | 6 | 50k+ | | | Setting is missing a sanitization callback |
| #2534 | 301 Redirects – Redirect Manager | 88 | 6 | 71 | 300k+ | | | Non-prefixed global variable |
| #2535 | Hindi-To-Lat | 88 | 3 | 14 | 400 | | | Direct Query |
| #2536 | Image Hover Effects – WordPress Plugin | 88 | 2 | 5 | 3k+ | | | Input is not sanitized |
| #2537 | Import Markdown – Versatile Markdown Importer | 88 | 25 | 9 | 2k+ | | | Missing Arg Domain |
| #2538 | WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager | 88 | 27 | 33 | 3m+ | | | wp function not compatible with requires wp |
| #2539 | Live News – Responsive News Ticker | 88 | 9 | 9 | 2k+ | | | Database parameter is not escaped |
| #2540 | MC4WP: Mailchimp Top Bar – Email Subscribe Notification Bar | 88 | 1 | 21 | 7k+ | | | Non-prefixed global variable |
| #2541 | Minimal Coming Soon – Coming Soon Page | 88 | 7 | 143 | 100k+ | | | Non-prefixed global variable |
| #2542 | Rel Nofollow | 88 | 9 | 1 | 700 | | | Missing Arg Domain |
| #2543 | Repeat Order for WooCommerce | 88 | 19 | 9 | 3k+ | | | Text Domain Mismatch |
| #2544 | Responsive Slick Slider WordPress | 88 | 3 | 131 | 500 | | | Non-prefixed global variable |
| #2545 | WP REST API Meta Endpoints | 88 | 50 | 3 | 1k+ | | | Missing Arg Domain |
| #2546 | Simple Custom CSS Plugin | 88 | 17 | 5 | 100k+ | | | wp function not compatible with requires wp |
| #2547 | WPBakery Page Builder Simple All Responsive | 88 | 4 | 6 | 1k+ | | | Missing direct file access protection |
| #2548 | FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet | 88 | 6 | 18 | 1k+ | | | Nonce verification recommended |
| #2549 | Draft – Tailwind CSS for WordPress. | 88 | 10 | 5 | 600 | | | Text Domain Mismatch |
| #2550 | Divi Carousel Free (Divi5 Support) | 88 | 268 | 26 | 30k+ | | | Text Domain Mismatch |