| #551 | Accordions – Responsive Accordion & FAQ Plugin for WordPress | 27 | 554 | 158 | 1k+ | | | Text Domain Mismatch |
| #552 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 146 | 274 | 50k+ | | | Non-prefixed global variable |
| #553 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #554 | Lean Player – Video and Audio Player with Playlist for WordPress, Elementor and Gutenberg | 27 | 1,615 | 466 | 2k+ | | | Text Domain Mismatch |
| #555 | BackUpWordPress | 27 | 245 | 271 | 90k+ | | | Non-prefixed global variable |
| #556 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #557 | WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | 27 | 692 | 381 | 3k+ | | | Text Domain Mismatch |
| #558 | Divi Collage | 27 | 516 | 1,183 | 700 | | | Non-prefixed global variable |
| #559 | Contact Form Generator : Creative form builder for WordPress | 27 | 1,076 | 1,510 | 800 | | | Output is not escaped |
| #560 | Gallery – Photo Albums Plugin | 27 | 647 | 252 | 2k+ | | | Output is not escaped |
| #561 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #562 | FG Joomla to WordPress | 27 | 278 | 101 | 7k+ | | | Unsafe printing function |
| #563 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 27 | 212 | 497 | 2k+ | | | Non-prefixed global variable |
| #564 | Login for Google Apps | 27 | 139 | 85 | 10k+ | | | Exception output is not escaped |
| #565 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #566 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #567 | GSpeech TTS – WordPress Text To Speech Plugin | 27 | 842 | 333 | 3k+ | | | Output is not escaped |
| #568 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #569 | Online Booking & Scheduling Calendar for WordPress by vcita | 27 | 473 | 161 | 1k+ | | | Output is not escaped |
| #570 | Memberful – Membership Plugin | 27 | 351 | 336 | 1k+ | | | Text Domain Mismatch |
| #571 | Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher | 27 | 465 | 345 | 3k+ | | | Text Domain Mismatch |
| #572 | MW WP Form | 27 | 334 | 219 | 200k+ | | | Output is not escaped |
| #573 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | | | Output is not escaped |
| #574 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #575 | Robokassa payment gateway for Woocommerce | 27 | 95 | 211 | 3k+ | | | Non-prefixed global variable |
| #576 | Side Cart Woocommerce | Woocommerce Cart | 27 | 490 | 439 | 80k+ | | | Output is not escaped |
| #577 | Video Gallery for WooCommerce – Add Product Video & Featured Video | 27 | 116 | 476 | 3k+ | | | Non-prefixed global variable |
| #578 | WC Booster | 27 | 191 | 282 | 800 | | | Non-prefixed global variable |
| #579 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #580 | Wiremo – Product Reviews for WooCommerce | 27 | 445 | 212 | 700 | | | Output is not escaped |
| #581 | Tabbed Category Product Listing for Woocommerce | 27 | 423 | 111 | 1k+ | | | Text Domain Mismatch |
| #582 | Mihdan: Ajax Edit Comments | 27 | 1,300 | 523 | 400 | | | Text Domain Mismatch |
| #583 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #584 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #585 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #586 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #587 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | | | Input is not sanitized |
| #588 | WP Job Manager | 27 | 93 | 582 | 80k+ | | | Non-prefixed hook name |
| #589 | wp-mpdf | 27 | 123 | 382 | 1k+ | | | Non-prefixed global variable |
| #590 | WP Activity Log | 27 | 96 | 230 | 300k+ | | | Nonce verification recommended |
| #591 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #592 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #593 | WPBase Cache | 27 | 189 | 113 | 2k+ | | | Text Domain Mismatch |
| #594 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | | Non-prefixed global variable |
| #595 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | | | Non-prefixed global variable |
| #596 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #597 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #598 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms | 28 | 659 | 359 | 400 | | | Text Domain Mismatch |
| #599 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #600 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |