| #2551 | Cookie Notice lite | 87 | 3 | 1 | 400 | | | Missing direct file access protection |
| #2552 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #2553 | Customizer Search | 87 | 10 | 1 | 50k+ | | | Missing direct file access protection |
| #2554 | Autolinks Manager – SEO Auto Linker | 87 | 7 | 16 | 1k+ | | | Database parameter is not escaped |
| #2555 | Disable Block Editor FullScreen mode | 87 | 6 | 2 | 1k+ | | | Output is not escaped |
| #2556 | Disable User Password Reset Admin Notifications | 87 | 6 | 2 | 1k+ | | | Nonce verification recommended |
| #2557 | Donorbox – Free Recurring Donation Plugin and Fundraising Platform | 87 | 5 | 6 | 8k+ | | | Missing Arg Domain |
| #2558 | Easy Notification Bar | 87 | 6 | 2 | 9k+ | | | Output is not escaped |
| #2559 | Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | 87 | 7 | 5 | 50k+ | | | Setting is missing a sanitization callback |
| #2560 | Enable Abilities for MCP | 87 | | 48 | 1k+ | | | Direct Query |
| #2561 | Farsi Font for Elementor | 87 | 11 | 2 | 1k+ | | | Missing Translators Comment |
| #2562 | Entry Expiration for Gravity Forms | 87 | 8 | 2 | 1k+ | | | Missing direct file access protection |
| #2563 | GTM Kit – Google Tag Manager & GA4 integration | 87 | 5 | 17 | 30k+ | | | Missing direct file access protection |
| #2564 | Simple Slider Block – Create Sliders From Core Blocks | 87 | 6 | 34 | 600 | | | Non-prefixed global variable |
| #2565 | I Recommend This – Love/Like Button for WordPress Posts | 87 | 3 | 49 | 5k+ | | | Direct Query |
| #2566 | Image Optimization – Compress Images and Convert to WebP or AVIF | 87 | 15 | 24 | 1m+ | | | Missing Translators Comment |
| #2567 | Image Ticker Carousel | by Creavi | 87 | 2 | 17 | 400 | | | Nonce verification recommended |
| #2568 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | | | Non-prefixed global variable |
| #2569 | iPanorama 360 – Advanced Virtual Tour Builder | 87 | 726 | 34 | 5k+ | | | Text Domain Mismatch |
| #2570 | Last Modified Timestamp | 87 | 9 | 3 | 7k+ | | | Output is not escaped |
| #2571 | Livebeep – Chatbot, Live Chat, CRM & Digital Marketing | 87 | 7 | 4 | 400 | | | Output is not escaped |
| #2572 | Booking Engine by Lodgify | 87 | 5 | 15 | 700 | | | Non-prefixed global variable |
| #2573 | Manage/View Your Posts Only | 87 | 5 | 3 | 400 | | | Input is not sanitized |
| #2574 | Marin Companion | 87 | 19 | 66 | 500 | | | Non-prefixed global variable |
| #2575 | Menu Caching | 87 | 3 | 12 | 500 | | | Request data is not unslashed |
| #2576 | Minimum Purchase Amount For Woo Cart – For WooCommerce | 87 | 72 | 8 | 5k+ | | | Text Domain Mismatch |
| #2577 | NHS Blocks | 87 | 6 | 6 | 900 | | | Non-prefixed global variable |
| #2578 | No Category Base (WPML) | 87 | 5 | 5 | 100k+ | | | Missing direct file access protection |
| #2579 | Object Cache 4 everyone | 87 | 2 | 65 | 5k+ | | | Non-prefixed function |
| #2580 | Bulk Page Generator and Mass Page Builder – Page Generator | 87 | 26 | 87 | 4k+ | | | Non-prefixed global variable |
| #2581 | Parallax Section Block – Add Parallax Scrolling Effects to Sections. | 87 | 3 | 22 | 3k+ | | | Non-prefixed global variable |
| #2582 | ParcelWILL (Formerly ParcelPanel) – Shipment Tracking, Tracking & Order Tracking for WooCommerce | 87 | 6 | 81 | 7k+ | | | Non-prefixed global variable |
| #2583 | Pay in Store WooCommerce Payment Gateway | 87 | 26 | 5 | 2k+ | | | Non Singular String Literal Domain |
| #2584 | Recently Viewed Products for WooCommerce – Carousel, Widget, Block & Email | 87 | 2 | 18 | 1k+ | | | Database parameter is not escaped |
| #2585 | Review widget addon for Divi | 87 | 20 | 3 | 500 | | | Text Domain Mismatch |
| #2586 | Dynamic Fields Engine – Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations | 87 | | 15 | 1k+ | | | slow db query meta key |
| #2587 | Security Header Generator | 87 | 10 | 20 | 500 | | | Non Singular String Literal Text |
| #2588 | Simple Catalog for WooCommerce | 87 | 2 | 4 | 1k+ | | | wp redirect wp redirect |
| #2589 | Simple Footnotes | 87 | 11 | 1 | 600 | | | wp function not compatible with requires wp |
| #2590 | Simple Photo Feed | 87 | 4 | 48 | 1k+ | | | Non-prefixed global variable |
| #2591 | Slide-out Menu – Mobile Friendly modern navigation | 87 | 5 | 22 | 500 | | | Non-prefixed global variable |
| #2592 | Export Single Post Page | 87 | 3 | 6 | 3k+ | | | Nonce verification recommended |
| #2593 | Slug or PostID | 87 | 3 | 4 | 600 | | | Missing nonce verification |
| #2594 | Smaily Connect | 87 | | 52 | 2k+ | | | Non-prefixed global variable |
| #2595 | Snitch | 87 | 5 | 19 | 800 | | | Nonce verification recommended |
| #2596 | Unnotifier — disable admin notices individually | 87 | 5 | 11 | 700 | | | Missing Translators Comment |
| #2597 | Invoice Payment Gateway for WooCommerce | 87 | 5 | 4 | 2k+ | | | Output is not escaped |
| #2598 | Variations as Single Product – Display Single Variation for WooCommerce | 87 | 8 | 33 | 1k+ | | | Direct Query |
| #2599 | WebPlus Gateway for LiqPay on WooCommerce | 87 | 45 | 5 | 1k+ | | | wp function not compatible with requires wp |
| #2600 | Wider Gravity Forms Stop Entries | 87 | 22 | 0 | 600 | | | Text Domain Mismatch |