| #551 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | | | Output is not escaped |
| #552 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |
| #553 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #554 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #555 | miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) | 99 | | 6 | 10k+ | | | Non-prefixed constant |
| #556 | Payment Plugins for PayPal WooCommerce | 28 | 232 | 246 | 80k+ | | | Non-prefixed hook name |
| #557 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #558 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | | Text Domain Mismatch |
| #559 | Seriously Simple Podcasting | 23 | 548 | 629 | 30k+ | | | Non-prefixed hook name |
| #560 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #561 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #562 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,465 | 3,974 | 10k+ | | | Output is not escaped |
| #563 | AI Puffer – Chat. Create. Automate. (formerly AI Power) | 91 | 2 | 0 | 10k+ | | | Output is not escaped |
| #564 | Statify | 89 | 5 | 33 | 100k+ | | | Direct Query |
| #565 | Link Library | 20 | 1,941 | 1,397 | 10k+ | | | Unsafe printing function |
| #566 | WooCommerce Legacy REST API | 31 | 324 | 177 | 400k+ | | | Missing Translators Comment |
| #567 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 166 | 395 | 60k+ | | | Short PHP open tag found |
| #568 | Super Progressive Web Apps | 59 | 62 | 22 | 40k+ | | | wp function not compatible with requires wp |
| #569 | Razorpay for WooCommerce | 20 | 975 | 859 | 100k+ | | | Non-prefixed function |
| #570 | Stream | 81 | 5 | 80 | 80k+ | | | Direct Query |
| #571 | Visual Portfolio, Photo Gallery & Post Grid | 39 | 34 | 189 | 60k+ | | | Non-prefixed hook name |
| #572 | Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links | 98 | 1 | 15 | 300k+ | | | Non-prefixed global variable |
| #573 | Post Type Switcher | 75 | 3 | 18 | 200k+ | | | Direct Query |
| #574 | 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | 38 | 353 | 77 | 80k+ | | | Non Singular String Literal Domain |
| #575 | Order Export & Order Import for WooCommerce | 60 | 247 | 698 | 60k+ | | | Non-prefixed global variable |
| #576 | VK Block Patterns | 55 | 8 | 61 | 100k+ | | | Non-prefixed function |
| #577 | Open Graph and Twitter Card Tags | 35 | 15 | 27 | 50k+ | | | error log error log |
| #578 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #579 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 22 | 522 | 2,367 | 40k+ | | | Direct Query |
| #580 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 82 | 148 | 100k+ | | | Output is not escaped |
| #581 | GoSMTP – SMTP for WordPress | 39 | 59 | 42 | 500k+ | | | Output is not escaped |
| #582 | Proxy Cache Purge | 97 | | 44 | 40k+ | | | Non-prefixed hook name |
| #583 | SEO Ultimate | 24 | 437 | 269 | 10k+ | | | Output is not escaped |
| #584 | Go Live Update Urls | 55 | 11 | 49 | 80k+ | | | Non-prefixed hook name |
| #585 | PW WooCommerce Gift Cards | 33 | 238 | 186 | 20k+ | | | Output is not escaped |
| #586 | ووکامرس فارسی | 28 | 157 | 215 | 90k+ | | | Output is not escaped |
| #587 | Admin Custom Login | 43 | | 238 | 20k+ | | | Request data is not unslashed |
| #588 | Ultimate FAQ Accordion Plugin | 28 | 386 | 227 | 30k+ | | | Unsafe printing function |
| #589 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #590 | WP Mobile Menu – The Mobile-Friendly Responsive Menu | 32 | 990 | 195 | 70k+ | | | Output is not escaped |
| #591 | Ajax Search Lite – Live Search & Filter | 76 | 126 | 264 | 80k+ | | | Non-prefixed hook name |
| #592 | Fixed Widget and Sticky Elements for WordPress | 83 | 7 | 13 | 80k+ | | | Non-prefixed global variable |
| #593 | Limit Login Attempts | 40 | 81 | 38 | 300k+ | | | Output is not escaped |
| #594 | Email Deliverability – SMTP Replacement, Email API Deliverability & Email Log | 74 | 8 | 23 | 200k+ | | | Output is not escaped |
| #595 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #596 | HUSKY – Products Filter Professional for WooCommerce | 25 | | 1,895 | 90k+ | | | Non-prefixed global variable |
| #597 | WP-PostRatings | 29 | 425 | 384 | 30k+ | | | Output is not escaped |
| #598 | Print, PDF & Email by PrintFriendly | 35 | 1 | 5 | 20k+ | | | Not In Footer |
| #599 | WP Table Builder – Drag & Drop Table Builder | 57 | 63 | 39 | 50k+ | | | Not Allowed |
| #600 | Debug Bar | 41 | 64 | 25 | 20k+ | | | Output is not escaped |