| #601 | Nested Pages | 25 | 674 | 560 | 90k+ | | | Non-prefixed global variable |
| #602 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #603 | kk Star Ratings – Rate Post & Collect User Feedbacks | 25 | 772 | 1,388 | 70k+ | | | Non-prefixed global variable |
| #604 | WPC Smart Quick View for WooCommerce | 90 | | 25 | 90k+ | | | Nonce verification recommended |
| #605 | Feeds for YouTube (YouTube video, channel, and gallery plugin) | 21 | 558 | 978 | 100k+ | | | Output is not escaped |
| #606 | Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder | 24 | 576 | 1,344 | 70k+ | | | Non-prefixed global variable |
| #607 | SiteGround Migrator | 35 | 113 | 74 | 80k+ | | | Missing Arg Domain |
| #608 | WPC Smart Compare for WooCommerce | 90 | | 22 | 70k+ | | | Nonce verification recommended |
| #609 | ShipStation for WooCommerce | 81 | | 34 | 40k+ | | | Non-prefixed class |
| #610 | WP Database Backup – Unlimited Database & Files Backup by Backup for WP | 89 | 855 | 11 | 30k+ | | | Text Domain Mismatch |
| #611 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #612 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #613 | Microsoft Clarity | 36 | 48 | 163 | 200k+ | | | Nonce verification recommended |
| #614 | 404 to 301 – Redirect Manager, 404 Error Logs & Notifications | 85 | | 24 | 100k+ | | | Database parameter is not escaped |
| #615 | Mesmerize Companion | 91 | 27 | 91 | 50k+ | | | Non-prefixed global variable |
| #616 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #617 | FOX – Currency Switcher Professional for WooCommerce | 30 | 211 | 1,022 | 50k+ | | | Non-prefixed global variable |
| #618 | FileOrganizer – WordPress File Manager | 21 | 536 | 241 | 200k+ | | | unlink unlink |
| #619 | Media Library Folders | 24 | 889 | 807 | 10k+ | | | Text Domain Mismatch |
| #620 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | | | Text Domain Mismatch |
| #621 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | | Non-prefixed global variable |
| #622 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 557 | 541 | 100k+ | | | Output is not escaped |
| #623 | Social Media Widget | 53 | 90 | 21 | 30k+ | | | Text Domain Mismatch |
| #624 | WP Meta and Date Remover | 24 | 665 | 1,314 | 90k+ | | | Non-prefixed global variable |
| #625 | The WP Remote WordPress Plugin | 82 | 51 | 24 | 30k+ | | | Missing direct file access protection |
| #626 | WebSub (FKA. PubSubHubbub) | 98 | 5 | 4 | 100k+ | | | Non-prefixed hook name |
| #627 | Search Exclude | 57 | 73 | 40 | 50k+ | | | Text Domain Mismatch |
| #628 | Blocks Animation: CSS Animations for Gutenberg Blocks | 99 | | 5 | 90k+ | | | trademarked term |
| #629 | Ocean Social Sharing | 84 | 10 | 36 | 60k+ | | | Non-prefixed global variable |
| #630 | Menu Image, Icons made easy | 23 | 591 | 1,406 | 100k+ | | | Non-prefixed global variable |
| #631 | Connect Polylang for Elementor | 73 | 1 | 21 | 100k+ | | | Nonce verification recommended |
| #632 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,653 | 5,084 | 8k+ | | | Non-prefixed global variable |
| #633 | hCaptcha for WP | 42 | 115 | 18 | 70k+ | | | Exception output is not escaped |
| #634 | Schema – All In One Schema Rich Snippets | 43 | 601 | 188 | 30k+ | | | Text Domain Mismatch |
| #635 | Gravity PDF | 57 | 116 | 152 | 20k+ | | | Non-prefixed global variable |
| #636 | Complianz – Terms and Conditions | 95 | 13 | 26 | 300k+ | | | Non-prefixed global variable |
| #637 | Email Encoder – Protect Email Addresses and Phone Numbers | 38 | 9 | 150 | 90k+ | | | Non-prefixed global variable |
| #638 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #639 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #640 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #641 | Async JavaScript | 37 | 357 | 79 | 70k+ | | | Unsafe printing function |
| #642 | Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel | 93 | | 244 | 70k+ | | | Non-prefixed global variable |
| #643 | Jetpack VaultPress | 28 | 71 | 362 | 10k+ | | | Missing nonce verification |
| #644 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #645 | StatCounter – Free Real Time Visitor Stats | 95 | 41 | 10 | 70k+ | | | wp function not compatible with requires wp |
| #646 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | | Output is not escaped |
| #647 | Social Media Feather | 99 | | 4 | 10k+ | | | Non-prefixed constant |
| #648 | Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website | 36 | 216 | 50 | 50k+ | | | Output is not escaped |
| #649 | Accept Stripe Payments | 21 | 373 | 884 | 20k+ | | | Missing nonce verification |
| #650 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | | | Non-prefixed global variable |