| #651 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | | | Non-prefixed global variable |
| #652 | Safe Redirect Manager | 66 | 9 | 60 | 40k+ | | | Non-prefixed hook name |
| #653 | aThemes Starter Sites | 29 | 268 | 214 | 40k+ | | | Text Domain Mismatch |
| #654 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #655 | Login Lockdown & Protection | 94 | 5 | 15 | 100k+ | | | Non-prefixed global variable |
| #656 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | | | Output is not escaped |
| #657 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | | Dynamic hook name |
| #658 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 137 | 353 | 60k+ | | | Input is not sanitized |
| #659 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | | Text Domain Mismatch |
| #660 | Ads.txt Manager | 92 | 4 | 4 | 100k+ | | | Missing direct file access protection |
| #661 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,934 | 5,248 | 10k+ | | | Non-prefixed hook name |
| #662 | Quick Adsense | 93 | 31 | 26 | 20k+ | | | Missing direct file access protection |
| #663 | Contact Form 7 – Dynamic Text Extension | 39 | 103 | 28 | 100k+ | | | Output is not escaped |
| #664 | Custom Product Tabs for WooCommerce | 36 | 87 | 81 | 80k+ | | | Output is not escaped |
| #665 | Shortcoder — Create Shortcodes for Anything | 37 | 25 | 70 | 100k+ | | | Non-prefixed global variable |
| #666 | Klarna for WooCommerce | 26 | 284 | 507 | 30k+ | | | Dynamic hook name |
| #667 | MasterStudy LMS WordPress Plugin – for Online Courses and Education | 23 | 1,419 | 4,875 | 10k+ | | | Non-prefixed global variable |
| #668 | FancyBox for WordPress | 60 | 175 | 33 | 30k+ | | | Text Domain Mismatch |
| #669 | Kubio AI Page Builder | 60 | 283 | 77 | 90k+ | | | Missing direct file access protection |
| #670 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 80k+ | | | Text Domain Mismatch |
| #671 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #672 | Visitor Traffic Real Time Statistics | 24 | 472 | 927 | 30k+ | | | Non-prefixed global variable |
| #673 | WPFront Scroll Top | 100 | | 4 | 200k+ | | | trademarked term |
| #674 | Advanced AJAX Product Filters | 22 | 2,683 | 1,205 | 50k+ | | | Text Domain Mismatch |
| #675 | WP Console – WordPress PHP Console powered by PsySH | 53 | 34 | 48 | 20k+ | | | Exception output is not escaped |
| #676 | ECS – Ele Custom Skin for Elementor | 34 | 99 | 205 | 100k+ | | | Text Domain Mismatch |
| #677 | Social Sharing Plugin – Social Warfare | 35 | 17 | 143 | 20k+ | | | Non-prefixed class |
| #678 | WP-Sweep | 74 | 1 | 201 | 100k+ | | | Direct Query |
| #679 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 322 | 10k+ | | | Text Domain Mismatch |
| #680 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #681 | iframe | 74 | 18 | 0 | 70k+ | | | Unsafe printing function |
| #682 | ICS Calendar | 99 | 2 | 1 | 10k+ | | | wp function not compatible with requires wp |
| #683 | Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | 23 | 525 | 1,541 | 30k+ | | | Non-prefixed global variable |
| #684 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | | | Non-prefixed global variable |
| #685 | Temporary Login Without Password | 28 | 128 | 131 | 100k+ | | | wp function not compatible with requires wp |
| #686 | MW WP Form | 27 | 334 | 219 | 200k+ | | | Output is not escaped |
| #687 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #688 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | 24 | 267 | 404 | 40k+ | | | Non-prefixed hook name |
| #689 | Sticky Menu & Sticky Header | 97 | 4 | 23 | 100k+ | | | Non-prefixed global variable |
| #690 | Auto Featured Image (Auto Post Thumbnail) | 79 | 5 | 30 | 50k+ | | | Non-prefixed hook name |
| #691 | Simply Static – The Static Site Generator | 25 | 187 | 528 | 30k+ | | | Non-prefixed hook name |
| #692 | SEO Friendly Images | 39 | 292 | 20 | 20k+ | | | Output is not escaped |
| #693 | Advanced Custom Fields: Font Awesome Field | 40 | 332 | 70 | 90k+ | | | Text Domain Mismatch |
| #694 | WooCommerce Shipping | 71 | | 48 | 70k+ | | | Direct Query |
| #695 | Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor | 97 | | 35 | 30k+ | | | Post Not In post not in |
| #696 | Page scroll to id | 37 | 38 | 120 | 100k+ | | | Missing nonce verification |
| #697 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,063 | 10k+ | | | Non-prefixed global variable |
| #698 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #699 | WP Accessibility | 39 | 200 | 104 | 60k+ | | | Unsafe printing function |
| #700 | Custom Post Type Permalinks | 35 | 8 | 4 | 200k+ | | | Setting is missing a sanitization callback |