| #1501 | Transients Manager | 42 | 45 | 50 | 20k+ | | | Output is not escaped |
| #1502 | Saphali Woocommerce Lite | 34 | 376 | 313 | 10k+ | | | Non-prefixed global variable |
| #1503 | Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations | 35 | 255 | 225 | 10k+ | | | Output is not escaped |
| #1504 | Contact Form Clean and Simple | 98 | 2 | 3 | 7k+ | | | Non-prefixed class |
| #1505 | Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more | Pending | - | - | 7k+ | | | Pending scan |
| #1506 | Amazon Pay for WooCommerce | 37 | 29 | 117 | 10k+ | | | Non-prefixed class |
| #1507 | WooCommerce Grid / List toggle | 79 | 10 | 12 | 10k+ | | | Output is not escaped |
| #1508 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #1509 | Awesome Support – WordPress HelpDesk & Support Plugin | 24 | 225 | 1,239 | 6k+ | | | Non-prefixed global variable |
| #1510 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #1511 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 24 | 68 | 30k+ | | | Non-prefixed hook name |
| #1512 | Serious Slider | 88 | 7 | 9 | 20k+ | | | Non-prefixed global variable |
| #1513 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | | | Non-prefixed class |
| #1514 | Cyclone Demo Importer | 26 | 1,778 | 448 | 10k+ | | | Text Domain Mismatch |
| #1515 | Meow Gallery | 29 | 113 | 182 | 10k+ | | | Direct Query |
| #1516 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | | | Unsafe printing function |
| #1517 | Protect WP Admin | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #1518 | Gravity Forms + Custom Post Types | 54 | 44 | 7 | 10k+ | | | Output is not escaped |
| #1519 | Hello Plus | 94 | 15 | 38 | 80k+ | | | Post Not In exclude |
| #1520 | Catch Gallery | 82 | 1 | 35 | 10k+ | | | Non-prefixed hook name |
| #1521 | Meks Smart Social Widget | 82 | 10 | 2 | 10k+ | | | Output is not escaped |
| #1522 | WordPress REST API (Version 2) | 82 | 476 | 13 | 10k+ | | | Missing Arg Domain |
| #1523 | Extended Coupon Features for WooCommerce FREE | 36 | 219 | 63 | 10k+ | | | Text Domain Mismatch |
| #1524 | SpinupWP | 49 | 43 | 38 | 30k+ | | | Non-prefixed function |
| #1525 | Snazzy Maps | 43 | 9 | 62 | 30k+ | | | Request data is not unslashed |
| #1526 | Shadowbox JS | 36 | 246 | 14 | 1k+ | | | Unsafe printing function |
| #1527 | WHMCS Bridge | 23 | 247 | 472 | 4k+ | | | Nonce verification recommended |
| #1528 | Social Share Buttons & Analytics Plugin – GetSocial.io | 40 | 97 | 25 | 2k+ | | | Output is not escaped |
| #1529 | Username Changer | 84 | 37 | 13 | 40k+ | | | wp function not compatible with requires wp |
| #1530 | Packlink PRO for WooCommerce | 27 | 132 | 160 | 20k+ | | | Non-prefixed global variable |
| #1531 | Website LLMs.txt | 40 | 13 | 148 | 40k+ | | | Non-prefixed global variable |
| #1532 | NEX-Forms – Ultimate Forms Plugin for WordPress | 24 | 2,008 | 1,195 | 6k+ | | | Text Domain Mismatch |
| #1533 | Genesis Simple Share | 98 | 3 | 0 | 10k+ | | | Missing direct file access protection |
| #1534 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | | | Output is not escaped |
| #1535 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #1536 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | | | Non-prefixed global variable |
| #1537 | Remove Category URL – Remove 'category' base from category permalinks | 79 | 5 | 8 | 50k+ | | | Missing direct file access protection |
| #1538 | Team – Team Members Showcase Plugin | 60 | 12 | 781 | 10k+ | | | Non-prefixed global variable |
| #1539 | wp-Typography | 67 | 91 | 33 | 20k+ | | | Missing direct file access protection |
| #1540 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #1541 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | | Direct Query |
| #1542 | SAML Single Sign On – SSO Login | 97 | 30 | 1 | 10k+ | | | wp function not compatible with requires wp |
| #1543 | WP Custom Login | 99 | 1 | 2 | 10k+ | | | trademarked term |
| #1544 | Desert Companion | 68 | 412 | 837 | 20k+ | | | Non-prefixed global variable |
| #1545 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #1546 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 33 | 377 | 139 | 20k+ | | | Unsafe printing function |
| #1547 | Timeline Express | 25 | 531 | 147 | 9k+ | | | Text Domain Mismatch |
| #1548 | Multiple Post Thumbnails | 53 | 25 | 18 | 20k+ | | | Output is not escaped |
| #1549 | Stratum Widgets for Elementor | 60 | 66 | 366 | 20k+ | | | Non-prefixed global variable |
| #1550 | Theme Test Drive | 43 | 39 | 16 | 7k+ | | | Output is not escaped |