| #1551 | Starbox – the Author Box for Humans | 52 | 144 | 19 | 10k+ | | | Non Singular String Literal Domain |
| #1552 | Post Grid Addon for Elementor | 74 | 16 | 13 | 10k+ | | | Missing direct file access protection |
| #1553 | SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent | 25 | 432 | 1,357 | 10k+ | | | Direct Query |
| #1554 | AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking | 96 | | 73 | 10k+ | | | Non-prefixed global variable |
| #1555 | IP2Location Redirection | 33 | 198 | 122 | 7k+ | | | Output is not escaped |
| #1556 | Disable Emails | 60 | 25 | 16 | 30k+ | | | Short PHP open tag found |
| #1557 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #1558 | Lazy Load | 98 | 4 | 0 | 10k+ | | | Missing direct file access protection |
| #1559 | Order Delivery Date for WooCommerce | 35 | 2,075 | 73 | 10k+ | | | wp function not compatible with requires wp |
| #1560 | HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player | 100 | | 0 | 10k+ | | | No open findings |
| #1561 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #1562 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | | Non-prefixed global variable |
| #1563 | CoSchedule | 46 | 24 | 66 | 3k+ | | | Nonce verification recommended |
| #1564 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #1565 | Essential Widgets | 99 | | 3 | 10k+ | | | Non-prefixed function |
| #1566 | JWT Authentication for WP REST APIs | 93 | 140 | 28 | 20k+ | | | wp function not compatible with requires wp |
| #1567 | Instapage Plugin | 35 | 220 | 45 | 4k+ | | | Output is not escaped |
| #1568 | Make Connector | 94 | 1 | 9 | 80k+ | | | Non-prefixed constant |
| #1569 | Sequential Order Numbers for WooCommerce | 57 | 9 | 24 | 10k+ | | | Interpolated SQL is not prepared |
| #1570 | Database Cleaner | 28 | 139 | 294 | 10k+ | | | Direct Query |
| #1571 | Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery | 92 | 6 | 30 | 20k+ | | | Non-prefixed global variable |
| #1572 | Comet Cache | 21 | 857 | 245 | 20k+ | | | Output is not escaped |
| #1573 | Shortcode in Menus | 98 | 2 | 0 | 50k+ | | | outdated tested upto header |
| #1574 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 45 | 1m+ | | | Direct Query |
| #1575 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 5k+ | | | Exception output is not escaped |
| #1576 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | | Output is not escaped |
| #1577 | Responsive Pricing Table | 38 | 309 | 105 | 10k+ | | | Non Singular String Literal Domain |
| #1578 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | | | Output is not escaped |
| #1579 | Easy Twitter Feed Widget Plugin | 65 | 90 | 15 | 10k+ | | | Text Domain Mismatch |
| #1580 | Widgets for Reviews & Recommendations | 95 | | 344 | 8k+ | | | Non-prefixed global variable |
| #1581 | Display PHP Version | 96 | 6 | 2 | 30k+ | | | Missing direct file access protection |
| #1582 | Clean Login | 97 | 2 | 13 | 6k+ | | | Non-prefixed hook name |
| #1583 | Login Logo | 83 | 10 | 0 | 40k+ | | | Output is not escaped |
| #1584 | WPAdverts – Classifieds Plugin | 24 | 1,308 | 496 | 4k+ | | | Output is not escaped |
| #1585 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | | | wp function not compatible with requires wp |
| #1586 | HT Slider For Elementor | 50 | 884 | 40 | 20k+ | | | Text Domain Mismatch |
| #1587 | Term Management Tools | 43 | 9 | 26 | 10k+ | | | Non-prefixed hook name |
| #1588 | Ibtana – Ecommerce Product Addons | 23 | 1,547 | 1,718 | 6k+ | | | Non Singular String Literal Domain |
| #1589 | Subscriptions for WooCommerce | 30 | 1 | 1,190 | 10k+ | | | Non-prefixed global variable |
| #1590 | Pay with Vipps and MobilePay for WooCommerce | 25 | 846 | 514 | 5k+ | | | Output is not escaped |
| #1591 | Edit Flow | 34 | 103 | 227 | 4k+ | | | Non-prefixed hook name |
| #1592 | WP-SCSS | 34 | 269 | 13 | 40k+ | | | Exception output is not escaped |
| #1593 | Remove "Powered by WordPress" | 100 | | 3 | 20k+ | | | trademarked term |
| #1594 | External Links in New Window / New Tab | 98 | 2 | 13 | 30k+ | | | Non-prefixed global variable |
| #1595 | WP Review Slider | 25 | 1,186 | 2,279 | 6k+ | | | Non-prefixed global variable |
| #1596 | Ultimate Posts Widget | 31 | 309 | 86 | 10k+ | | | Output is not escaped |
| #1597 | Like Button Rating ♥ LikeBtn | 23 | 1,231 | 617 | 4k+ | | | Unsafe printing function |
| #1598 | Rearrange Products for WooCommerce | 76 | 1 | 22 | 20k+ | | | Input is not sanitized |
| #1599 | Export Media Library | 73 | 5 | 5 | 30k+ | | | Output is not escaped |
| #1600 | Style Kits for Elementor | 98 | 2 | 15 | 10k+ | | | Non-prefixed constant |