| #2001 | Gantry 5 Framework | 100 | | 0 | 7k+ | | | No open findings |
| #2002 | WP Video Popup – WordPress Video Lightbox for YouTube, Rumble & Vimeo | 80 | 5 | 14 | 9k+ | | | wp function not compatible with requires wp |
| #2003 | Superb Helper | 97 | 5 | 32 | 8k+ | | | Non-prefixed global variable |
| #2004 | cbnet Ping Optimizer | 98 | 3 | 0 | 1k+ | | | Missing direct file access protection |
| #2005 | Homepage Control | 83 | 13 | 3 | 9k+ | | | Output is not escaped |
| #2006 | Easy Appointment Booking & Scheduling System – Webba Booking Calendar | 22 | 1,617 | 3,380 | 2k+ | | | Non-prefixed global variable |
| #2007 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | | | Output is not escaped |
| #2008 | Easy Booking – WooCommerce Booking & Reservation Plugin | 82 | 60 | 66 | 4k+ | | | Non-prefixed global variable |
| #2009 | No Self Ping | 93 | 2 | 0 | 10k+ | | | Setting is missing a sanitization callback |
| #2010 | WooCommerce Shortcodes | 88 | 5 | 7 | 9k+ | | | trademarked term |
| #2011 | JetSticky For Elementor | 59 | 13 | 38 | 30k+ | | | Nonce verification recommended |
| #2012 | WPC Variations Radio Buttons for WooCommerce | 93 | | 18 | 6k+ | | | Non-prefixed class |
| #2013 | Smart COD for WooCommerce | 39 | 50 | 28 | 30k+ | | | Output is not escaped |
| #2014 | Simple Map | 35 | 10 | 1 | 10k+ | | | Output is not escaped |
| #2015 | WP-Stats | 32 | 237 | 126 | 2k+ | | | Output is not escaped |
| #2016 | Multibanco, MB WAY, Credit card, Apple Pay, Google Pay, Payshop, Cofidis Pay, and PIX (ifthenpay) for WooCommerce | 95 | | 88 | 7k+ | | | Non-prefixed function |
| #2017 | InPost PL | 35 | 2 | 938 | 10k+ | | | Non-prefixed global variable |
| #2018 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | | | Non-prefixed global variable |
| #2019 | Active Directory Integration / LDAP Integration | 100 | | 2 | 4k+ | | | Non-prefixed constant |
| #2020 | Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform | 99 | 1 | 0 | 20k+ | | | outdated tested upto header |
| #2021 | WP101 Video Tutorial Plugin | 86 | 15 | 18 | 10k+ | | | Missing direct file access protection |
| #2022 | Bing URL Submissions Plugin | 74 | 10 | 38 | 40k+ | | | error log error log |
| #2023 | Auto Upload Images | 40 | 62 | 13 | 20k+ | | | Unsafe printing function |
| #2024 | Widget Responsive for Youtube | 37 | 240 | 7 | 7k+ | | | Output is not escaped |
| #2025 | YITH WooCommerce Product Bundles | 28 | 404 | 1,480 | 3k+ | | | Non-prefixed global variable |
| #2026 | WP Contact Slider – Contact Form Slider Widget | 24 | 1,355 | 2,589 | 9k+ | | | Non-prefixed global variable |
| #2027 | Adobe Fonts (formerly Typekit) for WordPress | 97 | 3 | 5 | 10k+ | | | trademarked term |
| #2028 | Groundhogg — CRM, Newsletters, and Marketing Automation | 23 | 136 | 919 | 2k+ | | | Non-prefixed global variable |
| #2029 | Login Logout Menu | 72 | 7 | 20 | 20k+ | | | Input is not sanitized |
| #2030 | Illdy Companion | 38 | 187 | 23 | 6k+ | | | Output is not escaped |
| #2031 | Open User Map – Interactive Leaflet Maps | 26 | 895 | 988 | 10k+ | | | Non-prefixed global variable |
| #2032 | Elements Plus! | 96 | 11 | 20 | 6k+ | | | Non-prefixed function |
| #2033 | WP SVG Images | 50 | 58 | 12 | 30k+ | | | Text Domain Mismatch |
| #2034 | Advanced Custom Fields: Image Aspect Ratio Crop Field | 35 | 70 | 37 | 20k+ | | | Text Domain Mismatch |
| #2035 | Custom Order Status for WooCommerce | 35 | 41 | 55 | 10k+ | | | Non-prefixed hook name |
| #2036 | WP All Import – Import SEO Settings for Yoast SEO | 46 | 19 | 26 | 20k+ | | | Nonce verification recommended |
| #2037 | GD bbPress Attachments | 35 | 2 | 10 | 6k+ | | | wp redirect wp redirect |
| #2038 | Team Builder – Team Member Showcase With Grid and slider, Compatible With Elementor, Gutenberg | 31 | 459 | 282 | 7k+ | | | Non Singular String Literal Domain |
| #2039 | SpeakOut! Email Petitions | 20 | 850 | 994 | 3k+ | | | Missing nonce verification |
| #2040 | Document Gallery | 29 | 183 | 98 | 8k+ | | | Output is not escaped |
| #2041 | Login Security Captcha | 100 | | 0 | 10k+ | | | No open findings |
| #2042 | Classic Editor and Classic Widgets | 63 | 19 | 41 | 20k+ | | | Nonce verification recommended |
| #2043 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #2044 | WP-Ban | 38 | 99 | 108 | 8k+ | | | Unsafe printing function |
| #2045 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #2046 | Schema Engine AI – AI Schema Markup, Reviews & Rich Snippets for SEO | 97 | 56 | 1 | 10k+ | | | wp function not compatible with requires wp |
| #2047 | Min Max Step Quantity Limits Manager for WooCommerce | 35 | 67 | 158 | 3k+ | | | Non-prefixed global variable |
| #2048 | Graphina – Charts and Graphs For Elementor | 39 | 1,910 | 113 | 10k+ | | | Text Domain Mismatch |
| #2049 | SSL Mixed Content Fix | 34 | 53 | 65 | 8k+ | | | Output is not escaped |
| #2050 | Mihdan: Ajax Edit Comments | 27 | 1,300 | 523 | 400 | | | Text Domain Mismatch |