| #2251 | Pdf Embed | 93 | 4 | 4 | 10k+ | | | Non-prefixed global variable |
| #2252 | WPKoi Templates for Elementor | 44 | 937 | 25 | 5k+ | | | Text Domain Mismatch |
| #2253 | WP Snow Effect | 98 | 5 | 4 | 1k+ | | | Missing direct file access protection |
| #2254 | Link Juice Keeper | 91 | 4 | 36 | 10k+ | | | Non-prefixed hook name |
| #2255 | Front End PM | 23 | 978 | 2,264 | 5k+ | | | Non-prefixed global variable |
| #2256 | WP Revisions Control | 85 | 9 | 6 | 40k+ | | | wp function not compatible with requires wp |
| #2257 | Hide Featured Image | 42 | 26 | 12 | 10k+ | | | Unsafe printing function |
| #2258 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #2259 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | | Text Domain Mismatch |
| #2260 | WPvivid Backup for MainWP | 25 | 818 | 1,794 | 10k+ | | | Missing nonce verification |
| #2261 | HD Quiz | 39 | 252 | 82 | 7k+ | | | Output is not escaped |
| #2262 | Video Background | 49 | 35 | 26 | 9k+ | | | Unsafe printing function |
| #2263 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions | 95 | 17 | 60 | 7k+ | | | Non-prefixed hook name |
| #2264 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 20 | 1,327 | 2,755 | 8k+ | | | Output is not escaped |
| #2265 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | | | Missing Arg Domain |
| #2266 | Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher | 27 | 465 | 345 | 3k+ | | | Text Domain Mismatch |
| #2267 | Glossary | 35 | 169 | 93 | 2k+ | | | Non Singular String Literal Domain |
| #2268 | WP All Import – Import Add-On for ACF | 84 | 3 | 46 | 50k+ | | | Non-prefixed global variable |
| #2269 | WP Child Theme Generator | 42 | 35 | 66 | 20k+ | | | Request data is not unslashed |
| #2270 | LearnPress – bbPress Integration | 53 | 19 | 14 | 2k+ | | | Output is not escaped |
| #2271 | Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | 26 | 525 | 240 | 600 | | | Text Domain Mismatch |
| #2272 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #2273 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #2274 | Shared Files – File Upload & Download Manager | 39 | 5 | 184 | 4k+ | | | Nonce verification recommended |
| #2275 | PiWeb Export Customers Users & Guest customer to CSV for WooCommerce | 30 | 173 | 75 | 1k+ | | | Text Domain Mismatch |
| #2276 | Catch Themes Demo Import | 100 | | 1 | 5k+ | | | Non-prefixed class |
| #2277 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |
| #2278 | DreamHost Automated Migration | 62 | 15 | 23 | 20k+ | | | Output is not escaped |
| #2279 | AnsPress – Question and answer | 35 | 22 | 778 | 3k+ | | | Non-prefixed function |
| #2280 | WP Author, Date and Meta Remover | 97 | 4 | 3 | 10k+ | | | trademarked term |
| #2281 | VikBooking Hotel Booking Engine & PMS | 25 | 13,251 | 8,316 | 8k+ | | | Output is not escaped |
| #2282 | Coming Soon Page & Maintenance Mode | 31 | 613 | 266 | 3k+ | | | Text Domain Mismatch |
| #2283 | WP Datepicker | 35 | 225 | 181 | 7k+ | | | Output is not escaped |
| #2284 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | | | Text Domain Mismatch |
| #2285 | JSM Show Post Metadata | 40 | 15 | 66 | 10k+ | | | Nonce verification recommended |
| #2286 | Crazy Egg | 84 | 12 | 1 | 7k+ | | | wp function not compatible with requires wp |
| #2287 | Smart Image Resize for WooCommerce | 25 | 582 | 404 | 7k+ | | | Text Domain Mismatch |
| #2288 | Local Google Analytics for WordPress – caches external requests | 23 | 551 | 199 | 3k+ | | | Output is not escaped |
| #2289 | Custom Menu Wizard Widget | 38 | 326 | 30 | 2k+ | | | Output is not escaped |
| #2290 | HTML Forms – Simple WordPress Forms Plugin | 36 | 231 | 166 | 10k+ | | | Output is not escaped |
| #2291 | Login rebuilder | 31 | 406 | 226 | 20k+ | | | Non Singular String Literal Domain |
| #2292 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 160 | 597 | 10k+ | | | Non-prefixed global variable |
| #2293 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #2294 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #2295 | Extra Fees for WooCommerce | 24 | 1,113 | 1,569 | 7k+ | | | Non-prefixed global variable |
| #2296 | Invite Anyone | 40 | 32 | 130 | 1k+ | | | Non-prefixed hook name |
| #2297 | Italy Cookie Choices (for EU Cookie Law & Cookie Notice) | 36 | 115 | 77 | 10k+ | | | Unsafe printing function |
| #2298 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |
| #2299 | Subscribe Button by AddToAny | 40 | 93 | 47 | 900 | | | Output is not escaped |
| #2300 | WPGet API – Connect to any external REST API | 89 | 15 | 19 | 10k+ | | | Missing direct file access protection |