| #2501 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #2502 | Taxonomy Metadata | 89 | 4 | 9 | 4k+ | | | Direct Query |
| #2503 | Timed Content | 40 | 76 | 63 | 5k+ | | | Unsafe printing function |
| #2504 | WP-ServerInfo | 38 | 162 | 55 | 10k+ | | | Output is not escaped |
| #2505 | Xagio SEO & AEO – AI SEO for Google Rankings & AI Visibility | 29 | 2 | 1,277 | 10k+ | | | Direct Query |
| #2506 | HashThemes Demo Importer | 38 | 71 | 44 | 6k+ | | | Output is not escaped |
| #2507 | Pricing Table – Responsive & Easy | 42 | 117 | 148 | 3k+ | | | Non-prefixed global variable |
| #2508 | Sprout Invoices – Client Invoicing & Estimates | 35 | 40 | 1,800 | 1k+ | | | Non-prefixed hook name |
| #2509 | Ultimate Reviews | 26 | 515 | 345 | 500 | | | Output is not escaped |
| #2510 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #2511 | Magic Content & CTA Box Builder – Advanced Gutenberg Blocks for Flexible Page Sections, Headers, Buttons, Shape Dividers, and Layout Options | 97 | 2 | 7 | 6k+ | | | Missing Version |
| #2512 | Meks Time Ago | 71 | 22 | 1 | 10k+ | | | Output is not escaped |
| #2513 | Min Max Quantities – Set Minimum/Maximum Quantity & Price Limits with Step Control for WooCommerce | 91 | 2 | 30 | 10k+ | | | Non-prefixed hook name |
| #2514 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #2515 | Mechanic Visitor Counter | 35 | 240 | 66 | 7k+ | | | Output is not escaped |
| #2516 | Easy Google Adsense and Banner Ads Manager – AdsforWP | 98 | 3 | 4 | 1k+ | | | trademarked term |
| #2517 | Easy Image Gallery | 35 | 21 | 1 | 5k+ | | | wp function not compatible with requires wp |
| #2518 | Disable Blog | 93 | 2 | 22 | 10k+ | | | Non-prefixed global variable |
| #2519 | Uber Login Logo | 62 | 16 | 5 | 10k+ | | | Unsafe printing function |
| #2520 | Open Graph | 95 | 74 | 8 | 10k+ | | | wp function not compatible with requires wp |
| #2521 | Custom Post Type Widgets | 99 | 7 | 3 | 10k+ | | | Non Singular String Literal Text |
| #2522 | Gift Wrapper for WooCommerce | 80 | 111 | 125 | 2k+ | | | Text Domain Mismatch |
| #2523 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #2524 | What Would Seth Godin Do | 100 | | 0 | 900 | | | No open findings |
| #2525 | Controlled Admin Access | 41 | 22 | 40 | 10k+ | | | Nonce verification recommended |
| #2526 | TJ Custom CSS | 69 | 18 | 10 | 8k+ | | | Output is not escaped |
| #2527 | Weaver Show Posts | 93 | | 2 | 5k+ | | | Input is not sanitized |
| #2528 | easyReservations | 22 | 5,307 | 2,480 | 800 | | | Text Domain Mismatch |
| #2529 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,066 | 2k+ | | | Non-prefixed hook name |
| #2530 | Arconix FAQ | 27 | 552 | 201 | 6k+ | | | Text Domain Mismatch |
| #2531 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 360 | 1,472 | 1k+ | | | Nonce verification recommended |
| #2532 | Google Analytics Opt-Out | 35 | 34 | 7 | 5k+ | | | Output is not escaped |
| #2533 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #2534 | Gallery Carousel Without JetPack | 49 | 56 | 35 | 4k+ | | | Text Domain Mismatch |
| #2535 | Cooked – Recipe Management | 32 | 462 | 275 | 3k+ | | | Output is not escaped |
| #2536 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | 42 | 111 | 17 | 20k+ | | | Exception output is not escaped |
| #2537 | Taxonomy Images | 49 | 38 | 50 | 9k+ | | | Output is not escaped |
| #2538 | CSV Importer | 54 | 24 | 11 | 3k+ | | | Missing direct file access protection |
| #2539 | AliExpress Dropshipping Plugin for WooCommerce Stores | 25 | 555 | 734 | 4k+ | | | Text Domain Mismatch |
| #2540 | WP Bottom Menu | 60 | 74 | 52 | 20k+ | | | Non-prefixed hook name |
| #2541 | WP Simple Adsense Insertion | 66 | 3 | 29 | 3k+ | | | Input is not validated |
| #2542 | Disable Feeds | 55 | 9 | 9 | 20k+ | | | Output is not escaped |
| #2543 | Custom Meta Widget | 58 | 55 | 2 | 7k+ | | | Output is not escaped |
| #2544 | Superb Social Media Share Buttons and Follow Buttons | 99 | 1 | 0 | 6k+ | | | outdated tested upto header |
| #2545 | bSlider – Create Responsive Image, Post, Product, and Video Sliders | 100 | 1 | 0 | 6k+ | | | invalid tested upto minor |
| #2546 | Responsive Select Menu | 58 | 29 | 27 | 3k+ | | | Output is not escaped |
| #2547 | Blank Slate | 96 | 8 | 3 | 10k+ | | | Missing direct file access protection |
| #2548 | Simple File List | 93 | 1 | 525 | 3k+ | | | Non-prefixed global variable |
| #2549 | Push Notifications for WP – Self Hosted Web Push Notifications | 92 | 165 | 36 | 6k+ | | | wp function not compatible with requires wp |
| #2550 | Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform | 24 | 431 | 1,010 | 10k+ | | | Output is not escaped |