| #501 | ACF YouTube Picker | 85 | 82 | 7 | 400 | | | Text Domain Mismatch |
| #502 | Acme Demo Setup | 84 | 8 | 6 | 10k+ | | | Non-prefixed function |
| #503 | ACME Divi Modules | 32 | 573 | 35 | 400 | | | Text Domain Mismatch |
| #504 | Acme Fix Images – Regenerate Thumbnails | 97 | 5 | 5 | 3k+ | | | Missing direct file access protection |
| #505 | Product Labels For Woocommerce (Sale Badges) | 36 | 90 | 48 | 10k+ | | | Output is not escaped |
| #506 | ActBlue Contributions | 98 | 2 | 3 | 400 | | | Missing direct file access protection |
| #507 | Action Scheduler | 38 | 92 | 134 | 20k+ | | | Exception output is not escaped |
| #508 | Active Campaign & WPForms | 78 | 27 | 10 | 400 | | | Text Domain Mismatch |
| #509 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 5k+ | | | Exception output is not escaped |
| #510 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #511 | ActiveDEMAND | 32 | 157 | 161 | 1k+ | | | Output is not escaped |
| #512 | ActiveLayer Anti-Spam: Spam Protection for Forms & Comments | 96 | | 2 | 3k+ | | | Database parameter is not escaped |
| #513 | ActiveTrail – Contact Form 7 | 42 | 18 | 85 | 600 | | | Missing nonce verification |
| #514 | ActivityPub | 81 | 67 | 305 | 6k+ | | | Non-prefixed global variable |
| #515 | WP Sessions Time Monitoring Full Automatic | 22 | 869 | 1,529 | 500 | | | Non-prefixed global variable |
| #516 | Acumbamail | 75 | 7 | 36 | 1k+ | | | Non-prefixed global variable |
| #517 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |
| #518 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #519 | AcyMailing integration for WooCommerce | 99 | | 4 | 400 | | | Non-prefixed class |
| #520 | Ad Auto Insert H | 41 | 496 | 15 | 1k+ | | | Non Singular String Literal Domain |
| #521 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | | | Output is not escaped |
| #522 | Ad Invalid Click Protector (AICP) | 39 | 78 | 57 | 10k+ | | | Text Domain Mismatch |
| #523 | Ad Widget for WordPress | 35 | 68 | 14 | 2k+ | | | Output is not escaped |
| #524 | Adaptify SEO One-Click Publishing | 100 | | 0 | 700 | | | No open findings |
| #525 | Parallax Scroll by adamrob.co.uk | 38 | 102 | 51 | 1k+ | | | Output is not escaped |
| #526 | Adapta RGPD | 37 | 349 | 72 | 40k+ | | | Text Domain Mismatch |
| #527 | Adaptive Images for WordPress | 37 | 51 | 75 | 3k+ | | | Output is not escaped |
| #528 | Add Admin CSS | 98 | 4 | 2 | 10k+ | | | Not Allowed |
| #529 | Add Anchor Links | 91 | 5 | 2 | 1k+ | | | application detected |
| #530 | Add Any Extension to Pages | 71 | 3 | 10 | 2k+ | | | Input is not sanitized |
| #531 | Campo RUT para CF7 | 84 | 6 | 7 | 600 | | | Missing nonce verification |
| #532 | Add Category to Pages | 97 | 3 | 2 | 20k+ | | | Missing direct file access protection |
| #533 | Add class to Elementor Image | 98 | 2 | 0 | 1k+ | | | license mismatch |
| #534 | Add Code To Head | 92 | 2 | 8 | 3k+ | | | Non-prefixed global variable |
| #535 | Advanced coupon for WooCommerce | 29 | 472 | 242 | 900 | | | Text Domain Mismatch |
| #536 | Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript | 98 | 2 | 3 | 1k+ | | | Forbidden PHP function found |
| #537 | Add Custom Header Images | 98 | 2 | 4 | 400 | | | Missing direct file access protection |
| #538 | Add Customer for WooCommerce | 38 | 229 | 153 | 1k+ | | | Text Domain Mismatch |
| #539 | Add Dashboard Columns | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #540 | Add Descendants As Submenu Items | 84 | 3 | 8 | 2k+ | | | Missing nonce verification |
| #541 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #542 | Add Featured Image Column | 96 | 1 | 1 | 3k+ | | | Nonce verification recommended |
| #543 | Featured image to All-Posts | 86 | 6 | 5 | 400 | | | Nonce verification recommended |
| #544 | Custom WooCommerce Checkout Fields Editor | 23 | 755 | 1,386 | 2k+ | | | Non-prefixed global variable |
| #545 | Add From Server | 37 | 52 | 20 | 60k+ | | | Output is not escaped |
| #546 | Add From Server Reloaded | 99 | 2 | 1 | 3k+ | | | Missing direct file access protection |
| #547 | Add .html Extension to Pages | 97 | 4 | 1 | 700 | | | Missing direct file access protection |
| #548 | Add HTML to Page | 97 | 5 | 0 | 400 | | | Missing direct file access protection |
| #549 | Add link on copied text | 79 | 11 | 3 | 400 | | | Output is not escaped |
| #550 | Add Link to Copied Text | 76 | 33 | 6 | 1k+ | | | Text Domain Mismatch |