| #651 | Admin Search | 40 | 31 | 47 | 1k+ | | | Output is not escaped |
| #652 | Admin and Site Enhancements (ASE) | 23 | 137 | 330 | 200k+ | | | Nonce verification recommended |
| #653 | Admin Slug Column | 35 | 2 | 0 | 5k+ | | | Hidden files included |
| #654 | Admin Sticky Sidebar | 98 | 2 | 3 | 800 | | | Missing direct file access protection |
| #655 | Admin Taxonomy Filter | 92 | 3 | 3 | 5k+ | | | Non-prefixed class |
| #656 | Admin Toolbar Menus | 98 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #657 | Admin Tools | 38 | 189 | 10 | 3k+ | | | Unsafe printing function |
| #658 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #659 | Adminimize | 29 | 296 | 691 | 200k+ | | | Non-prefixed global variable |
| #660 | AdminPad | 100 | | 0 | 900 | | | No open findings |
| #661 | AdOpt | Easy Multi-Regulations Cookie Banner. | 69 | 22 | 27 | 7k+ | | | Missing direct file access protection |
| #662 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #663 | Address correction autocomplete for Woo | 67 | 19 | 9 | 1k+ | | | Text Domain Mismatch |
| #664 | AdRoll for WooCommerce Stores | 38 | 40 | 25 | 600 | | | Output is not escaped |
| #665 | AdRotate Banner Manager | 25 | 1,363 | 846 | 20k+ | | | Unsafe printing function |
| #666 | Advanced Ads for WPBakery Page Builder | 98 | 1 | 6 | 1k+ | | | trademarked term |
| #667 | Easy Google Adsense and Banner Ads Manager – AdsforWP | 98 | 3 | 4 | 1k+ | | | trademarked term |
| #668 | Ads.txt Manager | 92 | 4 | 4 | 100k+ | | | Missing direct file access protection |
| #669 | Ads.txt File Manager By Magicbid | 100 | | 0 | 3k+ | | | No open findings |
| #670 | Ads.txt Manager | 61 | 33 | 16 | 4k+ | | | Text Domain Mismatch |
| #671 | In-Post Ads | 61 | 27 | 10 | 600 | | | Text Domain Mismatch |
| #672 | AdSimple Cookie Consent Banner | 65 | 55 | 109 | 600 | | | wp function not compatible with requires wp |
| #673 | Advanced GeoIP Redirect | 99 | | 13 | 1k+ | | | Non-prefixed global variable |
| #674 | Advance Bank Payment Transfer Gateway | 41 | 105 | 62 | 1k+ | | | Text Domain Mismatch |
| #675 | Advance Canonical URL | 82 | 3 | 10 | 1k+ | | | Input is not validated |
| #676 | Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. | 100 | | 1 | 10k+ | | | mismatched plugin name |
| #677 | Portfolio Grid – Filterable Gallery, Grid & Slider Showcase | 96 | 3 | 50 | 900 | | | Non-prefixed function |
| #678 | AWCA – The Great Analytics Insights for Your eStore | 38 | 238 | 143 | 2k+ | | | Output is not escaped |
| #679 | Advanced 301 and 302 Redirect | 38 | 81 | 339 | 1k+ | | | Non-prefixed global variable |
| #680 | Advanced Access Manager – Access Governance for WordPress | 32 | 849 | 62 | 100k+ | | | Output is not escaped |
| #681 | Advanced Accordion Gutenberg Block – Create Beautiful FAQs, Content Accordions & Interactive Tabs | 37 | 39 | 36 | 10k+ | | | Missing direct file access protection |
| #682 | Advanced Admin Search | 40 | 79 | 48 | 600 | | | Non Singular String Literal Text |
| #683 | Advanced Ads – Ad Manager & AdSense | 23 | 559 | 719 | 100k+ | | | Non-prefixed global variable |
| #684 | In-feed ads for Google AdSense | 70 | 20 | 20 | 6k+ | | | Non-prefixed global variable |
| #685 | Advanced Addons – Animation and Custom CSS for Gutenberg and Elementor | 97 | 1 | 8 | 700 | | | Not In Footer |
| #686 | Advanced Appointment Booking & Scheduling | 83 | 11 | 13 | 3k+ | | | Text Domain Mismatch |
| #687 | Advanced WordPress Backgrounds | 72 | 21 | 7 | 30k+ | | | Output is not escaped |
| #688 | Advanced Categories Widget | 39 | 170 | 41 | 800 | | | Output is not escaped |
| #689 | Advanced Category and Custom Taxonomy Image | 100 | | 2 | 1k+ | | | Non-prefixed class |
| #690 | Advanced Category Excluder | 31 | 349 | 160 | 600 | | | Output is not escaped |
| #691 | Advanced Classifieds & Directory Pro | 22 | 1,229 | 3,512 | 2k+ | | | Non-prefixed global variable |
| #692 | Advanced Country Blocker | 40 | 23 | 77 | 2k+ | | | Exception output is not escaped |
| #693 | Advanced Cron Manager – debug & control | 91 | 30 | 90 | 30k+ | | | Non-prefixed global variable |
| #694 | Advanced CSS Editor | 76 | 25 | 6 | 5k+ | | | Output is not escaped |
| #695 | Advanced Custom Fields Repeater & Flexible Content Fields Collapser | 97 | 3 | 5 | 4k+ | | | trademarked term |
| #696 | Advanced Custom Fields (ACF®) | 23 | 2,470 | 1,220 | 2m+ | | | Text Domain Mismatch |
| #697 | Advanced Custom Fields – Contact Form 7 Field | 45 | 59 | 8 | 2k+ | | | Output is not escaped |
| #698 | Advanced Custom Fields: Font Awesome Field | 40 | 332 | 70 | 90k+ | | | Text Domain Mismatch |
| #699 | ACF: Google Map Extended | 41 | 141 | 8 | 800 | | | Text Domain Mismatch |
| #700 | Advanced Custom Fields: Limiter Field | 49 | 57 | 12 | 900 | | | Output is not escaped |