| #2551 | Default Admin Color Scheme | 100 | | 0 | 800 | | | No open findings |
| #2552 | Default Attributes for WooCommerce | 68 | 22 | 18 | 400 | | | Non-prefixed hook name |
| #2553 | Default Featured Image | 99 | 2 | 2 | 60k+ | | | Missing direct file access protection |
| #2554 | Default Image Settings | 97 | 25 | 3 | 500 | | | Missing Arg Domain |
| #2555 | Default Media Uploader View | 98 | 3 | 1 | 600 | | | Missing direct file access protection |
| #2556 | Default Post Author | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #2557 | Placeholder Image for WooCommerce | 63 | 31 | 5 | 400 | | | Output is not escaped |
| #2558 | Default Sort Ascend | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #2559 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #2560 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | | | Non-prefixed namespace |
| #2561 | Definitely allow mobile zooming | 100 | 1 | 0 | 7k+ | | | Missing direct file access protection |
| #2562 | Dehkadeh Fonts | 63 | 117 | 5 | 800 | | | Text Domain Mismatch |
| #2563 | Delay Redirects | 75 | 5 | 8 | 900 | | | Request data is not unslashed |
| #2564 | Delete All Products for WooCommerce | 99 | | 5 | 4k+ | | | slow db query meta query |
| #2565 | Delete Duplicate Posts | 47 | 9 | 50 | 10k+ | | | Direct Query |
| #2566 | Delete Expired Transients | 42 | 49 | 65 | 5k+ | | | Direct Query |
| #2567 | Delete Me | 40 | 116 | 17 | 7k+ | | | Output is not escaped |
| #2568 | Delete Multiple Themes | 46 | 39 | 5 | 1k+ | | | Text Domain Mismatch |
| #2569 | Auto Post Cleaner | 23 | 715 | 1,378 | 1k+ | | | Non-prefixed global variable |
| #2570 | Delete Pending Comments | 57 | 16 | 11 | 10k+ | | | Unsafe printing function |
| #2571 | Delete Post with Attachments | 96 | 2 | 15 | 1k+ | | | Direct Query |
| #2572 | Delete Unscaled Images | 64 | 24 | 4 | 800 | | | Text Domain Mismatch |
| #2573 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | | | Non-prefixed global variable |
| #2574 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | | | Nonce verification recommended |
| #2575 | Chwazi – Delivery & Pickup Scheduling for WooCommerce | 33 | 563 | 192 | 600 | | | Text Domain Mismatch |
| #2576 | DELUCKS SEO | 21 | 362 | 1,171 | 400 | | | Missing nonce verification |
| #2577 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | | | Non-prefixed hook name |
| #2578 | Democracy Poll | 24 | 387 | 436 | 7k+ | | | Short PHP open tag found |
| #2579 | Departamentos y Ciudades de Colombia para Woocommerce | 58 | 49 | 42 | 6k+ | | | Text Domain Mismatch |
| #2580 | Web3 Crypto Payments by DePay for WooCommerce | 78 | 6 | 101 | 1k+ | | | Direct Query |
| #2581 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #2582 | Deployer for Git | 24 | 541 | 1,336 | 500 | | | Non-prefixed global variable |
| #2583 | Deposits & Partial Payments for WooCommerce – Bayna | 28 | 593 | 336 | 1k+ | | | Output is not escaped |
| #2584 | Deposits & Partial Payments for WooCommerce | 35 | 174 | 144 | 5k+ | | | Text Domain Mismatch |
| #2585 | Description List Block | 98 | 2 | 0 | 400 | | | readme mismatched header requires |
| #2586 | Desert Companion | 68 | 412 | 837 | 20k+ | | | Non-prefixed global variable |
| #2587 | Gutenberg Blocks Templates – 50+ Free Gutenberg Block Designs | 70 | 2 | 23 | 700 | | | Request data is not unslashed |
| #2588 | Design Upgrade for LearnDash | 97 | 5 | 1 | 7k+ | | | Missing direct file access protection |
| #2589 | DesignSetGo | 35 | 7 | 0 | 5k+ | | | Hidden files included |
| #2590 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #2591 | Developer Loggers for Simple History | 41 | 46 | 28 | 400 | | | Text Domain Mismatch |
| #2592 | DeveloPress Sticky Footer Bar | 36 | 165 | 49 | 400 | | | Output is not escaped |
| #2593 | Device Detector | 33 | 209 | 112 | 600 | | | Output is not escaped |
| #2594 | Device Mockups | 97 | 7 | 3 | 900 | | | Missing direct file access protection |
| #2595 | Devices for Elementor | 62 | 22 | 13 | 400 | | | Output is not escaped |
| #2596 | DevVn Float Left Right Ads | 55 | 42 | 2 | 1k+ | | | Output is not escaped |
| #2597 | Image Hotspot by DevVN | 99 | 2 | 0 | 20k+ | | | outdated tested upto header |
| #2598 | DevVN Local Store | 41 | 84 | 28 | 1k+ | | | Unsafe printing function |
| #2599 | DFX Automatic Role Changer for WooCommerce | 24 | 597 | 1,308 | 400 | | | Non-prefixed global variable |
| #2600 | DHL eCommerce (Benelux) for WooCommerce | 32 | 222 | 330 | 2k+ | | | Nonce verification recommended |