| #451 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #452 | WP Bulk Delete | 42 | 7 | 130 | 100k+ | | | Direct Query |
| #453 | WP Content Copy Protection & No Right Click | 42 | 126 | 135 | 100k+ | | | Unsafe printing function |
| #454 | WP Downgrade | Specific Core Version | 78 | 12 | 6 | 100k+ | | | Unsafe printing function |
| #455 | 3CX Free Live Chat, Calls & Messaging | 47 | 24 | 16 | 100k+ | | | Output is not escaped |
| #456 | پارسی دیت – Parsi Date | 24 | 106 | 291 | 100k+ | | | Non-prefixed hook name |
| #457 | WP-PostViews | 35 | 132 | 64 | 100k+ | | | Unsafe printing function |
| #458 | WP STAGING – WordPress Backup, Restore, Migration & Clone | 23 | 1,504 | 1,607 | 100k+ | | | Non-prefixed global variable |
| #459 | WP-Sweep | 74 | 1 | 201 | 100k+ | | | Direct Query |
| #460 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #461 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #462 | WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | 99 | | 6 | 100k+ | | | trademarked term |
| #463 | WPS Limit Login | 39 | 152 | 76 | 100k+ | | | Output is not escaped |
| #464 | XML Sitemap & Google News | 47 | 270 | 224 | 100k+ | | | Non-prefixed global variable |
| #465 | TypeSquare Webfonts for エックスサーバー | 35 | 183 | 98 | 100k+ | | | Missing Arg Domain |
| #466 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | | | Non-prefixed global variable |
| #467 | YITH WooCommerce Compare | 32 | 422 | 1,508 | 100k+ | | | Non-prefixed global variable |
| #468 | Embed Plus for YouTube Gallery, Livestream and Lazy Loading with Facades | 34 | 571 | 195 | 100k+ | | | Output is not escaped |
| #469 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #470 | Addon Elements for Elementor (formerly Elementor Addon Elements) | 27 | 4,065 | 103 | 90k+ | | | Text Domain Mismatch |
| #471 | Advanced Custom Fields: Font Awesome Field | 40 | 332 | 70 | 90k+ | | | Text Domain Mismatch |
| #472 | Advanced Import | 96 | | 3 | 90k+ | | | Nonce verification recommended |
| #473 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #474 | Angie – Agentic AI | 98 | | 17 | 90k+ | | | Discouraged PHP function |
| #475 | Shortcodes and extra features for Phlox theme | 23 | 412 | 424 | 90k+ | | | Output is not escaped |
| #476 | BackUpWordPress | 27 | 245 | 271 | 90k+ | | | Non-prefixed global variable |
| #477 | Blocks Animation: CSS Animations for Gutenberg Blocks | 99 | | 5 | 90k+ | | | trademarked term |
| #478 | Cache Enabler | 35 | 44 | 75 | 90k+ | | | Input is not sanitized |
| #479 | Colibri Page Builder | 82 | 138 | 31 | 90k+ | | | Missing direct file access protection |
| #480 | Email Encoder – Protect Email Addresses and Phone Numbers | 38 | 9 | 150 | 90k+ | | | Non-prefixed global variable |
| #481 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | | | Non-prefixed global variable |
| #482 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #483 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #484 | Headers Security Advanced & HSTS WP | 76 | 19 | 10 | 90k+ | | | Missing Translators Comment |
| #485 | Insert PHP Code Snippet | 38 | 164 | 227 | 90k+ | | | Output is not escaped |
| #486 | Internal Link Juicer: SEO Auto Linker for WordPress | 57 | 12 | 61 | 90k+ | | | Database parameter is not escaped |
| #487 | Kubio AI Page Builder | 60 | 283 | 77 | 90k+ | | | Missing direct file access protection |
| #488 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | | | Non-prefixed global variable |
| #489 | Media Cleaner: Clean your WordPress! | 25 | 263 | 546 | 90k+ | | | Direct Query |
| #490 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 316 | 639 | 90k+ | | | Output is not escaped |
| #491 | ووکامرس فارسی | 28 | 157 | 215 | 90k+ | | | Output is not escaped |
| #492 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | | Output is not escaped |
| #493 | Simple Author Box | 94 | 12 | 61 | 90k+ | | | Non-prefixed global variable |
| #494 | WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat | 35 | 28 | 31 | 90k+ | | | Input is not sanitized |
| #495 | Strong Testimonials | 23 | 194 | 393 | 90k+ | | | Nonce verification recommended |
| #496 | OttoKit: All-in-One Automation Platform | 25 | 1,558 | 1,825 | 90k+ | | | Missing direct file access protection |
| #497 | Tracking Code Manager | 37 | 55 | 42 | 90k+ | | | Output is not escaped |
| #498 | WPC Smart Quick View for WooCommerce | 90 | | 25 | 90k+ | | | Nonce verification recommended |
| #499 | HUSKY – Products Filter Professional for WooCommerce | 25 | | 1,895 | 90k+ | | | Non-prefixed global variable |
| #500 | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 23 | 7,880 | 2,199 | 90k+ | | | Text Domain Mismatch |
