| #501 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,894 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #502 | External Links – nofollow, noopener & new window | 93 | 24 | 67 | 90k+ | | | Non-prefixed global variable |
| #503 | WP Force SSL & HTTPS SSL Redirect | 92 | 18 | 21 | 90k+ | | | Non-prefixed global variable |
| #504 | WP Meta and Date Remover | 24 | 665 | 1,314 | 90k+ | | | Non-prefixed global variable |
| #505 | Nested Pages | 25 | 674 | 560 | 90k+ | | | Non-prefixed global variable |
| #506 | Wp Social Login and Register Social Counter | 25 | 80 | 738 | 90k+ | | | Non-prefixed global variable |
| #507 | YITH WooCommerce Quick View | 32 | 388 | 1,420 | 90k+ | | | Non-prefixed global variable |
| #508 | AMP for WP – Accelerated Mobile Pages | 41 | 656 | 2,401 | 80k+ | | | Non-prefixed global variable |
| #509 | Ajax Search Lite – Live Search & Filter | 76 | 126 | 264 | 80k+ | | | Non-prefixed hook name |
| #510 | Backup Migration | 21 | 981 | 1,093 | 80k+ | | | Non-prefixed global variable |
| #511 | BlogVault Backup & Staging | 82 | 53 | 22 | 80k+ | | | Missing direct file access protection |
| #512 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #513 | Customer Reviews for WooCommerce | 24 | 2,202 | 2,445 | 80k+ | | | Output is not escaped |
| #514 | Cyr to Lat Enhanced | 99 | 2 | 0 | 80k+ | | | five star reviews detected |
| #515 | Defender Security – Malware Scanner, Login Security & Firewall | 24 | 547 | 594 | 80k+ | | | Non-prefixed namespace |
| #516 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #517 | Disable REST API | 65 | 12 | 15 | 80k+ | | | Output is not escaped |
| #518 | Display Posts – Easy lists, grids, navigation, and more | 92 | 11 | 23 | 80k+ | | | Non-prefixed function |
| #519 | Download Monitor | 20 | 423 | 1,362 | 80k+ | | | Non-prefixed hook name |
| #520 | Duplicate Page and Post | 41 | 26 | 21 | 80k+ | | | Unsafe printing function |
| #521 | Email Log | 95 | 5 | 53 | 80k+ | | | Non-prefixed hook name |
| #522 | Facebook Chat Plugin – Live Chat Plugin for WordPress | 88 | 7 | 8 | 80k+ | | | trademarked term |
| #523 | Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager | 35 | 64 | 64 | 80k+ | | | Non-prefixed global variable |
| #524 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #525 | GetGenie – AI Content Writer with Keyword Research & SEO Tracking | 62 | 13 | 39 | 80k+ | | | Nonce verification recommended |
| #526 | Go Live Update Urls | 55 | 11 | 49 | 80k+ | | | Non-prefixed hook name |
| #527 | ShareThis Dashboard for Google Analytics | 90 | 4 | 272 | 80k+ | | | Non-prefixed global variable |
| #528 | GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | 61 | 9 | 119 | 80k+ | | | Non-prefixed global variable |
| #529 | Heartbeat Control | 35 | 27 | 18 | 80k+ | | | Missing Arg Domain |
| #530 | Hello Plus | 94 | 15 | 38 | 80k+ | | | Post Not In exclude |
| #531 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | | | Text Domain Mismatch |
| #532 | Make Connector | 94 | 1 | 9 | 80k+ | | | Non-prefixed constant |
| #533 | 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | 38 | 353 | 77 | 80k+ | | | Non Singular String Literal Domain |
| #534 | Invisible reCaptcha for WordPress | 30 | 90 | 185 | 80k+ | | | Input is not sanitized |
| #535 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 80k+ | | | Text Domain Mismatch |
| #536 | List category posts | 37 | 161 | 17 | 80k+ | | | Output is not escaped |
| #537 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | | | Unsafe printing function |
| #538 | Meta Tag Manager | 34 | 142 | 321 | 80k+ | | | Nonce verification recommended |
| #539 | Metricool – Social media and site statistics | 82 | 9 | 4 | 80k+ | | | Exception output is not escaped |
| #540 | Ninja Tables – Easy Data Table Builder | 100 | | 0 | 80k+ | | | No open findings |
| #541 | PHP Code Widget | 64 | 22 | 1 | 80k+ | | | Output is not escaped |
| #542 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | | | Post Not In exclude |
| #543 | Product Import Export for WooCommerce – Import Export Product CSV Suite | 64 | 246 | 766 | 80k+ | | | Non-prefixed global variable |
| #544 | Payment Plugins for PayPal WooCommerce | 28 | 232 | 246 | 80k+ | | | Non-prefixed hook name |
| #545 | Fixed Widget and Sticky Elements for WordPress | 83 | 7 | 13 | 80k+ | | | Non-prefixed global variable |
| #546 | Resize Image After Upload | 59 | 15 | 11 | 80k+ | | | Output is not escaped |
| #547 | Secure Custom Fields | 23 | 240 | 1,370 | 80k+ | | | Non-prefixed function |
| #548 | Side Cart Woocommerce | Woocommerce Cart | 27 | 490 | 439 | 80k+ | | | Output is not escaped |
| #549 | Lightweight Sidebar Manager | 83 | 13 | 36 | 80k+ | | | Non-prefixed class |
| #550 | Simple CSS | 57 | 22 | 13 | 80k+ | | | Missing Version |