| #2451 | Payment Gateway of Stripe for WooCommerce | 94 | | 233 | 8k+ | | | Non-prefixed hook name |
| #2452 | Permalink Manager for WooCommerce | 40 | 115 | 20 | 8k+ | | | Short PHP open tag found |
| #2453 | PixCodes | 94 | | 216 | 8k+ | | | Non-prefixed global variable |
| #2454 | Pods Beaver Themer Add-On | 100 | | 0 | 8k+ | | | No open findings |
| #2455 | Print My Blog – Print, PDF, & eBook Converter WordPress Plugin | 23 | 1,077 | 1,660 | 8k+ | | | Non-prefixed global variable |
| #2456 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | | Output is not escaped |
| #2457 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #2458 | QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly | 35 | 225 | 110 | 8k+ | | | Non Singular String Literal Domain |
| #2459 | Real Custom Post Order: Create a custom order for your content | 89 | 1 | 19 | 8k+ | | | Non-prefixed global variable |
| #2460 | Really Simple Click To Call Bar | 71 | 23 | 3 | 8k+ | | | Output is not escaped |
| #2461 | reCAPTCHA in WP comments form | 31 | 264 | 60 | 8k+ | | | Output is not escaped |
| #2462 | Remove admin menus by role | 57 | 5 | 54 | 8k+ | | | Input is not validated |
| #2463 | Remove Uppercase Accents | 52 | 41 | 2 | 8k+ | | | Unsafe printing function |
| #2464 | Remove & Disable XML-RPC Pingback | 98 | 2 | 6 | 8k+ | | | Non-prefixed function |
| #2465 | Rename wp-admin login | 42 | 23 | 38 | 8k+ | | | Output is not escaped |
| #2466 | Replace Image | 84 | 5 | 13 | 8k+ | | | Input is not sanitized |
| #2467 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | | | Text Domain Mismatch |
| #2468 | Widgets for Booking.com Reviews | 95 | | 352 | 8k+ | | | Non-prefixed global variable |
| #2469 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 64 | 8 | 25 | 8k+ | | | Interpolated SQL is not prepared |
| #2470 | RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | 99 | | 3 | 8k+ | | | Non-prefixed class |
| #2471 | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | 35 | 24 | 5 | 8k+ | | | Missing direct file access protection |
| #2472 | SALERT – Fake Sales Notification WooCommerce | 42 | 41 | 67 | 8k+ | | | Non-prefixed global variable |
| #2473 | SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster | 84 | 9 | 17 | 8k+ | | | Non-prefixed class |
| #2474 | ShowID for Post/Page/Category/Tag/Comment | 97 | 5 | 1 | 8k+ | | | Missing direct file access protection |
| #2475 | Sinatra Core | 40 | 101 | 15 | 8k+ | | | Output is not escaped |
| #2476 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #2477 | Sold Out Badge for WooCommerce | 35 | 5 | 4 | 8k+ | | | Output is not escaped |
| #2478 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #2479 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | | Output is not escaped |
| #2480 | SteadFast API | 80 | 2 | 23 | 8k+ | | | Non-prefixed global variable |
| #2481 | Super block slider – Image & content slider | 99 | 1 | 2 | 8k+ | | | Missing direct file access protection |
| #2482 | Superb Helper | 97 | 5 | 32 | 8k+ | | | Non-prefixed global variable |
| #2483 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 8k+ | | | Text Domain Mismatch |
| #2484 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #2485 | Template Kit – Export | 83 | 7 | 90 | 8k+ | | | Non-prefixed global variable |
| #2486 | Texty – SMS Notification for WordPress, WooCommerce, Dokan and more | 53 | 31 | 34 | 8k+ | | | Output is not escaped |
| #2487 | TJ Custom CSS | 69 | 18 | 10 | 8k+ | | | Output is not escaped |
| #2488 | Themify Popup | 29 | 232 | 108 | 8k+ | | | Text Domain Mismatch |
| #2489 | Radius Portfolio – Filterable Grid, Gallery & Slider Portfolio | 98 | 1 | 14 | 8k+ | | | Non-prefixed class |
| #2490 | TypePad emoji for TinyMCE | 38 | 100 | 24 | 8k+ | | | Text Domain Mismatch |
| #2491 | URL Params | 46 | 36 | 17 | 8k+ | | | Text Domain Mismatch |
| #2492 | User Roles and Capabilities | 36 | 227 | 132 | 8k+ | | | Output is not escaped |
| #2493 | VS Event List | 81 | 1 | 259 | 8k+ | | | Non-prefixed global variable |
| #2494 | Videojs HTML5 Player | 59 | 12 | 12 | 8k+ | | | Nonce verification recommended |
| #2495 | VikBooking Hotel Booking Engine & PMS | 25 | 13,251 | 8,316 | 8k+ | | | Output is not escaped |
| #2496 | WCAPF – Ajax Product Filter for WooCommerce | 99 | 1 | 3 | 8k+ | | | trademarked term |
| #2497 | Cash On Pickup for WooCommerce | 98 | 16 | 4 | 8k+ | | | Text Domain Mismatch |
| #2498 | Weather Atlas Widget | 37 | 630 | 111 | 8k+ | | | Output is not escaped |
| #2499 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | | | Non-prefixed global variable |
| #2500 | Widgets in Menu for WordPress | 74 | 16 | 12 | 8k+ | | | Text Domain Mismatch |