| #2501 | Wonder PDF Embed | 75 | 53 | 1 | 8k+ | | | badly named files |
| #2502 | Wonder Slider Lite | 33 | 273 | 187 | 8k+ | | | Output is not escaped |
| #2503 | Asaas Gateway for WooCommerce | 35 | 12 | 109 | 8k+ | | | Non-prefixed global variable |
| #2504 | Hyyan WooCommerce Polylang Integration | 33 | 141 | 220 | 8k+ | | | Nonce verification recommended |
| #2505 | NP Quote Request for WooCommerce | 40 | 91 | 145 | 8k+ | | | Non-prefixed global variable |
| #2506 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | | | Exception output is not escaped |
| #2507 | Call for Price for WooCommerce | 35 | 3 | 31 | 8k+ | | | Non-prefixed hook name |
| #2508 | MyParcel | 94 | 2 | 84 | 8k+ | | | Non-prefixed global variable |
| #2509 | Custom Payment Gateway for WooCommerce | 35 | 11 | 12 | 8k+ | | | Missing nonce verification |
| #2510 | Product SKU Generator for WooCommerce | 81 | 2 | 8 | 8k+ | | | Nonce verification recommended |
| #2511 | Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools | 39 | 322 | 66 | 8k+ | | | Output is not escaped |
| #2512 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #2513 | WP-Ban | 38 | 99 | 108 | 8k+ | | | Unsafe printing function |
| #2514 | WPForce Logout – WordPress User Login Logout Management Plugin | 37 | 567 | 32 | 8k+ | | | Output is not escaped |
| #2515 | WP FullCalendar | 37 | 32 | 64 | 8k+ | | | Nonce verification recommended |
| #2516 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #2517 | WP LinkedIn Auto Publish | 34 | 165 | 56 | 8k+ | | | Output is not escaped |
| #2518 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | | | Output is not escaped |
| #2519 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #2520 | Multi-Step Checkout for WooCommerce | 71 | 38 | 104 | 8k+ | | | Non-prefixed global variable |
| #2521 | WP PageNavi Style | 37 | 109 | 11 | 8k+ | | | Unsafe printing function |
| #2522 | WP-Print | 35 | 110 | 52 | 8k+ | | | Unsafe printing function |
| #2523 | WP Remove Category Base | 95 | 1 | 4 | 8k+ | | | trademarked term |
| #2524 | WP REST API Controller | 64 | 8 | 22 | 8k+ | | | Nonce verification recommended |
| #2525 | Bulk Edit Posts and Products in Spreadsheet | 25 | 934 | 944 | 8k+ | | | Text Domain Mismatch |
| #2526 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #2527 | WP TripAdvisor Review Slider | 25 | 1,063 | 2,582 | 8k+ | | | Non-prefixed global variable |
| #2528 | WPC Estimated Delivery Date for WooCommerce | 85 | | 67 | 8k+ | | | Non-prefixed global variable |
| #2529 | WPElemento Importer | 37 | 121 | 88 | 8k+ | | | Text Domain Mismatch |
| #2530 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | | Text Domain Mismatch |
| #2531 | YayCurrency – WooCommerce Multi-Currency Switcher | 24 | 373 | 623 | 8k+ | | | Text Domain Mismatch |
| #2532 | YITH Frequently Bought Together for WooCommerce | 31 | 389 | 1,452 | 8k+ | | | Non-prefixed global variable |
| #2533 | 404 Redirection | 94 | 4 | 2 | 7k+ | | | Missing direct file access protection |
| #2534 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #2535 | Add Widget After Content | 70 | 6 | 11 | 7k+ | | | Setting is missing a sanitization callback |
| #2536 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | | | Text Domain Mismatch |
| #2537 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #2538 | AdOpt | Easy Multi-Regulations Cookie Banner. | 69 | 22 | 27 | 7k+ | | | Missing direct file access protection |
| #2539 | Advanced Floating Content Lite | 25 | 643 | 1,348 | 7k+ | | | Non-prefixed global variable |
| #2540 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 7k+ | | | Text Domain Mismatch |
| #2541 | Algori PDF Viewer | 98 | 2 | 5 | 7k+ | | | Missing Version |
| #2542 | Announce from the Dashboard | 38 | 138 | 24 | 7k+ | | | Non Singular String Literal Domain |
| #2543 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #2544 | aThemes Addons for Elementor | 90 | 13 | 96 | 7k+ | | | Non-prefixed global variable |
| #2545 | Automatic Featured Images from Videos | 63 | 13 | 13 | 7k+ | | | Missing direct file access protection |
| #2546 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #2547 | Awesome Contact Form7 for Elementor | 67 | 20 | 30 | 7k+ | | | Non-prefixed global variable |
| #2548 | Carousel Block – Responsive Image and Content Carousel | 100 | | 1 | 7k+ | | | mismatched plugin name |
| #2549 | Blaze Ads – Fully Integrated Ads Solution | 99 | 1 | 2 | 7k+ | | | Non-prefixed global variable |
| #2550 | Blog Filter – Post Grid Filter by Category or Tag | 89 | 1 | 5 | 7k+ | | | Nonce verification recommended |