| #1951 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 8k+ | | | Text Domain Mismatch |
| #1952 | Persistent Login | 37 | 338 | 108 | 6k+ | | | Unsafe printing function |
| #1953 | WP Random Post Thumbnails | 34 | 420 | 26 | 1k+ | | | Text Domain Mismatch |
| #1954 | pensopay Payments v2 | 59 | 413 | 32 | 1k+ | | | Non Singular String Literal Domain |
| #1955 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #1956 | QNAP NAS Backup | 33 | 374 | 70 | 2k+ | | | Non Singular String Literal Domain |
| #1957 | Advanced 301 and 302 Redirect | 37 | 88 | 354 | 1k+ | | | Non-prefixed global variable |
| #1958 | WPCS – WordPress Currency Switcher Professional | 29 | 84 | 358 | 900 | | | Non-prefixed global variable |
| #1959 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |
| #1960 | View Admin As | 58 | 307 | 135 | 9k+ | | | Non Singular String Literal Domain |
| #1961 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #1962 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 400 | | | Text Domain Mismatch |
| #1963 | Admin Management Xtended | 38 | 280 | 161 | 5k+ | | | Output is not escaped |
| #1964 | All 404 Redirect to Homepage | 25 | 140 | 301 | 200k+ | | | date date |
| #1965 | miniOrange OTP Login, Verification and SMS Notifications | 91 | 441 | 0 | 5k+ | | | wp function not compatible with requires wp |
| #1966 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | | | Text Domain Mismatch |
| #1967 | WPD Beaver Builder Additions | 35 | 406 | 35 | 600 | | | Non Singular String Literal Domain |
| #1968 | Landing Page Builder – Free Landing Page Templates | 37 | 329 | 111 | 600 | | | Output is not escaped |
| #1969 | Gallery Box | 32 | 395 | 43 | 1k+ | | | Text Domain Mismatch |
| #1970 | Category AJAX Filter — Advanced Filter for Posts & Custom Post Types | 50 | 2 | 435 | 6k+ | | | Non-prefixed global variable |
| #1971 | Login with Vipps and MobilePay | 34 | 263 | 174 | 800 | | | Output is not escaped |
| #1972 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #1973 | Async JavaScript | 37 | 357 | 79 | 70k+ | | | Unsafe printing function |
| #1974 | Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) | 66 | 34 | 402 | 200k+ | | | Direct Query |
| #1975 | Keyring | 35 | 233 | 203 | 1k+ | | | Output is not escaped |
| #1976 | Sync Master Sheet – Product Sync with Google Sheet for WooCommerce | 30 | 136 | 300 | 400 | | | Non-prefixed global variable |
| #1977 | Sky Addons for Elementor | 32 | 85 | 351 | 2k+ | | | Non-prefixed namespace |
| #1978 | Archive Posts Sort Customize | 33 | 338 | 97 | 600 | | | Output is not escaped |
| #1979 | Bitcoin Payments – Blockonomics | 29 | 208 | 227 | 2k+ | | | Output is not escaped |
| #1980 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #1981 | PilotPress | 32 | 150 | 285 | 900 | | | Output is not escaped |
| #1982 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #1983 | Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages | 32 | 26 | 409 | 10k+ | | | Non-prefixed global variable |
| #1984 | Aqua Page Builder | 32 | 320 | 114 | 2k+ | | | Output is not escaped |
| #1985 | WP CTA – Call Now Button, Sticky Button & Call to Action Builder | 36 | 1 | 433 | 2k+ | | | Non-prefixed global variable |
| #1986 | WP Social AutoConnect | 33 | 290 | 144 | 400 | | | Output is not escaped |
| #1987 | WP Responsive Menu | 36 | 295 | 139 | 30k+ | | | Text Domain Mismatch |
| #1988 | Automattic For Agencies Client | 53 | 249 | 184 | 20k+ | | | Text Domain Mismatch |
| #1989 | Database Cleaner | 28 | 139 | 294 | 10k+ | | | Direct Query |
| #1990 | AC's Loan Calculator | 32 | 246 | 187 | 400 | | | Unsafe printing function |
| #1991 | LoginPress | wp-login Custom Login Page Customizer | 55 | 125 | 308 | 200k+ | | | Non-prefixed function |
| #1992 | Jetpack VaultPress | 28 | 71 | 362 | 10k+ | | | Missing nonce verification |
| #1993 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #1994 | Keywords to Links Converter | 31 | 288 | 144 | 700 | | | Text Domain Mismatch |
| #1995 | Stratum Widgets for Elementor | 60 | 66 | 366 | 20k+ | | | Non-prefixed global variable |
| #1996 | SUMIT Payment Gateway for WooCommerce | 37 | 358 | 74 | 1k+ | | | Text Domain Mismatch |
| #1997 | AyeCode Connect | 34 | 178 | 253 | 10k+ | | | Nonce verification recommended |
| #1998 | 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | 38 | 353 | 77 | 80k+ | | | Non Singular String Literal Domain |
| #1999 | Checkout with Cash App on WooCommerce | 30 | 122 | 308 | 2k+ | | | Non-prefixed global variable |
| #2000 | Wired Impact Volunteer Management | 36 | 255 | 175 | 1k+ | | | Output is not escaped |