| #651 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | | Unsafe printing function |
| #652 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #653 | WPZOOM Social Feed Widget & Block | 33 | 310 | 278 | 60k+ | | | Unsafe printing function |
| #654 | JWT Authentication for WP REST API | 84 | 27 | 41 | 60k+ | | | wp function not compatible with requires wp |
| #655 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 166 | 395 | 60k+ | | | Short PHP open tag found |
| #656 | Login No Captcha reCAPTCHA | 42 | 45 | 24 | 60k+ | | | Unsafe printing function |
| #657 | Mailchimp List Subscribe Form | 86 | 22 | 156 | 60k+ | | | Non-prefixed global variable |
| #658 | Master Slider – Responsive Touch Slider | 23 | 800 | 408 | 60k+ | | | Output is not escaped |
| #659 | ACF Photo Gallery Field | 93 | 2 | 3 | 60k+ | | | Input is not sanitized |
| #660 | Ocean Social Sharing | 84 | 10 | 36 | 60k+ | | | Non-prefixed global variable |
| #661 | Optimization Detective | 100 | | 1 | 60k+ | | | readme reserved contributors |
| #662 | Order Export & Order Import for WooCommerce | 60 | 247 | 698 | 60k+ | | | Non-prefixed global variable |
| #663 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | | | Direct Query |
| #664 | Pages with category and tag | 100 | | 0 | 60k+ | | | No open findings |
| #665 | Qi Blocks | 31 | 46 | 345 | 60k+ | | | Non-prefixed global variable |
| #666 | Optimize Database after Deleting Revisions | 36 | 644 | 127 | 60k+ | | | Output is not escaped |
| #667 | MWW Scheduled Post Trigger | 92 | 4 | 2 | 60k+ | | | Direct Query |
| #668 | Simple Image Sizes | 35 | 53 | 75 | 60k+ | | | Unsafe printing function |
| #669 | Simple Sitemap – Create a Responsive HTML Sitemap | 46 | 33 | 48 | 60k+ | | | Non-prefixed hook name |
| #670 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 958 | 738 | 60k+ | | | Text Domain Mismatch |
| #671 | Site Reviews | 23 | 1,626 | 604 | 60k+ | | | Output is not escaped |
| #672 | Slim SEO – A Fast & Automated SEO Plugin For WordPress | 91 | 4 | 9 | 60k+ | | | Database parameter is not escaped |
| #673 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #674 | Theme My Login | 32 | 251 | 549 | 60k+ | | | Non-prefixed function |
| #675 | To Top | 100 | | 1 | 60k+ | | | Non-prefixed class |
| #676 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #677 | Ultimate Dashboard – Custom WordPress Dashboard | 40 | 17 | 144 | 60k+ | | | Input is not sanitized |
| #678 | Export and Import Users and Customers | 68 | 223 | 662 | 60k+ | | | Non-prefixed global variable |
| #679 | Visual Portfolio, Photo Gallery & Post Grid | 39 | 34 | 189 | 60k+ | | | Non-prefixed hook name |
| #680 | Web Stories | 84 | 12 | 63 | 60k+ | | | Non-prefixed global variable |
| #681 | Weight Based Shipping for WooCommerce | 53 | 48 | 41 | 60k+ | | | Missing direct file access protection |
| #682 | Advanced Shipment Tracking for WooCommerce | 25 | 499 | 704 | 60k+ | | | Non-prefixed global variable |
| #683 | Wordfence Login Security | 25 | 248 | 418 | 60k+ | | | Output is not escaped |
| #684 | WP Accessibility | 39 | 200 | 104 | 60k+ | | | Unsafe printing function |
| #685 | WP Add Custom CSS | 39 | 45 | 23 | 60k+ | | | Output is not escaped |
| #686 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 137 | 353 | 60k+ | | | Input is not sanitized |
| #687 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #688 | WP Duplicate Page | 35 | 44 | 50 | 60k+ | | | Text Domain Mismatch |
| #689 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | | Dynamic hook name |
| #690 | WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | 34 | 219 | 453 | 60k+ | | | wp function not compatible with requires wp |
| #691 | WP Maintenance | 34 | 40 | 217 | 60k+ | | | Non-prefixed global variable |
| #692 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | | Missing Translators Comment |
| #693 | Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF | 25 | 158 | 118 | 60k+ | | | Non-prefixed global variable |
| #694 | Solid Mail – SMTP email and logging made by SolidWP | 68 | 16 | 17 | 60k+ | | | Database parameter is not escaped |
| #695 | WP ULike – Like & Dislike Buttons for Engagement and Feedback | 31 | 269 | 358 | 60k+ | | | Output is not escaped |
| #696 | Yandex.Metrica | 36 | 76 | 30 | 60k+ | | | Output is not escaped |
| #697 | YITH WooCommerce Catalog Mode | 31 | 380 | 1,418 | 60k+ | | | Non-prefixed global variable |
| #698 | Yoast Test Helper | 95 | 2 | 43 | 60k+ | | | Direct Query |
| #699 | Accessibility Widget by OneTap – Easy One-Click Accessibility Toolbar | 98 | 4 | 18 | 50k+ | | | Non-prefixed global variable |
| #700 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 146 | 274 | 50k+ | | | Non-prefixed global variable |