| #2151 | WP-LESS | 35 | 16 | 8 | 10k+ | | | Missing direct file access protection |
| #2152 | WP Limit Login Attempts | 39 | 26 | 67 | 10k+ | | | Direct Query |
| #2153 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | | | Text Domain Mismatch |
| #2154 | WP Mail Log | 43 | 40 | 29 | 10k+ | | | Text Domain Mismatch |
| #2155 | Malcure Malware Shield — Removal, Repair, Monitor | 99 | | 7 | 10k+ | | | upgrade notice limit |
| #2156 | WP-Memory-Usage | 89 | 4 | 9 | 10k+ | | | Interpolated SQL is not prepared |
| #2157 | WP Missed Schedule Posts | 87 | 7 | 9 | 10k+ | | | trademarked term |
| #2158 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #2159 | Native PHP Sessions | 38 | 30 | 92 | 10k+ | | | Direct Query |
| #2160 | WP No Base Permalink | 71 | 8 | 10 | 10k+ | | | Unsafe printing function |
| #2161 | WP Notification Bars | 67 | 13 | 32 | 10k+ | | | Request data is not unslashed |
| #2162 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | | | Unsafe printing function |
| #2163 | WP Photo Album Plus | 25 | 4 | 1,809 | 10k+ | | | Direct Query |
| #2164 | WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars | 24 | 861 | 1,573 | 10k+ | | | Non-prefixed global variable |
| #2165 | WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping | 97 | 1 | 7 | 10k+ | | | trademarked term |
| #2166 | WP Realtime Sitemap | 39 | 46 | 41 | 10k+ | | | Output is not escaped |
| #2167 | WP REST Cache | 64 | 11 | 113 | 10k+ | | | Direct Query |
| #2168 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 308 | 247 | 10k+ | | | Output is not escaped |
| #2169 | WP Hardening (discontinued) | 36 | 230 | 85 | 10k+ | | | Text Domain Mismatch |
| #2170 | Sentry for WordPress | 40 | 80 | 40 | 10k+ | | | Text Domain Mismatch |
| #2171 | WP Server Health Stats | 39 | 66 | 31 | 10k+ | | | Output is not escaped |
| #2172 | WP-ServerInfo | 38 | 162 | 55 | 10k+ | | | Output is not escaped |
| #2173 | WP Offload SES Lite | 96 | 541 | 5 | 10k+ | | | Text Domain Mismatch |
| #2174 | WP Shortcode by MyThemeShop | 59 | 32 | 5 | 10k+ | | | Output is not escaped |
| #2175 | WP-ShowHide | 96 | 6 | 5 | 10k+ | | | trademarked term |
| #2176 | WP Socializer – Simple & Easy Social Media Share Icons | 36 | 214 | 51 | 10k+ | | | Output is not escaped |
| #2177 | WP Subtitle | 81 | 7 | 33 | 10k+ | | | Non-prefixed hook name |
| #2178 | WP Tab Widget | 40 | 128 | 32 | 10k+ | | | Output is not escaped |
| #2179 | XPoster – Share to Bluesky and Mastodon | 62 | 26 | 36 | 10k+ | | | Missing nonce verification |
| #2180 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #2181 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | | Output is not escaped |
| #2182 | Widget Disable | 46 | 19 | 19 | 10k+ | | | Output is not escaped |
| #2183 | WP101 Video Tutorial Plugin | 86 | 15 | 18 | 10k+ | | | Missing direct file access protection |
| #2184 | WPB Accordion Menu – Collapsible Vertical Sidebar Menu – WooCommerce Category Accordion | 84 | 5 | 59 | 10k+ | | | Non-prefixed hook name |
| #2185 | WPC AJAX Add to Cart for WooCommerce | 92 | | 28 | 10k+ | | | Non-prefixed hook name |
| #2186 | WPC Buy Now Button for WooCommerce | 95 | | 18 | 10k+ | | | Non-prefixed class |
| #2187 | WPCargo Track & Trace | 25 | 239 | 557 | 10k+ | | | Non-prefixed global variable |
| #2188 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | | | Output is not escaped |
| #2189 | WPGet API – Connect to any external REST API | 89 | 15 | 19 | 10k+ | | | Missing direct file access protection |
| #2190 | WPGraphQL for ACF | 35 | 6 | 18 | 10k+ | | | Output is not escaped |
| #2191 | Privacy Policy Generator – WPLP Legal Pages | 32 | 26 | 409 | 10k+ | | | Non-prefixed global variable |
| #2192 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #2193 | WPO365 | MICROSOFT 365 GRAPH MAILER | 37 | 112 | 83 | 10k+ | | | Text Domain Mismatch |
| #2194 | WPS Bidouille | 28 | 472 | 215 | 10k+ | | | Output is not escaped |
| #2195 | WPS Menu Exporter | 40 | 47 | 22 | 10k+ | | | Output is not escaped |
| #2196 | WPS Visitor Counter | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #2197 | Show IDs by DraftPress | 98 | 2 | 3 | 10k+ | | | Missing direct file access protection |
| #2198 | WPvivid Backup for MainWP | 25 | 818 | 1,794 | 10k+ | | | Missing nonce verification |
| #2199 | Compress, Resize & Lazy Load Images – WPvivid Image Optimization | 47 | 107 | 58 | 10k+ | | | Missing direct file access protection |
| #2200 | WP VR – 360 Panorama and Virtual Tour Builder | 37 | 3 | 275 | 10k+ | | | Non-prefixed hook name |