| #2201 | WPVulnerability | 96 | | 4 | 10k+ | | | trademarked term |
| #2202 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #2203 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | | | trademarked term |
| #2204 | WS Form LITE – Drag & Drop Contact Form Builder | 100 | | 0 | 10k+ | | | No open findings |
| #2205 | Related Products – Create Upsells, Cross-sells, and Product Recommendations for WooCommerce | 96 | 78 | 7 | 10k+ | | | wp function not compatible with requires wp |
| #2206 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | | Text Domain Mismatch |
| #2207 | Wufoo Shortcode | 97 | 3 | 3 | 10k+ | | | Missing direct file access protection |
| #2208 | Widget Content Blocks | 98 | 5 | 1 | 10k+ | | | Missing Translators Comment |
| #2209 | Xagio SEO – AI Powered SEO | 29 | 2 | 1,273 | 10k+ | | | Direct Query |
| #2210 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | | | Input is not sanitized |
| #2211 | Xpro Theme Builder For Elementor – FREE | 82 | 14 | 28 | 10k+ | | | Missing direct file access protection |
| #2212 | XServer Migrator | 35 | 39 | 53 | 10k+ | | | Interpolated SQL is not prepared |
| #2213 | YaMaps for WordPress Plugin | 64 | 21 | 30 | 10k+ | | | Non-prefixed global variable |
| #2214 | Яндекс Метрика | 79 | 10 | 4 | 10k+ | | | Unsafe printing function |
| #2215 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #2216 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #2217 | YITH Infinite Scrolling | 32 | 387 | 1,417 | 10k+ | | | Non-prefixed global variable |
| #2218 | YITH WooCommerce Badge Management | 32 | 413 | 1,446 | 10k+ | | | Non-prefixed global variable |
| #2219 | YITH WooCommerce Gift Cards | 24 | 436 | 1,534 | 10k+ | | | Non-prefixed global variable |
| #2220 | YITH Request a Quote for WooCommerce | 31 | 408 | 1,481 | 10k+ | | | Non-prefixed global variable |
| #2221 | YML for Yandex Market | 35 | 18 | 288 | 10k+ | | | Non-prefixed global variable |
| #2222 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #2223 | YOP Poll | 100 | | 0 | 10k+ | | | No open findings |
| #2224 | YourChannel: Everything you want in a YouTube plugin. | 34 | 262 | 115 | 10k+ | | | Text Domain Mismatch |
| #2225 | Embeds for YouTube | 35 | 255 | 307 | 10k+ | | | Non-prefixed global variable |
| #2226 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |
| #2227 | Zendesk Chat | 37 | 44 | 67 | 10k+ | | | Output is not escaped |
| #2228 | 3D Viewer – Display Interactive 3D Models | 100 | | 3 | 9k+ | | | Discouraged text-domain loading |
| #2229 | AAA Option Optimizer | 91 | 1 | 7 | 9k+ | | | Database parameter is not escaped |
| #2230 | Frontend Admin by DynamiApps | 23 | 5,938 | 3,208 | 9k+ | | | Text Domain Mismatch |
| #2231 | ACF OpenStreetMap Field | 35 | 40 | 46 | 9k+ | | | Non-prefixed global variable |
| #2232 | Add to Cart Button Custom Text | 42 | 98 | 4 | 9k+ | | | Text Domain Mismatch |
| #2233 | Cart Popup for WooCommerce | 51 | 9 | 115 | 9k+ | | | Non-prefixed global variable |
| #2234 | Admin Columns for ACF Fields | 74 | 7 | 8 | 9k+ | | | Output is not escaped |
| #2235 | Advanced Image Styles | 98 | 3 | 1 | 9k+ | | | Missing direct file access protection |
| #2236 | Allow Multiple Accounts | 40 | 115 | 19 | 9k+ | | | Non Singular String Literal Domain |
| #2237 | Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels | 34 | 86 | 255 | 9k+ | | | Direct Query |
| #2238 | AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth | 33 | 33 | 229 | 9k+ | | | Non-prefixed global variable |
| #2239 | Blog Floating Button | 26 | 705 | 240 | 9k+ | | | Output is not escaped |
| #2240 | Boxtal – Shipping solution | 86 | 3 | 92 | 9k+ | | | Non-prefixed global variable |
| #2241 | Bulk Move | 40 | 85 | 44 | 9k+ | | | Unsafe printing function |
| #2242 | Cachify | 84 | 9 | 36 | 9k+ | | | Non-prefixed global variable |
| #2243 | CC Child Pages | 38 | 63 | 152 | 9k+ | | | Non-prefixed global variable |
| #2244 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #2245 | Cimo – Free Instant Image Optimizer & WebP Converter | 90 | 6 | 4 | 9k+ | | | Missing Translators Comment |
| #2246 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 2,074 | 9k+ | | | Non-prefixed global variable |
| #2247 | Coming soon and Maintenance mode | 44 | 14 | 43 | 9k+ | | | Request data is not unslashed |
| #2248 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #2249 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #2250 | Cost of Goods: Product Cost & Profit Calculator for WooCommerce | 35 | 21 | 29 | 9k+ | | | Missing Translators Comment |