| #2251 | Custom Payment Gateways for WooCommerce | 98 | 2 | 3 | 9k+ | | | wp function not compatible with requires wp |
| #2252 | Disk Usage Sunburst | 35 | 30 | 34 | 9k+ | | | Output is not escaped |
| #2253 | Document Embedder – Embed PDFs, Word, Excel, and Other Files | 100 | | 2 | 9k+ | | | Non-prefixed function |
| #2254 | Duplicate Page or Post | 42 | 122 | 11 | 9k+ | | | Text Domain Mismatch |
| #2255 | Easy Media Download | 49 | 20 | 15 | 9k+ | | | Output is not escaped |
| #2256 | Easy Notification Bar | 87 | 6 | 2 | 9k+ | | | Output is not escaped |
| #2257 | Email Customizer for WooCommerce | Drag and Drop Email Templates Builder | 97 | | 65 | 9k+ | | | Non-prefixed hook name |
| #2258 | eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams | 21 | 186 | 437 | 9k+ | | | Non-prefixed global variable |
| #2259 | EU Cookies Bar for WordPress | 67 | 3 | 69 | 9k+ | | | Request data is not unslashed |
| #2260 | WP2Social Auto Publish | 35 | 643 | 215 | 9k+ | | | Unsafe printing function |
| #2261 | FareHarbor for WordPress | 75 | 18 | 9 | 9k+ | | | Output is not escaped |
| #2262 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #2263 | Filenames to latin | 98 | 2 | 1 | 9k+ | | | Missing direct file access protection |
| #2264 | Friendly Captcha for WordPress | 35 | 192 | 62 | 9k+ | | | Output is not escaped |
| #2265 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #2266 | Generate Child Theme | 100 | 1 | 0 | 9k+ | | | Missing direct file access protection |
| #2267 | GSheetConnector for Elementor Forms – Sync Elementor Forms to Google Sheets | 81 | 11 | 12 | 9k+ | | | Non-prefixed global variable |
| #2268 | HBAgency | 98 | 1 | 16 | 9k+ | | | Non-prefixed global variable |
| #2269 | Helpie FAQ — Accordion, Docs & Knowledge Base | 54 | 96 | 89 | 9k+ | | | Nonce verification recommended |
| #2270 | Hide Admin Toolbar | 98 | 3 | 1 | 9k+ | | | Missing direct file access protection |
| #2271 | MM Title Manager — Hide Page and Post Title | 81 | 4 | 4 | 9k+ | | | Unsafe printing function |
| #2272 | Homepage Control | 83 | 13 | 3 | 9k+ | | | Output is not escaped |
| #2273 | Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file | 95 | 11 | 15 | 9k+ | | | Non-prefixed global variable |
| #2274 | Image Alt Text | 78 | 5 | 19 | 9k+ | | | Nonce verification recommended |
| #2275 | Image Carousel Module for Divi | 93 | 131 | 3 | 9k+ | | | Text Domain Mismatch |
| #2276 | Images to WebP | 37 | 39 | 50 | 9k+ | | | curl curl setopt |
| #2277 | Inavii Social Feed – Live Social Proof Gallery | 34 | 532 | 180 | 9k+ | | | Text Domain Mismatch |
| #2278 | Jquery Validation For Contact Form 7 | 57 | 16 | 19 | 9k+ | | | Missing direct file access protection |
| #2279 | Juicer.io: Effortlessly embed, curate, and aggregate social media feeds into your website | 51 | 44 | 34 | 9k+ | | | Output is not escaped |
| #2280 | Kama Thumbnail | 28 | 80 | 47 | 9k+ | | | Output is not escaped |
| #2281 | Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize | 67 | 293 | 80 | 9k+ | | | Text Domain Mismatch |
| #2282 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | | | Unsafe printing function |
| #2283 | Lazy Load for Videos | 82 | 6 | 37 | 9k+ | | | Non-prefixed constant |
| #2284 | Lazy Loader | 59 | 6 | 24 | 9k+ | | | Nonce verification recommended |
| #2285 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #2286 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 9k+ | | | Output is not escaped |
| #2287 | License For Envato | 58 | 12 | 31 | 9k+ | | | Non-prefixed global variable |
| #2288 | List Custom Taxonomy Widget | 42 | 52 | 5 | 9k+ | | | Output is not escaped |
| #2289 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #2290 | Masks Form Fields | 99 | 2 | 0 | 9k+ | | | Missing direct file access protection |
| #2291 | Max upload filesize | 83 | 3 | 8 | 9k+ | | | Input is not validated |
| #2292 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #2293 | Product Labels, Quick View, Buy Now, Pre-Orders, Frequently Bought Together & More for WooCommerce – Merchant | 60 | 11 | 740 | 9k+ | | | Non-prefixed global variable |
| #2294 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 20 | 1,325 | 2,753 | 9k+ | | | Output is not escaped |
| #2295 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,959 | 9k+ | | | Text Domain Mismatch |
| #2296 | Multi Step Form | 34 | 277 | 139 | 9k+ | | | Output is not escaped |
| #2297 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #2298 | Multilingual Contact Form 7 with Polylang | 39 | 50 | 30 | 9k+ | | | Text Domain Mismatch |
| #2299 | No Gutenberg – Disable Blocks Editor and Global Styles – Back to Classic Editor | 99 | 1 | 3 | 9k+ | | | trademarked term |
| #2300 | Options for Twenty Seventeen | 99 | 2 | 2 | 9k+ | | | Non-prefixed class |