| #2401 | Daddy Plus | 90 | 35 | 552 | 8k+ | | | Non-prefixed global variable |
| #2402 | Document Gallery | 29 | 183 | 98 | 8k+ | | | Output is not escaped |
| #2403 | Donorbox – Free Recurring Donation Plugin and Fundraising Platform | 87 | 5 | 6 | 8k+ | | | Missing Arg Domain |
| #2404 | Download Attachments | 32 | 69 | 188 | 8k+ | | | Non-prefixed hook name |
| #2405 | Dynamic Month & Year into Posts | 99 | 5 | 1 | 8k+ | | | wp function not compatible with requires wp |
| #2406 | Easy Footnotes | 96 | 6 | 22 | 8k+ | | | Non-prefixed global variable |
| #2407 | ElasticPress | 81 | 13 | 655 | 8k+ | | | Non-prefixed hook name |
| #2408 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | | | Unsafe printing function |
| #2409 | Essential Real Estate | 23 | 529 | 5,060 | 8k+ | | | Non-prefixed global variable |
| #2410 | Exclude Pages From Menu | 79 | 6 | 11 | 8k+ | | | Non-prefixed function |
| #2411 | Exploit Scanner | 37 | 25 | 130 | 8k+ | | | Non-prefixed global variable |
| #2412 | Fix Another Update In Progress | 80 | 7 | 1 | 8k+ | | | Output is not escaped |
| #2413 | Flow-Flow Social Streams | 99 | | 17 | 8k+ | | | Non-prefixed constant |
| #2414 | FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses | 59 | 41 | 14 | 8k+ | | | Exception output is not escaped |
| #2415 | Fonts | 80 | 8 | 5 | 8k+ | | | Output is not escaped |
| #2416 | Fourteen Colors | 88 | 16 | 1 | 8k+ | | | Text Domain Mismatch |
| #2417 | Widgets for Reviews & Recommendations | 95 | | 344 | 8k+ | | | Non-prefixed global variable |
| #2418 | Freesoul Deactivate Plugins – Disable plugins on individual WordPress pages | 32 | 53 | 776 | 8k+ | | | Nonce verification recommended |
| #2419 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | | Output is not escaped |
| #2420 | Prisna GWT – Google Website Translator | 39 | 117 | 77 | 8k+ | | | Text Domain Mismatch |
| #2421 | GSheetConnector For WPForms – WPForms Google Sheets Integration (Real-Time Sync) | 32 | 120 | 145 | 8k+ | | | Non-prefixed global variable |
| #2422 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #2423 | Gutenverse Companion | 81 | 16 | 29 | 8k+ | | | Nonce verification recommended |
| #2424 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #2425 | HivePress Favorites | 99 | 1 | 1 | 8k+ | | | missing composer json file |
| #2426 | HootKit | 28 | 429 | 1,295 | 8k+ | | | Non-prefixed global variable |
| #2427 | Horizontal scrolling announcements | 37 | 215 | 140 | 8k+ | | | Output is not escaped |
| #2428 | Hotline Phone Ring | 48 | 16 | 15 | 8k+ | | | Output is not escaped |
| #2429 | Hover Effects – easily create any hover effect | 99 | | 9 | 8k+ | | | Non-prefixed global variable |
| #2430 | Hreflang Manager – Hreflang Implementation for International SEO | 68 | 21 | 15 | 8k+ | | | wp function not compatible with requires wp |
| #2431 | SSL Mixed Content Fix | 34 | 53 | 65 | 8k+ | | | Output is not escaped |
| #2432 | Hyper Cache | 45 | 36 | 100 | 8k+ | | | Non-prefixed global variable |
| #2433 | Image Regenerate & Select Crop | 99 | 3 | 1 | 8k+ | | | wp function not compatible with requires wp |
| #2434 | Inpost Paczkomaty | 41 | 35 | 68 | 8k+ | | | Text Domain Mismatch |
| #2435 | International Telephone Input for Contact Form 7 | 53 | 18 | 10 | 8k+ | | | Missing direct file access protection |
| #2436 | IP Geo Block | 23 | 399 | 589 | 8k+ | | | Output is not escaped |
| #2437 | Justified Gallery | 23 | 589 | 1,417 | 8k+ | | | Non-prefixed global variable |
| #2438 | LegalBlink for Aruba | 91 | 33 | 29 | 8k+ | | | Missing direct file access protection |
| #2439 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | | | Non-prefixed global variable |
| #2440 | LiveJournal Importer | 37 | 86 | 67 | 8k+ | | | Output is not escaped |
| #2441 | Log cleaner for Solid Security | 41 | 65 | 47 | 8k+ | | | Text Domain Mismatch |
| #2442 | Loggedin – Limit Concurrent Sessions | 100 | | 2 | 8k+ | | | Discouraged text-domain loading |
| #2443 | Login IP & Country Restriction | 100 | 1 | 1 | 8k+ | | | textdomain mismatch |
| #2444 | Longer Permalinks | 57 | 27 | 21 | 8k+ | | | Missing Arg Domain |
| #2445 | Mailster WordPress Newsletter Plugin | 69 | 14 | 11 | 8k+ | | | Output is not escaped |
| #2446 | Manual Image Crop | 40 | 178 | 61 | 8k+ | | | Output is not escaped |
| #2447 | Media Library Enable Infinite Scrolling | 99 | 1 | 1 | 8k+ | | | Non-prefixed constant |
| #2448 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | | | Unsafe printing function |
| #2449 | MimeTypes Link Icons | 38 | 53 | 34 | 8k+ | | | Output is not escaped |
| #2450 | Multibanco, MB WAY, Credit card, Apple Pay, Google Pay, Payshop, Cofidis Pay, and PIX (ifthenpay) for WooCommerce | 95 | | 88 | 8k+ | | | Non-prefixed function |