| #2451 | My Simple Space | 73 | 21 | 3 | 8k+ | | | Output is not escaped |
| #2452 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | | | Unsafe printing function |
| #2453 | MyCryptoCheckout – Bitcoin, Ethereum, and 100+ altcoins for WooCommerce | 85 | 6 | 7 | 8k+ | | | Missing Translators Comment |
| #2454 | NewStatPress | 94 | 95 | 12 | 8k+ | | | wp function not compatible with requires wp |
| #2455 | Notibar – Notification Bar for WordPress | 62 | 47 | 64 | 8k+ | | | wp function not compatible with requires wp |
| #2456 | Packeta | 22 | 801 | 333 | 8k+ | | | Exception output is not escaped |
| #2457 | Payment Gateway of Stripe for WooCommerce | 94 | | 233 | 8k+ | | | Non-prefixed hook name |
| #2458 | Permalink Manager for WooCommerce | 40 | 115 | 20 | 8k+ | | | Short PHP open tag found |
| #2459 | PixCodes | 94 | | 216 | 8k+ | | | Non-prefixed global variable |
| #2460 | Pods Beaver Themer Add-On | 100 | | 0 | 8k+ | | | No open findings |
| #2461 | Print My Blog – Print, PDF, & eBook Converter WordPress Plugin | 23 | 1,077 | 1,660 | 8k+ | | | Non-prefixed global variable |
| #2462 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | | Output is not escaped |
| #2463 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #2464 | QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly | 35 | 225 | 110 | 8k+ | | | Non Singular String Literal Domain |
| #2465 | Real Custom Post Order: Create a custom order for your content | 89 | 1 | 19 | 8k+ | | | Non-prefixed global variable |
| #2466 | Really Simple Click To Call Bar | 71 | 23 | 3 | 8k+ | | | Output is not escaped |
| #2467 | reCAPTCHA in WP comments form | 31 | 264 | 60 | 8k+ | | | Output is not escaped |
| #2468 | Remove admin menus by role | 57 | 5 | 54 | 8k+ | | | Input is not validated |
| #2469 | Remove Uppercase Accents | 52 | 41 | 2 | 8k+ | | | Unsafe printing function |
| #2470 | Remove & Disable XML-RPC Pingback | 98 | 2 | 6 | 8k+ | | | Non-prefixed function |
| #2471 | Rename wp-admin login | 42 | 23 | 38 | 8k+ | | | Output is not escaped |
| #2472 | Replace Image | 84 | 5 | 13 | 8k+ | | | Input is not sanitized |
| #2473 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | | | Text Domain Mismatch |
| #2474 | Widgets for Booking.com Reviews | 95 | | 352 | 8k+ | | | Non-prefixed global variable |
| #2475 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 65 | 6 | 33 | 8k+ | | | Interpolated SQL is not prepared |
| #2476 | RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | 99 | | 3 | 8k+ | | | Non-prefixed class |
| #2477 | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | 35 | 24 | 5 | 8k+ | | | Missing direct file access protection |
| #2478 | SALERT – Fake Sales Notification WooCommerce | 42 | 41 | 67 | 8k+ | | | Non-prefixed global variable |
| #2479 | SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster | 84 | 9 | 17 | 8k+ | | | Non-prefixed class |
| #2480 | ShowID for Post/Page/Category/Tag/Comment | 97 | 5 | 1 | 8k+ | | | Missing direct file access protection |
| #2481 | Sinatra Core | 40 | 101 | 15 | 8k+ | | | Output is not escaped |
| #2482 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #2483 | Sold Out Badge for WooCommerce | 35 | 5 | 4 | 8k+ | | | Output is not escaped |
| #2484 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 241 | 1,276 | 8k+ | | | Non-prefixed global variable |
| #2485 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #2486 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | | Output is not escaped |
| #2487 | SteadFast API | 80 | 2 | 23 | 8k+ | | | Non-prefixed global variable |
| #2488 | Superb Helper | 97 | 5 | 32 | 8k+ | | | Non-prefixed global variable |
| #2489 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #2490 | Template Kit – Export | 83 | 7 | 90 | 8k+ | | | Non-prefixed global variable |
| #2491 | Texty – SMS Notification for WordPress, WooCommerce, Dokan and more | 53 | 31 | 34 | 8k+ | | | Output is not escaped |
| #2492 | TJ Custom CSS | 69 | 18 | 10 | 8k+ | | | Output is not escaped |
| #2493 | Themify Popup | 29 | 232 | 108 | 8k+ | | | Text Domain Mismatch |
| #2494 | Radius Portfolio – Filterable Grid, Gallery & Slider Portfolio | 98 | 1 | 14 | 8k+ | | | Non-prefixed class |
| #2495 | TypePad emoji for TinyMCE | 38 | 100 | 24 | 8k+ | | | Text Domain Mismatch |
| #2496 | URL Params | 46 | 36 | 17 | 8k+ | | | Text Domain Mismatch |
| #2497 | User Roles and Capabilities | 36 | 227 | 132 | 8k+ | | | Output is not escaped |
| #2498 | VS Event List | 81 | 1 | 259 | 8k+ | | | Non-prefixed global variable |
| #2499 | Videojs HTML5 Player | 59 | 12 | 12 | 8k+ | | | Nonce verification recommended |
| #2500 | VikBooking Hotel Booking Engine & PMS | 25 | 13,251 | 8,316 | 8k+ | | | Output is not escaped |