| #2501 | WCAPF – Ajax Product Filter for WooCommerce | 99 | 1 | 3 | 8k+ | | | trademarked term |
| #2502 | Cash On Pickup for WooCommerce | 98 | 16 | 4 | 8k+ | | | Text Domain Mismatch |
| #2503 | Weather Atlas Widget | 37 | 630 | 111 | 8k+ | | | Output is not escaped |
| #2504 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | | | Non-prefixed global variable |
| #2505 | Widgets in Menu for WordPress | 74 | 16 | 12 | 8k+ | | | Text Domain Mismatch |
| #2506 | Wonder PDF Embed | 75 | 53 | 1 | 8k+ | | | badly named files |
| #2507 | Wonder Slider Lite | 33 | 273 | 187 | 8k+ | | | Output is not escaped |
| #2508 | Asaas Gateway for WooCommerce | 35 | 12 | 109 | 8k+ | | | Non-prefixed global variable |
| #2509 | Hyyan WooCommerce Polylang Integration | 33 | 141 | 220 | 8k+ | | | Nonce verification recommended |
| #2510 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | | | Exception output is not escaped |
| #2511 | Call for Price for WooCommerce | 35 | 3 | 31 | 8k+ | | | Non-prefixed hook name |
| #2512 | MyParcel | 94 | 2 | 84 | 8k+ | | | Non-prefixed global variable |
| #2513 | Custom Payment Gateway for WooCommerce | 35 | 11 | 12 | 8k+ | | | Missing nonce verification |
| #2514 | Product SKU Generator for WooCommerce | 81 | 2 | 8 | 8k+ | | | Nonce verification recommended |
| #2515 | Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools | 39 | 322 | 66 | 8k+ | | | Output is not escaped |
| #2516 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #2517 | WP-Ban | 38 | 99 | 108 | 8k+ | | | Unsafe printing function |
| #2518 | WPForce Logout – WordPress User Login Logout Management Plugin | 37 | 567 | 32 | 8k+ | | | Output is not escaped |
| #2519 | WP FullCalendar | 37 | 32 | 64 | 8k+ | | | Nonce verification recommended |
| #2520 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #2521 | WP LinkedIn Auto Publish | 34 | 165 | 56 | 8k+ | | | Output is not escaped |
| #2522 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | | | Output is not escaped |
| #2523 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #2524 | Multi-Step Checkout for WooCommerce | 71 | 38 | 104 | 8k+ | | | Non-prefixed global variable |
| #2525 | WP PageNavi Style | 37 | 109 | 11 | 8k+ | | | Unsafe printing function |
| #2526 | WP-Print | 35 | 110 | 52 | 8k+ | | | Unsafe printing function |
| #2527 | WP Remove Category Base | 95 | 1 | 4 | 8k+ | | | trademarked term |
| #2528 | WP REST API Controller | 64 | 8 | 22 | 8k+ | | | Nonce verification recommended |
| #2529 | Bulk Edit Posts and Products in Spreadsheet | 25 | 934 | 944 | 8k+ | | | Text Domain Mismatch |
| #2530 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #2531 | WP TripAdvisor Review Slider | 25 | 1,063 | 2,582 | 8k+ | | | Non-prefixed global variable |
| #2532 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | | | Text Domain Mismatch |
| #2533 | YayCurrency – WooCommerce Multi-Currency Switcher | 24 | 373 | 623 | 8k+ | | | Text Domain Mismatch |
| #2534 | YITH Frequently Bought Together for WooCommerce | 31 | 389 | 1,452 | 8k+ | | | Non-prefixed global variable |
| #2535 | 404 Redirection | 94 | 4 | 2 | 7k+ | | | Missing direct file access protection |
| #2536 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #2537 | Add Widget After Content | 70 | 6 | 11 | 7k+ | | | Setting is missing a sanitization callback |
| #2538 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | | | Text Domain Mismatch |
| #2539 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #2540 | AdOpt | Easy Multi-Regulations Cookie Banner. | 69 | 22 | 27 | 7k+ | | | Missing direct file access protection |
| #2541 | Advanced Floating Content Lite | 25 | 643 | 1,348 | 7k+ | | | Non-prefixed global variable |
| #2542 | Algori PDF Viewer | 98 | 2 | 5 | 7k+ | | | Missing Version |
| #2543 | Announce from the Dashboard | 38 | 138 | 24 | 7k+ | | | Non Singular String Literal Domain |
| #2544 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #2545 | Automatic Featured Images from Videos | 63 | 13 | 13 | 7k+ | | | Missing direct file access protection |
| #2546 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #2547 | Awesome Contact Form7 for Elementor | 67 | 20 | 30 | 7k+ | | | Non-prefixed global variable |
| #2548 | Carousel Block – Responsive Image and Content Carousel | 100 | | 1 | 7k+ | | | mismatched plugin name |
| #2549 | Blaze Ads – Fully Integrated Ads Solution | 99 | 1 | 2 | 7k+ | | | Non-prefixed global variable |
| #2550 | Blog Filter – Post Grid Filter by Category or Tag | 89 | 1 | 5 | 7k+ | | | Nonce verification recommended |