| #501 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #502 | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 87 | | 18 | 10k+ | | | Database parameter is not escaped |
| #503 | BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | 92 | 2 | 30 | 30k+ | | | Non-prefixed global variable |
| #504 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #505 | Check & Log Email – Easy Email Testing & Mail logging | 98 | 3 | 10 | 100k+ | | | Non-prefixed constant |
| #506 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 45 | 1m+ | | | Direct Query |
| #507 | GamiPress – WooCommerce Points Per Purchase Total | 90 | 10 | 5 | 400 | | | trademarked term |
| #508 | Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event | 71 | 24 | 49 | 700 | | | Non-prefixed global variable |
| #509 | Houzez Property Feed | 23 | 1,464 | 1,585 | 1k+ | | | Text Domain Mismatch |
| #510 | Grid Gallery – for Photo Gallery, Image Gallery & Portfolio | 41 | 9 | 74 | 1k+ | | | Request data is not unslashed |
| #511 | Events Calendar Modules for Divi | 100 | | 2 | 2k+ | | | Non-prefixed class |
| #512 | DOOFINDER Search and Discovery for WP & WooCommerce | 35 | 151 | 120 | 2k+ | | | Text Domain Mismatch |
| #513 | Album Gallery for Photo & Video | 78 | 7 | 8 | 4k+ | | | wp function not compatible with requires wp |
| #514 | SAML Single Sign On – SSO Login | 97 | 30 | 1 | 10k+ | | | wp function not compatible with requires wp |
| #515 | Read More Without Refresh | 23 | 955 | 1,347 | 20k+ | | | Non-prefixed global variable |
| #516 | Ninja Tables – Easy Data Table Builder | 100 | | 0 | 80k+ | | | No open findings |
| #517 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | | | Output is not escaped |
| #518 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 462 | 656 | 200k+ | | | Text Domain Mismatch |
| #519 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #520 | LinkCentral – URL shortener, Affiliate Links & Custom Link Shortener with Link Tracking | 89 | 10 | 1 | 400 | | | Missing Translators Comment |
| #521 | Slider and Carousel Block – Responsive, Accessible | 100 | | 0 | 600 | | | No open findings |
| #522 | Peach Payments Gateway | 22 | 334 | 143 | 1k+ | | | Non Singular String Literal Domain |
| #523 | Billingo Official for WooCommerce | 40 | 25 | 37 | 3k+ | | | Output is not escaped |
| #524 | Image Gallery | 74 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #525 | WPMasterToolKit (WPMTK) – All in one plugin | 99 | 1 | 4 | 5k+ | | | trademarked term |
| #526 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | | | Unsafe printing function |
| #527 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,607 | 2,020 | 10k+ | | | Direct Query |
| #528 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,478 | 3,337 | 10k+ | | | Non-prefixed global variable |
| #529 | Marquee Addons for Elementor – Essential Motion Widgets & Templates | 94 | 2 | 24 | 20k+ | | | Post Not In exclude |
| #530 | FormsDB – Save Elementor Forms to Google Sheets & Post Type | 99 | | 7 | 20k+ | | | Non-prefixed class |
| #531 | WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation | 75 | 2 | 60 | 1k+ | | | Database parameter is not escaped |
| #532 | WP Helper Premium | 24 | 3,908 | 1,515 | 1k+ | | | Text Domain Mismatch |
| #533 | Add From Server Reloaded | 99 | 2 | 1 | 3k+ | | | Missing direct file access protection |
| #534 | WPJAM Basic | 19 | 320 | 347 | 4k+ | | | Output is not escaped |
| #535 | Yandex Pay and Split | 97 | 2 | 16 | 400 | | | Non-prefixed global variable |
| #536 | Aruba Fatturazione Elettronica | 76 | | 34 | 700 | | | Missing nonce verification |
| #537 | Advanced IP Blocker | 40 | 94 | 44 | 2k+ | | | Exception output is not escaped |
| #538 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 26 | 423 | 292 | 2k+ | | | Output is not escaped |
| #539 | Viva.com | Smart Checkout for WooCommerce | 91 | | 30 | 6k+ | | | Direct Query |
| #540 | WPVulnerability | 96 | | 4 | 10k+ | | | trademarked term |
| #541 | WP Responsive Menu | 36 | 295 | 139 | 30k+ | | | Text Domain Mismatch |
| #542 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | | | Unsafe printing function |
| #543 | Timeline Block – Beautiful Timeline Builder | 99 | 26 | 1 | 3k+ | | | Text Domain Mismatch |
| #544 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #545 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #546 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #547 | Starter Templates & Sites Pack by ThemeGrill | 72 | 28 | 51 | 70k+ | | | Non-prefixed hook name |
| #548 | WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL | 90 | 26 | 19 | 500 | | | Text Domain Mismatch |
| #549 | Video Background Block – Use video as background in section. | 75 | 35 | 90 | 2k+ | | | Non-prefixed global variable |
| #550 | WP Email Template | 19 | 344 | 345 | 2k+ | | | Exception output is not escaped |