| #651 | BD Courier Order Ratio Checker | 100 | | 4 | 2k+ | | | Non-prefixed class |
| #652 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 63 | 30 | 134 | 3k+ | | | Direct Query |
| #653 | Jetpack VideoPress | 35 | 710 | 241 | 7k+ | | | Text Domain Mismatch |
| #654 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #655 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #656 | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 87 | | 18 | 10k+ | | | Database parameter is not escaped |
| #657 | BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | 92 | 2 | 30 | 30k+ | | | Non-prefixed global variable |
| #658 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #659 | Check & Log Email – Easy Email Testing & Mail logging | 98 | 3 | 10 | 100k+ | | | Non-prefixed constant |
| #660 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 45 | 1m+ | | | Direct Query |
| #661 | GamiPress – WooCommerce Points Per Purchase Total | 90 | 10 | 5 | 400 | | | trademarked term |
| #662 | Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event | 71 | 24 | 49 | 700 | | | Non-prefixed global variable |
| #663 | Houzez Property Feed | 23 | 1,464 | 1,585 | 1k+ | | | Text Domain Mismatch |
| #664 | Grid Gallery – for Photo Gallery, Image Gallery & Portfolio | 41 | 9 | 74 | 1k+ | | | Request data is not unslashed |
| #665 | Events Calendar Modules for Divi | 100 | | 2 | 2k+ | | | Non-prefixed class |
| #666 | DOOFINDER Search and Discovery for WP & WooCommerce | 35 | 151 | 120 | 2k+ | | | Text Domain Mismatch |
| #667 | Album Gallery for Photo & Video | 78 | 7 | 8 | 4k+ | | | wp function not compatible with requires wp |
| #668 | SAML Single Sign On – SSO Login | 97 | 30 | 1 | 10k+ | | | wp function not compatible with requires wp |
| #669 | Read More Without Refresh | 23 | 955 | 1,347 | 20k+ | | | Non-prefixed global variable |
| #670 | Ninja Tables – Easy Data Table Builder | 100 | | 0 | 80k+ | | | No open findings |
| #671 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | | | Output is not escaped |
| #672 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 462 | 656 | 200k+ | | | Text Domain Mismatch |
| #673 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #674 | LinkCentral – URL shortener, Affiliate Links & Custom Link Shortener with Link Tracking | 89 | 10 | 1 | 400 | | | Missing Translators Comment |
| #675 | Slider and Carousel Block – Responsive, Accessible | 100 | | 0 | 600 | | | No open findings |
| #676 | Peach Payments Gateway | 22 | 334 | 143 | 1k+ | | | Non Singular String Literal Domain |
| #677 | Billingo Official for WooCommerce | 40 | 25 | 37 | 3k+ | | | Output is not escaped |
| #678 | Image Gallery | 74 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #679 | WPMasterToolKit (WPMTK) – All in one plugin | 99 | 1 | 4 | 5k+ | | | trademarked term |
| #680 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | | | Unsafe printing function |
| #681 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,607 | 2,020 | 10k+ | | | Direct Query |
| #682 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,478 | 3,337 | 10k+ | | | Non-prefixed global variable |
| #683 | Marquee Addons for Elementor – Essential Motion Widgets & Templates | 94 | 2 | 24 | 20k+ | | | Post Not In exclude |
| #684 | FormsDB – Save Elementor Forms to Google Sheets & Post Type | 99 | | 7 | 20k+ | | | Non-prefixed class |
| #685 | WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation | 75 | 2 | 60 | 1k+ | | | Database parameter is not escaped |
| #686 | Add From Server Reloaded | 99 | 2 | 1 | 3k+ | | | Missing direct file access protection |
| #687 | WPJAM Basic | 19 | 320 | 347 | 4k+ | | | Output is not escaped |
| #688 | Yandex Pay and Split | 97 | 2 | 16 | 400 | | | Non-prefixed global variable |
| #689 | Aruba Fatturazione Elettronica | 76 | | 34 | 700 | | | Missing nonce verification |
| #690 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 26 | 423 | 292 | 2k+ | | | Output is not escaped |
| #691 | Viva.com | Smart Checkout for WooCommerce | 91 | | 30 | 6k+ | | | Direct Query |
| #692 | WPVulnerability | 96 | | 4 | 10k+ | | | trademarked term |
| #693 | WP Responsive Menu | 36 | 295 | 139 | 30k+ | | | Text Domain Mismatch |
| #694 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | | | Unsafe printing function |
| #695 | Timeline Block – Beautiful Timeline Builder | 99 | 26 | 1 | 3k+ | | | Text Domain Mismatch |
| #696 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #697 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #698 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #699 | Starter Templates & Sites Pack by ThemeGrill | 72 | 28 | 51 | 70k+ | | | Non-prefixed hook name |
| #700 | WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL | 90 | 26 | 19 | 500 | | | Text Domain Mismatch |