| #1551 | Arile Extra | 30 | 537 | 570 | 10k+ | | | Non-prefixed global variable |
| #1552 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #1553 | BBH Custom Schema – Add Custom JSON-LD to Your Website | 100 | | 1 | 600 | | | Non-prefixed class |
| #1554 | Payment Gateway for Authorize.net for WooCommerce | 76 | 6 | 16 | 700 | | | Input is not sanitized |
| #1555 | Modal Popup Box — Popup Maker & Popup Builder | 93 | 1 | 4 | 2k+ | | | Input is not sanitized |
| #1556 | Linguator AI – Auto Translate & Create Multilingual Sites | 99 | 4 | 1 | 3k+ | | | wp function not compatible with requires wp |
| #1557 | Accessibility Widget by OneTap – Easy One-Click Accessibility Toolbar | 98 | 4 | 18 | 50k+ | | | Non-prefixed global variable |
| #1558 | Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more | 15 | 45 | 166 | 500k+ | | | Database parameter is not escaped |
| #1559 | GutSlider – All in One Slider and Carousel Blocks for Gutenberg | 99 | | 9 | 5k+ | | | Non-prefixed global variable |
| #1560 | Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor | 28 | 291 | 292 | 20k+ | | | Output is not escaped |
| #1561 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #1562 | Simple Calendar – Google Calendar Plugin | 24 | 2,053 | 592 | 50k+ | | | Missing direct file access protection |
| #1563 | WP Dynamic Keywords Injector | 34 | 44 | 205 | 1k+ | | | Nonce verification recommended |
| #1564 | FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet | 88 | 6 | 18 | 1k+ | | | Nonce verification recommended |
| #1565 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #1566 | Jotform – AI Chatbot | 85 | | 8 | 5k+ | | | Input is not validated |
| #1567 | BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites | 25 | 1,327 | 1,714 | 10k+ | | | Non-prefixed global variable |
| #1568 | Custom Order Status for WooCommerce | 35 | 41 | 55 | 10k+ | | | Non-prefixed hook name |
| #1569 | Quick and Easy FAQs | 71 | 92 | 9 | 10k+ | | | Non Singular String Literal Domain |
| #1570 | Image Hotspot With Tooltip For WPBakery Page Builder (formerly Visual Composer) | 92 | 61 | 12 | 400 | | | Text Domain Mismatch |
| #1571 | RealHomes PayPal Payments | 60 | 55 | 23 | 400 | | | Non Singular String Literal Domain |
| #1572 | Quick and Easy Testimonials | 55 | 62 | 32 | 3k+ | | | Non Singular String Literal Domain |
| #1573 | WP Mail Log | 43 | 40 | 29 | 10k+ | | | Text Domain Mismatch |
| #1574 | TinyPNG – JPEG, PNG & WebP image compression | 72 | 40 | 73 | 100k+ | | | Non-prefixed global variable |
| #1575 | Complianz – Terms and Conditions | 95 | 13 | 26 | 300k+ | | | Non-prefixed global variable |
| #1576 | Portfolio Block – The Ultimate Project & Portfolio Builder | 81 | 6 | 5 | 800 | | | Offloaded Content |
| #1577 | WPC Custom Related Products for WooCommerce | 91 | | 26 | 1k+ | | | Non-prefixed class |
| #1578 | Document Gallery | 29 | 183 | 98 | 8k+ | | | Output is not escaped |
| #1579 | Media File Renamer: Rename for better SEO (AI-Powered) | 26 | 154 | 170 | 40k+ | | | Direct Query |
| #1580 | Gallery Box | 32 | 395 | 43 | 1k+ | | | Text Domain Mismatch |
| #1581 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #1582 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | | Missing Translators Comment |
| #1583 | StoreAgent – WooCommerce AI Chatbot & AI Content Tools | 76 | | 202 | 500 | | | Non-prefixed global variable |
| #1584 | Custom Contact Forms | 40 | 13 | 106 | 6k+ | | | Missing nonce verification |
| #1585 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,911 | 877 | 100k+ | | | Exception output is not escaped |
| #1586 | Oliver POS – WooCommerce POS for iPhone, iPad & Android | 37 | 15 | 242 | 800 | | | Interpolated SQL is not prepared |
| #1587 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | | | Output is not escaped |
| #1588 | Generate Security.txt | 99 | 1 | 5 | 500 | | | Non-prefixed class |
| #1589 | Snow Monkey Forms | 91 | 36 | 41 | 30k+ | | | Non-prefixed global variable |
| #1590 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #1591 | Print, PDF & Email by PrintFriendly | 35 | 1 | 5 | 20k+ | | | Not In Footer |
| #1592 | Omnisend for Contact Form 7 Add-On | 99 | | 21 | 500 | | | Non-prefixed global variable |
| #1593 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 360 | 1,472 | 1k+ | | | Nonce verification recommended |
| #1594 | پارسی دیت – Parsi Date | 24 | 106 | 291 | 100k+ | | | Non-prefixed hook name |
| #1595 | Newsletters, Email Marketing, SMS and Popups by Omnisend | 35 | 4 | 2 | 100k+ | | | Hidden files included |
| #1596 | Extra Product Options for WooCommerce | 27 | 548 | 1,342 | 600 | | | Non-prefixed global variable |
| #1597 | WPGraphQL Smart Cache | 71 | 87 | 9 | 7k+ | | | Text Domain Mismatch |
| #1598 | Anti-Malware Security and Brute-Force Firewall | 23 | 543 | 965 | 100k+ | | | Output is not escaped |
| #1599 | Ocean Extra | 23 | 1,494 | 2,107 | 500k+ | | | Non-prefixed global variable |
| #1600 | Auto SEO META keywords (META tags keywords) optimization + WooCommerce | 38 | 63 | 34 | 700 | | | Output is not escaped |