| #2501 | Motors VIN Decoder | 36 | 87 | 88 | 400 | | | Output is not escaped |
| #2502 | Search engines blocked warning | 79 | 20 | 3 | 500 | | | Output is not escaped |
| #2503 | IntenseDebate Comments | 35 | 203 | 114 | 500 | | | Output is not escaped |
| #2504 | Connector for Gravity Forms and MailPoet | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #2505 | Show Variations as Single Products for WooCommerce | 61 | 12 | 27 | 500 | | | Unsafe printing function |
| #2506 | WP HTTP Compression | 95 | 5 | 6 | 500 | | | trademarked term |
| #2507 | BestWebSoft’s Pinterest | 57 | 490 | 176 | 500 | | | Text Domain Mismatch |
| #2508 | WPCasa Contact Form 7 | 88 | 4 | 5 | 500 | | | Output is not escaped |
| #2509 | Genesis Accessible | 62 | 49 | 17 | 500 | | | Text Domain Mismatch |
| #2510 | Alphabetic Pagination | 38 | 144 | 117 | 500 | | | Unsafe printing function |
| #2511 | Excerpts for Pages | 97 | 4 | 2 | 500 | | | Missing direct file access protection |
| #2512 | Disable User Login | 89 | 1 | 20 | 500 | | | Direct Query |
| #2513 | CIO Custom Fields Importer | 49 | 23 | 8 | 400 | | | Output is not escaped |
| #2514 | Getnet Argentina para WooCommerce | 86 | 14 | 9 | 500 | | | Text Domain Mismatch |
| #2515 | User Registration Using Contact Form 7 | 32 | 103 | 15 | 500 | | | wp function not compatible with requires wp |
| #2516 | Simple Honeypot for Contact Form 7 | 91 | 1 | 6 | 500 | | | Missing nonce verification |
| #2517 | Simple Digital Clock 🕒 | 100 | | 0 | 500 | | | No open findings |
| #2518 | Search box on Navigation Menu | 82 | 22 | 3 | 500 | | | Text Domain Mismatch |
| #2519 | LINE Auto Post | 45 | 19 | 11 | 500 | | | Heredoc Output Not Escaped |
| #2520 | RSS Feed Pro | 33 | 484 | 16 | 500 | | | Output is not escaped |
| #2521 | AccessibleWP – ALT Detector | 40 | 55 | 14 | 500 | | | Text Domain Mismatch |
| #2522 | Buckets | 34 | 68 | 76 | 500 | | | Output is not escaped |
| #2523 | WordPress Widgets Shortcode | 89 | 5 | 4 | 500 | | | trademarked term |
| #2524 | User Meta Display | 37 | 78 | 74 | 500 | | | Output is not escaped |
| #2525 | Easy GDPR Consent Forms – MailChimp | 57 | 72 | 22 | 500 | | | Text Domain Mismatch |
| #2526 | Nooz | 35 | 287 | 108 | 500 | | | Text Domain Mismatch |
| #2527 | Query Multiple Taxonomies | 39 | 55 | 41 | 500 | | | Output is not escaped |
| #2528 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | | | Output is not escaped |
| #2529 | Gravity Forms Eway | 33 | 519 | 45 | 500 | | | Missing Translators Comment |
| #2530 | Date Published Shortcode | 98 | 3 | 1 | 500 | | | Missing direct file access protection |
| #2531 | Block Temporary Email | 42 | 33 | 13 | 500 | | | Unsafe printing function |
| #2532 | Static Site Exporter | 35 | 54 | 25 | 500 | | | file system operations mkdir |
| #2533 | Ridhi Companion | 70 | 37 | 38 | 500 | | | Non-prefixed global variable |
| #2534 | Paybox WooCommerce Payment Gateway | 35 | 165 | 88 | 500 | | | Non Singular String Literal Domain |
| #2535 | Auto SRI | 92 | 4 | 1 | 500 | | | wp function not compatible with requires wp |
| #2536 | Social Icon Widget | 42 | 90 | 6 | 500 | | | Output is not escaped |
| #2537 | Review widget addon for Divi | 87 | 20 | 3 | 500 | | | Text Domain Mismatch |
| #2538 | Powie's WHOIS Domain Check | 41 | 38 | 11 | 500 | | | Unsafe printing function |
| #2539 | Cookie Dough Compliance and Consent for GDPR | 31 | 539 | 452 | 500 | | | Non Singular String Literal Domain |
| #2540 | Taboola Pixel | 92 | 1 | 5 | 500 | | | Missing nonce verification |
| #2541 | Smoothscroller | 85 | 9 | 2 | 500 | | | Output is not escaped |
| #2542 | Contact Form7: Autocomplete | 73 | 27 | 8 | 500 | | | Text Domain Mismatch |
| #2543 | NGD Custom Add to Cart Label for WooCommerce | 98 | 2 | 0 | 500 | | | mismatched tested up to header |
| #2544 | Easy YouTube Gallery | 98 | 4 | 0 | 500 | | | Missing direct file access protection |
| #2545 | Laposta WooCommerce | 29 | 96 | 115 | 500 | | | Non-prefixed global variable |
| #2546 | Songkick Concerts and Festivals | 49 | 9 | 48 | 500 | | | Input is not sanitized |
| #2547 | Image Size Selection for Divi | 96 | 60 | 3 | 500 | | | Text Domain Mismatch |
| #2548 | Restrict Elementor Widgets, Columns and Sections | 35 | 18 | 53 | 500 | | | Non-prefixed function |
| #2549 | Simple Ticker | 99 | 1 | 7 | 500 | | | Non-prefixed global variable |
| #2550 | BuddyPress Profile Completion | 40 | 28 | 30 | 500 | | | Output is not escaped |