| #2651 | AIO Forms – Craft Complex Forms Easily | 25 | 189 | 418 | 700 | | | Mixed line endings |
| #2652 | seQura | 89 | 2 | 23 | 1k+ | | | Non-prefixed global variable |
| #2653 | Create Block Theme | 35 | 43 | 5 | 20k+ | | | unlink unlink |
| #2654 | Novalnet Payment Gateway for WooCommerce | 94 | 4 | 58 | 1k+ | | | Non-prefixed class |
| #2655 | HD Quiz | 39 | 252 | 82 | 7k+ | | | Output is not escaped |
| #2656 | WooCommerce Square | 78 | 6 | 266 | 80k+ | | | Non-prefixed hook name |
| #2657 | Webyx for Gutenberg – Fullpage Fullscreen Scrolling Websites | 72 | 14 | 11 | 700 | | | Output is not escaped |
| #2658 | Light Modal Block | 99 | 1 | 1 | 2k+ | | | Missing direct file access protection |
| #2659 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | 42 | 111 | 17 | 20k+ | | | Exception output is not escaped |
| #2660 | Ultimate Member – ForumWP forum integration | 40 | 31 | 73 | 500 | | | Nonce verification recommended |
| #2661 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | | | Output is not escaped |
| #2662 | Language Switcher – Polylang for Divi | 98 | | 43 | 500 | | | Non-prefixed global variable |
| #2663 | WP Link Preview | 84 | 4 | 9 | 500 | | | trademarked term |
| #2664 | Hide WP Admin Login | 41 | 23 | 39 | 500 | | | Nonce verification recommended |
| #2665 | Disable Elements for WPBakery Page Builder | 84 | 2 | 9 | 500 | | | trademarked term |
| #2666 | Amelia Calendar Essential Shortcodes | 96 | 2 | 9 | 500 | | | Not In Footer |
| #2667 | Social Web Suite – Social Media Auto Post, Social Media Auto Publish | 27 | 74 | 164 | 500 | | | Non-prefixed global variable |
| #2668 | Surbma | GDPR Proof Cookie Consent & Notice Bar | 24 | 825 | 1,309 | 500 | | | Non-prefixed global variable |
| #2669 | Admin Bookmarks | 76 | 30 | 4 | 500 | | | Text Domain Mismatch |
| #2670 | OpenPix for WooCommerce | 82 | 69 | 28 | 500 | | | wp function not compatible with requires wp |
| #2671 | Tabs in Post Editor | 82 | 4 | 7 | 500 | | | Input is not validated |
| #2672 | WP Keyword Suggest | 40 | 29 | 41 | 500 | | | Non Singular String Literal Domain |
| #2673 | Fancy Lightbox | 98 | 3 | 2 | 500 | | | No Explicit Version |
| #2674 | iframe Wrapper | 97 | 3 | 3 | 500 | | | Missing Version |
| #2675 | Bulk Page Stub Creator | 35 | 4 | 2 | 500 | | | Non-prefixed constant |
| #2676 | UPC/EAN/GTIN Barcode Generator/Importer | 21 | 776 | 311 | 500 | | | Exception output is not escaped |
| #2677 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 400 | | | Text Domain Mismatch |
| #2678 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #2679 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | | | Output is not escaped |
| #2680 | Image Widget by Angie Makes | 55 | 48 | 3 | 500 | | | Output is not escaped |
| #2681 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #2682 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | | | Text Domain Mismatch |
| #2683 | TechGasp Music Master | 41 | 143 | 4 | 500 | | | Output is not escaped |
| #2684 | Sopro | 97 | 4 | 4 | 500 | | | Non-prefixed function |
| #2685 | DigitalOcean Spaces Sync | 41 | 80 | 8 | 500 | | | Text Domain Mismatch |
| #2686 | Export Customers Data | 34 | 109 | 49 | 500 | | | Text Domain Mismatch |
| #2687 | Excerpt Editor | 37 | 170 | 142 | 500 | | | Unsafe printing function |
| #2688 | Taxonomy List | 97 | 2 | 6 | 500 | | | Missing Version |
| #2689 | Algori 360 Video | 35 | 6 | 6 | 500 | | | Hidden files included |
| #2690 | Editor Enhancer for Oxygen | 84 | 3 | 10 | 500 | | | Nonce verification recommended |
| #2691 | Publish View | 80 | 12 | 6 | 500 | | | Missing nonce verification |
| #2692 | WPCopyRights网站防复制插件 | 93 | 1 | 33 | 500 | | | Non-prefixed global variable |
| #2693 | Accounting for WooCommerce | 39 | 87 | 115 | 500 | | | Unsafe printing function |
| #2694 | Widget Click to Chat | 61 | 22 | 4 | 500 | | | Setting is missing a sanitization callback |
| #2695 | TailPress – Tailwind for WordPress | 35 | 23 | 22 | 500 | | | Output is not escaped |
| #2696 | Wetterwarner | 90 | 5 | 12 | 500 | | | Non-prefixed function |
| #2697 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | 30 | 334 | 284 | 500 | | | Output is not escaped |
| #2698 | WebHotelier for WordPress | 39 | 451 | 40 | 500 | | | Text Domain Mismatch |
| #2699 | Ukrposhta | 75 | 24 | 226 | 500 | | | Non-prefixed global variable |
| #2700 | Agoda Affiliate Partners Text Link Generator | 42 | 4 | 40 | 500 | | | Interpolated SQL is not prepared |