| #401 | MyBookTable Bookstore by Stormhill Media | 82 | 16 | 34 | 1k+ | | | Direct Query |
| #402 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #403 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #404 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 389 | 1,266 | 5k+ | | | Non-prefixed global variable |
| #405 | DoLogin Security | 100 | | 0 | 7k+ | | | No open findings |
| #406 | Order on Mobile for WooCommerce | 84 | 14 | 1 | 7k+ | | | Output is not escaped |
| #407 | QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly | 35 | 225 | 110 | 8k+ | | | Non Singular String Literal Domain |
| #408 | All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) | 97 | 20 | 4 | 3m+ | | | wp function not compatible with requires wp |
| #409 | Search and Replace for Block Editor | 91 | 2 | 1 | 700 | | | Output is not escaped |
| #410 | Image Converter for WebP | 90 | 5 | 1 | 800 | | | wp function not compatible with requires wp |
| #411 | AidWP – Donation & Payment Forms (Stripe Powered) | 39 | | 193 | 800 | | | Non-prefixed global variable |
| #412 | BT iPay Payments | 98 | 2 | 13 | 900 | | | Non-prefixed global variable |
| #413 | GetAutoSEO AI Tool | 46 | 10 | 254 | 2k+ | | | Direct Query |
| #414 | Shipment Tracker for Woocommerce | 23 | 477 | 576 | 2k+ | | | Missing Arg Domain |
| #415 | Simple File List | 93 | 1 | 525 | 3k+ | | | Non-prefixed global variable |
| #416 | WPZOOM Addons for Beaver Builder | 30 | 2,168 | 177 | 4k+ | | | Text Domain Mismatch |
| #417 | Additional Variation Images Gallery for WooCommerce | 40 | 60 | 129 | 20k+ | | | Non-prefixed global variable |
| #418 | Disabler | 64 | 212 | 38 | 900 | | | Text Domain Mismatch |
| #419 | POS Entegratör – Gurmehub Ödeme Eklentisi | 68 | 1,321 | 69 | 1k+ | | | Text Domain Mismatch |
| #420 | Prevent Files / Folders Access | 100 | | 0 | 1k+ | | | No open findings |
| #421 | Simple Link Directory – AI Powered | 25 | 133 | 420 | 2k+ | | | Non-prefixed global variable |
| #422 | License Manager for WooCommerce | 23 | 129 | 797 | 6k+ | | | Nonce verification recommended |
| #423 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | | Text Domain Mismatch |
| #424 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #425 | WebberZone Top 10 — Popular Posts | 65 | 37 | 176 | 10k+ | | | Database parameter is not escaped |
| #426 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #427 | Smart Brands for WooCommerce | 95 | | 150 | 400 | | | Non-prefixed global variable |
| #428 | Accordion – Responsive Horizontal & Vertical Accordion Block | 98 | 1 | 10 | 600 | | | Non-prefixed constant |
| #429 | Payments via PayMongo for WooCommerce | 39 | 36 | 81 | 1k+ | | | Nonce verification recommended |
| #430 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 235 | 699 | 2k+ | | | Non-prefixed global variable |
| #431 | Text Unfold For Elementor | 88 | 122 | 0 | 3k+ | | | Text Domain Mismatch |
| #432 | Before After Image Comparison – Visual Comparison for Two Images | 77 | 18 | 16 | 3k+ | | | Text Domain Mismatch |
| #433 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 115 | 46 | 3k+ | | | Output is not escaped |
| #434 | Weather Effect | 88 | | 381 | 4k+ | | | Non-prefixed global variable |
| #435 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates | 22 | 2,175 | 4,210 | 7k+ | | | Non-prefixed global variable |
| #436 | Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder | 80 | 93 | 732 | 10k+ | | | Non-prefixed global variable |
| #437 | Leverage Browser Caching | 100 | | 1 | 10k+ | | | Missing Version |
| #438 | VK Post Author Display | 36 | 87 | 113 | 10k+ | | | Non-prefixed function |
| #439 | miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) | 99 | | 6 | 10k+ | | | Non-prefixed constant |
| #440 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 663 | 3,353 | 50k+ | | | Non-prefixed global variable |
| #441 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #442 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #443 | Gutenberg | 23 | 606 | 329 | 300k+ | | | Missing direct file access protection |
| #444 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | | | Unsafe printing function |
| #445 | Recent Products Block | 80 | 11 | 0 | 600 | | | Output is not escaped |
| #446 | Product Delivery Date for WooCommerce – Lite | 35 | 171 | 27 | 1k+ | | | Text Domain Mismatch |
| #447 | Frisbii Pay | 33 | 91 | 292 | 1k+ | | | Non-prefixed global variable |
| #448 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |
| #449 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | | | Output is not escaped |
| #450 | Permalink Manager for WooCommerce | 40 | 115 | 20 | 8k+ | | | Short PHP open tag found |