| #401 | Tutor LMS – eLearning and online course solution | 24 | 328 | 4,409 | 100k+ | | | Non-prefixed global variable |
| #402 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #403 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | 24 | 938 | 2,935 | 200k+ | | | Non-prefixed global variable |
| #404 | Ultimate Post Kit Addons for Elementor | 24 | 183 | 412 | 30k+ | | | Missing nonce verification |
| #405 | Ultimate Product Catalog | 24 | 554 | 525 | 4k+ | | | Unsafe printing function |
| #406 | UpdraftPlus: WP Backup & Migration Plugin | 24 | 277 | 299 | 3m+ | | | Non-prefixed global variable |
| #407 | Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels | 24 | 1,615 | 1,377 | 80k+ | | | Text Domain Mismatch |
| #408 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 24 | 279 | 542 | 4k+ | | | Non-prefixed global variable |
| #409 | Coupon Affiliates – Affiliate Plugin for WooCommerce | 24 | 947 | 3,133 | 5k+ | | | Non-prefixed global variable |
| #410 | WordLift – AI powered SEO – Schema | 24 | 278 | 949 | 400 | | | Non-prefixed hook name |
| #411 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 158 | 384 | 10m+ | | | Non-prefixed global variable |
| #412 | Auto Affiliate Links | 24 | 381 | 416 | 3k+ | | | Output is not escaped |
| #413 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #414 | WP Helper Premium | 24 | 3,913 | 1,523 | 1k+ | | | Text Domain Mismatch |
| #415 | WP Hotel Booking | 24 | 901 | 1,532 | 7k+ | | | Non-prefixed global variable |
| #416 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #417 | WP Layouts | 24 | 349 | 146 | 3k+ | | | Text Domain Mismatch |
| #418 | WP Recipe Maker | 24 | 494 | 942 | 50k+ | | | Non-prefixed global variable |
| #419 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,777 | 394 | 40k+ | | | Text Domain Mismatch |
| #420 | WP Travel – Ultimate Travel Booking System, Tour Management Engine | 24 | 227 | 1,954 | 4k+ | | | Non-prefixed hook name |
| #421 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,029 | 5,700 | 20k+ | | | Non-prefixed global variable |
| #422 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #423 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #424 | WP Voting Contest Lite | 24 | 259 | 258 | 400 | | | Text Domain Mismatch |
| #425 | WPAdverts – Classifieds Plugin | 24 | 1,308 | 496 | 4k+ | | | Output is not escaped |
| #426 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | | | Output is not escaped |
| #427 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #428 | WpStream – Live Streaming, Video on Demand, Pay Per View | 24 | 1,725 | 742 | 3k+ | | | Text Domain Mismatch |
| #429 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | | Text Domain Mismatch |
| #430 | xili-language | 24 | 1,501 | 523 | 600 | | | Output is not escaped |
| #431 | XT Ajax Add To Cart for WooCommerce | 24 | 985 | 1,665 | 1k+ | | | Non-prefixed global variable |
| #432 | XT Variation Swatches for WooCommerce | 24 | 1,033 | 1,809 | 500 | | | Non-prefixed global variable |
| #433 | YITH WooCommerce Gift Cards | 24 | 436 | 1,534 | 10k+ | | | Non-prefixed global variable |
| #434 | YITH WooCommerce Subscription | 24 | 439 | 1,538 | 7k+ | | | Non-prefixed global variable |
| #435 | YITH WooCommerce Waitlist | 24 | 420 | 1,500 | 3k+ | | | Non-prefixed global variable |
| #436 | YITH WooCommerce Wishlist | 24 | 448 | 1,486 | 400k+ | | | Non-prefixed global variable |
| #437 | YITH WooCommerce Product Gallery & Image Zoom | 24 | 418 | 1,490 | 20k+ | | | Non-prefixed global variable |
| #438 | YMC Filter | 24 | 12 | 1,732 | 4k+ | | | Non-prefixed global variable |
| #439 | Dynamic Pricing With Discount Rules for WooCommerce | 25 | 165 | 205 | 5k+ | | | Non-prefixed global variable |
| #440 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #441 | FiboSearch – Ajax Search for WooCommerce | 25 | 603 | 302 | 100k+ | | | Output is not escaped |
| #442 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,611 | 1,296 | 10k+ | | | Non Singular String Literal Domain |
| #443 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |
| #444 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #445 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | | Output is not escaped |
| #446 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #447 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #448 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 3k+ | | | Text Domain Mismatch |
| #449 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #450 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 25 | 99 | 1,040 | 700k+ | | | Non-prefixed global variable |