| #1351 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #1352 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #1353 | User Verification by PickPlugins | 29 | 41 | 314 | 5k+ | | | Request data is not unslashed |
| #1354 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | | Output is not escaped |
| #1355 | Custom Post Types and Custom Fields creator – WCK | 29 | 1,300 | 143 | 10k+ | | | Text Domain Mismatch |
| #1356 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #1357 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #1358 | Widget for Yelp Reviews | 29 | 147 | 158 | 2k+ | | | Output is not escaped |
| #1359 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | | Text Domain Mismatch |
| #1360 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 600 | | | Non-prefixed class |
| #1361 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #1362 | WP-PostRatings | 29 | 425 | 384 | 30k+ | | | Output is not escaped |
| #1363 | WPComplete | 29 | 383 | 333 | 1k+ | | | Output is not escaped |
| #1364 | Xagio SEO – AI Powered SEO | 29 | 2 | 1,273 | 10k+ | | | Direct Query |
| #1365 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #1366 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 173 | 479 | 100k+ | | | Interpolated SQL is not prepared |
| #1367 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #1368 | AI Product Tools – Bulk Product Content Generator & AI Toolkit for WooCommerce | 30 | 508 | 562 | 400 | | | SQL query is not prepared |
| #1369 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #1370 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #1371 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #1372 | aThemes Starter Sites | 30 | 262 | 195 | 40k+ | | | Text Domain Mismatch |
| #1373 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #1374 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #1375 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #1376 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | 30 | 334 | 284 | 500 | | | Output is not escaped |
| #1377 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #1378 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #1379 | EDI – Обмен данными между WooCommerce и 1С | 30 | 284 | 101 | 600 | | | Text Domain Mismatch |
| #1380 | Easy Affiliate Links | 30 | 186 | 198 | 7k+ | | | Missing direct file access protection |
| #1381 | EasyParcel Shipping– All-in-one Shipping Solution, Real-Time Shipping Rates | 30 | 31 | 610 | 600 | | | Non-prefixed global variable |
| #1382 | Element Invader – Template Kits for Elementor | 30 | 274 | 130 | 3k+ | | | Output is not escaped |
| #1383 | Epeken All Kurir for Woocommerce | 30 | 590 | 1,246 | 400 | | | Missing nonce verification |
| #1384 | Eway Payment Gateway | 30 | 509 | 92 | 800 | | | Missing Translators Comment |
| #1385 | PiWeb Export Customers Users & Guest customer to CSV for WooCommerce | 30 | 173 | 75 | 1k+ | | | Text Domain Mismatch |
| #1386 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #1387 | Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant | 30 | 264 | 221 | 4k+ | | | Non Singular String Literal Text |
| #1388 | Kargo Takip, Kargo SMS, İlçe Mahalle Sözleşme by Hezarfen | 30 | 70 | 297 | 2k+ | | | Non-prefixed global variable |
| #1389 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #1390 | Invisible reCaptcha for WordPress | 30 | 90 | 185 | 80k+ | | | Input is not sanitized |
| #1391 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #1392 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #1393 | Mailrelay | 30 | 318 | 170 | 1k+ | | | Text Domain Mismatch |
| #1394 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #1395 | Nova Blocks by Pixelgrade | 30 | 206 | 112 | 800 | | | Output is not escaped |
| #1396 | Novelist | 30 | 475 | 158 | 1k+ | | | Output is not escaped |
| #1397 | Operation Demo Importer – Demo Importer For WPoperation Themes | 30 | 245 | 104 | 1k+ | | | Text Domain Mismatch |
| #1398 | گرویتی فرم فارسی | 30 | 205 | 157 | 20k+ | | | Text Domain Mismatch |
| #1399 | PitchPrint | 30 | 76 | 163 | 400 | | | Input is not sanitized |
| #1400 | Popularis Extra | 30 | 237 | 141 | 7k+ | | | Output is not escaped |