| #401 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | | | Text Domain Mismatch |
| #402 | AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia | 23 | 1,285 | 1,107 | 500 | | | Text Domain Mismatch |
| #403 | Predictive Search for WooCommerce | 23 | 514 | 633 | 700 | | | Output is not escaped |
| #404 | WP All Import – Product Import for WooCommerce | 23 | 1,475 | 209 | 20k+ | | | Non Singular String Literal Domain |
| #405 | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 23 | 7,880 | 2,199 | 90k+ | | | Text Domain Mismatch |
| #406 | ManageWP Worker | 23 | 506 | 565 | 1m+ | | | Non-prefixed class |
| #407 | WP BackItUp Community Edition | 23 | 257 | 989 | 6k+ | | | Non-prefixed global variable |
| #408 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #409 | WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses | 23 | 590 | 876 | 500 | | | Non-prefixed function |
| #410 | WP-CRM System – Manage Clients and Projects | 23 | 297 | 1,094 | 800 | | | Non-prefixed global variable |
| #411 | WP Crowdfunding | 23 | 199 | 1,629 | 2k+ | | | Non-prefixed global variable |
| #412 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #413 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | | | Non-prefixed global variable |
| #414 | Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | 23 | 1,113 | 1,862 | 9k+ | | | Output is not escaped |
| #415 | WP Hotelier | 23 | 693 | 1,635 | 2k+ | | | Non-prefixed global variable |
| #416 | Lead Form Data Collection to CRM | 23 | 211 | 1,698 | 400 | | | Non-prefixed global variable |
| #417 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | | | Output is not escaped |
| #418 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 941 | 2,179 | 20k+ | | | SQL query is not prepared |
| #419 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #420 | WP Migrate Lite – Migration Made Easy | 23 | 369 | 255 | 200k+ | | | Exception output is not escaped |
| #421 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 30k+ | | | Missing Translators Comment |
| #422 | WP STAGING – WordPress Backup, Restore, Migration & Clone | 23 | 1,504 | 1,607 | 100k+ | | | Non-prefixed global variable |
| #423 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #424 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | | | Output is not escaped |
| #425 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #426 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #427 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #428 | WPMobile.App | 23 | 2,983 | 1,533 | 3k+ | | | Output is not escaped |
| #429 | WPCal.io – Easy Meeting Scheduler | 23 | 694 | 595 | 900 | | | Direct Query |
| #430 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #431 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | | | Direct Query |
| #432 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,236 | 4,024 | 600 | | | Non-prefixed global variable |
| #433 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #434 | Zephyr Project Manager | 23 | 667 | 2,454 | 1k+ | | | Non-prefixed global variable |
| #435 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | | | Direct Query |
| #436 | 404 Solution | 24 | 483 | 1,355 | 10k+ | | | Non-prefixed class |
| #437 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #438 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |
| #439 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #440 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | | | Output is not escaped |
| #441 | Ivory Search – WordPress Search Plugin | 24 | 1,173 | 1,688 | 100k+ | | | Non-prefixed global variable |
| #442 | Advanced Contact form 7 DB | 24 | 764 | 1,960 | 70k+ | | | Non-prefixed global variable |
| #443 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #444 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | | | Unsafe printing function |
| #445 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #446 | Atarim – Visual Feedback, Review & AI Collaboration | 24 | 765 | 442 | 1k+ | | | wp function not compatible with requires wp |
| #447 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | | Non-prefixed global variable |
| #448 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #449 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | | Non-prefixed global variable |
| #450 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | | Non-prefixed global variable |