| #401 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #402 | WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses | 23 | 590 | 876 | 500 | | | Non-prefixed function |
| #403 | WP-CRM System – Manage Clients and Projects | 23 | 297 | 1,094 | 800 | | | Non-prefixed global variable |
| #404 | WP Crowdfunding | 23 | 199 | 1,629 | 2k+ | | | Non-prefixed global variable |
| #405 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #406 | WP Hotelier | 23 | 693 | 1,635 | 2k+ | | | Non-prefixed global variable |
| #407 | Lead Form Data Collection to CRM | 23 | 211 | 1,698 | 400 | | | Non-prefixed global variable |
| #408 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | | | Output is not escaped |
| #409 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #410 | WP Migrate Lite – Migration Made Easy | 23 | 369 | 255 | 200k+ | | | Exception output is not escaped |
| #411 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 40k+ | | | Missing Translators Comment |
| #412 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #413 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | | | Output is not escaped |
| #414 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #415 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #416 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,376 | 890 | 20k+ | | | Output is not escaped |
| #417 | WPMobile.App | 23 | 2,983 | 1,533 | 3k+ | | | Output is not escaped |
| #418 | WPCal.io – Easy Meeting Scheduler | 23 | 694 | 595 | 900 | | | Direct Query |
| #419 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #420 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | | | Direct Query |
| #421 | Xpro Addons For Beaver Builder – Lite | 23 | 3,454 | 640 | 700 | | | Text Domain Mismatch |
| #422 | XT Ajax Add To Cart for WooCommerce | 23 | 1,003 | 1,690 | 1k+ | | | Non-prefixed global variable |
| #423 | XT Quick View for WooCommerce | 23 | 1,079 | 1,829 | 400 | | | Non-prefixed global variable |
| #424 | XT Variation Swatches for WooCommerce | 23 | 1,051 | 1,834 | 500 | | | Non-prefixed global variable |
| #425 | YITH Essential Kit for WooCommerce #1 | 23 | 397 | 1,481 | 5k+ | | | Non-prefixed global variable |
| #426 | YITH PayPal Express Checkout for WooCommerce | 23 | 387 | 1,443 | 1k+ | | | Non-prefixed global variable |
| #427 | YITH WooCommerce Affiliates | 23 | 549 | 1,527 | 6k+ | | | Non-prefixed global variable |
| #428 | YITH WooCommerce Ajax Product Filter | 23 | 463 | 1,527 | 80k+ | | | Non-prefixed global variable |
| #429 | Zephyr Project Manager | 23 | 667 | 2,454 | 1k+ | | | Non-prefixed global variable |
| #430 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | | | Direct Query |
| #431 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #432 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |
| #433 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #434 | Ad Inserter – Ad Manager & AdSense Ads | 24 | 4,260 | 812 | 300k+ | | | Output is not escaped |
| #435 | Ivory Search – WordPress Search Plugin | 24 | 1,173 | 1,688 | 100k+ | | | Non-prefixed global variable |
| #436 | Advanced Contact form 7 DB | 24 | 764 | 1,960 | 70k+ | | | Non-prefixed global variable |
| #437 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | | | Unsafe printing function |
| #438 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #439 | Multi Page Auto Advance for Gravity Forms | 24 | 653 | 1,335 | 2k+ | | | Non-prefixed global variable |
| #440 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #441 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #442 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | | Non-prefixed global variable |
| #443 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #444 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |
| #445 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #446 | BlockMeister – Block Pattern Builder | 24 | 580 | 1,405 | 1k+ | | | Non-prefixed global variable |
| #447 | Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News | 24 | 699 | 1,693 | 30k+ | | | Non-prefixed global variable |
| #448 | Brands for WooCommerce | 24 | 787 | 674 | 6k+ | | | Text Domain Mismatch |
| #449 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #450 | BuddyPress Group Email Subscription | 24 | 51 | 336 | 1k+ | | | Non-prefixed function |