| #1101 | Ultra Companion – Companion plugin for WPoperation Themes | 34 | 73 | 116 | 1k+ | | | Missing direct file access protection |
| #1102 | Checkout Field Editor (Checkout Page Manager) for WooCommerce | 34 | 706 | 232 | 2k+ | | | Text Domain Mismatch |
| #1103 | Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin | 34 | 230 | 154 | 2k+ | | | Output is not escaped |
| #1104 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | | | Output is not escaped |
| #1105 | WP Forms Signature Contract Add-On | 34 | 128 | 35 | 900 | | | Text Domain Mismatch |
| #1106 | WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | 34 | 219 | 453 | 60k+ | | | wp function not compatible with requires wp |
| #1107 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #1108 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #1109 | Thumbnail carousel slider | 34 | 277 | 143 | 2k+ | | | Output is not escaped |
| #1110 | WP Subscription Forms – Subscription Form Plugin for WordPress | 34 | 131 | 220 | 400 | | | Non-prefixed global variable |
| #1111 | Vertical Image Slider | 34 | 264 | 138 | 1k+ | | | Output is not escaped |
| #1112 | Wp Favs – Plugin Manager | 34 | 238 | 153 | 3k+ | | | Text Domain Mismatch |
| #1113 | WPLMS MyCred AddOn | 34 | 383 | 73 | 800 | | | Text Domain Mismatch |
| #1114 | YourChannel: Everything you want in a YouTube plugin. | 34 | 262 | 115 | 10k+ | | | Text Domain Mismatch |
| #1115 | zipMoney(Zip Co) Payments Plugin for WooCommerce | 34 | 147 | 70 | 2k+ | | | Text Domain Mismatch |
| #1116 | Absolute Addons For Elementor | 35 | 86 | 286 | 400 | | | Non-prefixed global variable |
| #1117 | ACF Color Swatches | 35 | 50 | 21 | 1k+ | | | Text Domain Mismatch |
| #1118 | Advanced Custom Fields: Image Aspect Ratio Crop Field | 35 | 70 | 37 | 20k+ | | | Text Domain Mismatch |
| #1119 | ACF: Image Hotspots Field | 35 | 26 | 5 | 2k+ | | | Text Domain Mismatch |
| #1120 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #1121 | CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress | 35 | 20 | 10 | 100k+ | | | Missing Arg Domain |
| #1122 | Advanced Reporting for Woocommerce | 35 | 296 | 101 | 400 | | | Output is not escaped |
| #1123 | AfterSalesPro Plugin | 35 | 24 | 111 | 400 | | | Nonce verification recommended |
| #1124 | AnsPress – Question and answer | 35 | 22 | 778 | 3k+ | | | Non-prefixed function |
| #1125 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #1126 | Archive Content with Archived Post Status | 35 | 3 | 2 | 5k+ | | | Discouraged text-domain loading |
| #1127 | Avif Express | 35 | 26 | 167 | 400 | | | Input is not validated |
| #1128 | Awin – Advertiser Tracking for WooCommerce | 35 | 46 | 39 | 1k+ | | | Non Singular String Literal Domain |
| #1129 | Axeptio – Cookie Banner – GDPR Consent & Compliance with a friendly touch | 35 | 5 | 13 | 8k+ | | | Database parameter is not escaped |
| #1130 | BackWPup – WordPress Backup & Restore Plugin | 35 | 11 | 779 | 500k+ | | | Non-prefixed global variable |
| #1131 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #1132 | CTC Masonry Gallery 🎨 | 35 | 6 | 3 | 1k+ | | | Hidden files included |
| #1133 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 20k+ | | | Text Domain Mismatch |
| #1134 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | | | block api version too low |
| #1135 | Blogsqode – Blog Layouts and News Post Design | 35 | 430 | 63 | 400 | | | Text Domain Mismatch |
| #1136 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #1137 | BORICA Payments by BORICA AD | 35 | 537 | 196 | 500 | | | Text Domain Mismatch |
| #1138 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | | Non-prefixed function |
| #1139 | Brozzme DB Prefix & Tools Addons | 35 | 24 | 42 | 10k+ | | | Request data is not unslashed |
| #1140 | BTCPay Server – Accept Bitcoin payments in WooCommerce | 35 | 48 | 86 | 1k+ | | | Missing nonce verification |
| #1141 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | | | Request data is not unslashed |
| #1142 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 6k+ | | | Text Domain Mismatch |
| #1143 | CatFolders – WordPress Media Library Folders & Categories | 35 | 35 | 76 | 6k+ | | | Direct Query |
| #1144 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #1145 | CF7 Views – Complete Entry Management for Contact Form 7 | 35 | 172 | 181 | 1k+ | | | Output is not escaped |
| #1146 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 35 | 31 | 188 | 1k+ | | | Non-prefixed global variable |
| #1147 | CM E-Mail Blacklist – Simple email filtering for safer registration | 35 | 269 | 205 | 800 | | | Output is not escaped |
| #1148 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | | | badly named files |
| #1149 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | | | Missing nonce verification |
| #1150 | Constant Contact Forms | 35 | 41 | 89 | 20k+ | | | Missing nonce verification |