| #1151 | Counter live visitors for WooCommerce | 35 | 189 | 39 | 7k+ | | | Short PHP open tag found |
| #1152 | Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | 35 | 30 | 168 | 1k+ | | | Non-prefixed global variable |
| #1153 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |
| #1154 | Cue by AudioTheme.com | 35 | 28 | 150 | 6k+ | | | Non-prefixed hook name |
| #1155 | Dadevarzan WordPress Common | 35 | 56 | 71 | 700 | | | Text Domain Mismatch |
| #1156 | Disable and Remove Google Fonts | GDPR & DSGVO friendly | 35 | 21 | 11 | 100k+ | | | Missing Translators Comment |
| #1157 | Dokan Invoice | 35 | 9 | 3 | 500 | | | Missing Translators Comment |
| #1158 | Duplica – Duplicate Posts, Pages, Custom Posts or Users | 35 | 14 | 31 | 2k+ | | | Non-prefixed global variable |
| #1159 | Product Bundle Builder for WooCommerce | 35 | 152 | 138 | 6k+ | | | Text Domain Mismatch |
| #1160 | Gutenberg Blocks Library & Toolkit – Editor Plus | 35 | 27 | 11 | 6k+ | | | Text Domain Mismatch |
| #1161 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | | | Non-prefixed global variable |
| #1162 | Elements Hive for Breakdance | 35 | 76 | 25 | 1k+ | | | Output is not escaped |
| #1163 | Elfsight Blocks for Elementor — 80+ Widgets | 35 | 444 | 3 | 2k+ | | | Text Domain Mismatch |
| #1164 | Email Subscription Popup — Newsletter & GDPR Consent | 35 | 683 | 193 | 1k+ | | | Output is not escaped |
| #1165 | Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more | 35 | 102 | 92 | 400 | | | Non-prefixed global variable |
| #1166 | WP Rocket | Simple LoadCSS Preloader | 35 | 7 | 16 | 4k+ | | | Non-prefixed global variable |
| #1167 | Ever Compare – Products Compare Plugin for WooCommerce | 35 | 2 | 23 | 600 | | | Non-prefixed global variable |
| #1168 | AI Popup Builder & Popup Maker by OptiMonk | 35 | 81 | 65 | 4k+ | | | Text Domain Mismatch |
| #1169 | Extendify | 35 | 80 | 64 | 500k+ | | | Text Domain Mismatch |
| #1170 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | | | Output is not escaped |
| #1171 | Instant Indexing for Google | 35 | 13 | 62 | 200k+ | | | Non-prefixed global variable |
| #1172 | Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager | 35 | 64 | 64 | 80k+ | | | Non-prefixed global variable |
| #1173 | Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce | 35 | 8 | 20 | 2k+ | | | Non-prefixed global variable |
| #1174 | Flexible PDF Invoices for WooCommerce & WordPress | 35 | 15 | 55 | 6k+ | | | Non-prefixed global variable |
| #1175 | Flying Analytics: Self-Host Google Analytics v4 with Speed Optimization | 35 | 17 | 13 | 4k+ | | | Missing direct file access protection |
| #1176 | Flying Fonts: Remove Google Fonts & Use System Fonts for Faster Performance | 35 | 3 | 1 | 700 | | | Hidden files included |
| #1177 | Form Input Masks For Elementor Forms | 35 | 3 | 1 | 10k+ | | | Hidden files included |
| #1178 | Full Width Banner Slider Wp | 35 | 239 | 140 | 2k+ | | | Output is not escaped |
| #1179 | Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery | 35 | 50 | 199 | 10k+ | | | Non-prefixed global variable |
| #1180 | GeoTargeting Lite – WordPress Geolocation | 35 | 66 | 79 | 1k+ | | | Output is not escaped |
| #1181 | Give – Divi Donation Modules | 35 | 286 | 12 | 600 | | | Text Domain Mismatch |
| #1182 | Gumlet – Image optimization with Resize, Compression, Lazy load, Caching & CDN delivery | 35 | 53 | 45 | 500 | | | parse url parse url |
| #1183 | Heartbeat Control | 35 | 27 | 18 | 80k+ | | | Missing Arg Domain |
| #1184 | Social Comments by Heateor | 35 | 285 | 35 | 700 | | | Unsafe printing function |
| #1185 | Hippoo Mobile App for WooCommerce | 35 | 5 | 92 | 1k+ | | | Direct Query |
| #1186 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | | Direct Query |
| #1187 | Hyve Lite – AI Chatbot, ChatGPT-Powered Conversational Support | 35 | 1 | 40 | 7k+ | | | Direct Query |
| #1188 | Iframely – WP media embeds, cards and blocks | 35 | 136 | 43 | 2k+ | | | Unsafe printing function |
| #1189 | PDF Compressor & Watermark – iLovePDF | 35 | 216 | 5 | 600 | | | Text Domain Mismatch |
| #1190 | Image Slider | 35 | 192 | 95 | 4k+ | | | Output is not escaped |
| #1191 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #1192 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #1193 | Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor | 35 | 6 | 200 | 10k+ | | | Non-prefixed global variable |
| #1194 | IntenseDebate Comments | 35 | 203 | 114 | 500 | | | Output is not escaped |
| #1195 | Japanese font for WordPress(Previously: Japanese Font for TinyMCE) | 35 | 11 | 37 | 10k+ | | | Non-prefixed global variable |
| #1196 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #1197 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | | | Non Singular String Literal Domain |
| #1198 | JSON Feed (jsonfeed.org) | 35 | 9 | 29 | 1k+ | | | Non-prefixed global variable |
| #1199 | JWT Auth – WordPress JSON Web Token Authentication | 35 | 14 | 18 | 6k+ | | | Output is not escaped |
| #1200 | Kargo Takip | 35 | 84 | 142 | 3k+ | | | Missing nonce verification |