| #1201 | KBoard 위젯 – 워드프레스 게시판 | 35 | 53 | 32 | 3k+ | | | Output is not escaped |
| #1202 | Kiyoh customer review | 35 | 173 | 68 | 500 | | | Output is not escaped |
| #1203 | Flexible Invoices for WooCommerce – KSeF Add-on | 35 | 39 | 15 | 600 | | | Non-prefixed global variable |
| #1204 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #1205 | Less PHP Compiler | 35 | 163 | 47 | 3k+ | | | Exception output is not escaped |
| #1206 | Web3Press – Migrating to 3ook.com Decentralized Bookstore | 35 | 7 | 49 | 400 | | | Non-prefixed constant |
| #1207 | Login Page Styler – Custom WordPress Login Page Customizer & Security | 35 | 125 | 168 | 2k+ | | | Missing Arg Domain |
| #1208 | Log in with Google | 35 | 5 | 17 | 6k+ | | | Non-prefixed global variable |
| #1209 | Magic Login – Passwordless Authentication for WordPress – Login Without Password | 35 | 23 | 53 | 3k+ | | | Missing nonce verification |
| #1210 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |
| #1211 | MathML Block | 35 | 10 | 2 | 1k+ | | | Hidden files included |
| #1212 | MeetingHub – Webinar & Meeting Plugin for Zoom, Google Meet, Webex, Microsoft Teams, & Jitsi Meet | 35 | 37 | 313 | 400 | | | Non-prefixed global variable |
| #1213 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | | | Unsafe printing function |
| #1214 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | | | Non-prefixed global variable |
| #1215 | SAML IDP (Identity Provider) – Login with Website Users | 35 | 13 | 326 | 600 | | | Non-prefixed global variable |
| #1216 | Modal Guten Block | 35 | 6 | 3 | 2k+ | | | Hidden files included |
| #1217 | MotoPress Hotel Booking Styles & Templates | 35 | 37 | 19 | 10k+ | | | block api version too low |
| #1218 | Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts | 35 | 41 | 8 | 200k+ | | | Missing direct file access protection |
| #1219 | Email Marketing for WooCommerce by Omnisend | 35 | 12 | 21 | 40k+ | | | Non-prefixed function |
| #1220 | Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce | 35 | 117 | 144 | 2k+ | | | Output is not escaped |
| #1221 | Order Delivery Date for WooCommerce | 35 | 2,075 | 73 | 10k+ | | | wp function not compatible with requires wp |
| #1222 | OtFm Gutenberg Spoiler – (or FAQ) collapse block | 35 | 6 | 9 | 600 | | | trademarked term |
| #1223 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 35 | 131 | 41 | 300k+ | | | Missing direct file access protection |
| #1224 | Paytm Payment Gateway | 35 | 92 | 104 | 3k+ | | | Missing Arg Domain |
| #1225 | Pie Calendar – Events Calendar Made Simple | 35 | 83 | 53 | 1k+ | | | Text Domain Mismatch |
| #1226 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | | | Unsafe printing function |
| #1227 | Accept Cryptocurrencies with Plisio | 35 | 37 | 47 | 1k+ | | | Text Domain Mismatch |
| #1228 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #1229 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | | | Post Not In exclude |
| #1230 | Powerful Posts Per Page (PPPP) | 35 | 4 | 1 | 1k+ | | | Hidden files included |
| #1231 | PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | 35 | 1 | 5 | 200k+ | | | Database parameter is not escaped |
| #1232 | Quran multilanguage Text & Audio | 35 | 177 | 166 | 500 | | | Output is not escaped |
| #1233 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | | | Request data is not unslashed |
| #1234 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | | | Text Domain Mismatch |
| #1235 | Related Posts by Taxonomy | 35 | 131 | 97 | 10k+ | | | Output is not escaped |
| #1236 | Restrict Elementor Widgets, Columns and Sections | 35 | 18 | 53 | 500 | | | Non-prefixed function |
| #1237 | ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema | 35 | 14 | 20 | 7k+ | | | error log error log |
| #1238 | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | 35 | 24 | 5 | 8k+ | | | Missing direct file access protection |
| #1239 | Schedule Content Block | 35 | 2 | 3 | 400 | | | Discouraged text-domain loading |
| #1240 | Scripts To Footer | 35 | 13 | 2 | 7k+ | | | Text Domain Mismatch |
| #1241 | Security Optimizer – The All-In-One Protection Plugin | 35 | 40 | 86 | 1m+ | | | Input is not sanitized |
| #1242 | FlexTable – Data Table Sync with Google Sheets | 35 | 20 | 78 | 4k+ | | | Direct Query |
| #1243 | ShopMagic Abandoned Cart Recovery for WooCommerce | 35 | 16 | 23 | 2k+ | | | Non-prefixed global variable |
| #1244 | ShopMagic – Twilio SMS | 35 | 2 | 10 | 800 | | | Non-prefixed global variable |
| #1245 | Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | 35 | 83 | 76 | 2k+ | | | Output is not escaped |
| #1246 | Show/Hide Content at Set Time | 35 | 17 | 7 | 10k+ | | | date date |
| #1247 | Simple History – Track, Log, and Audit WordPress Changes | 35 | 32 | 122 | 300k+ | | | Non-prefixed global variable |
| #1248 | Simple Analytics | 35 | 25 | 20 | 1k+ | | | Output is not escaped |
| #1249 | Smart Auto Upload Images – Import External Images | 35 | 2 | 1 | 5k+ | | | Hidden files included |
| #1250 | SMNTCS Deactivate image compression | 35 | 6 | 1 | 1k+ | | | Hidden files included |