| #1251 | WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat | 35 | 28 | 31 | 90k+ | | | Input is not sanitized |
| #1252 | Social Sharing Plugin – Social Warfare | 35 | 17 | 143 | 20k+ | | | Non-prefixed class |
| #1253 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #1254 | Ray | 35 | 3 | 2 | 500 | | | Hidden files included |
| #1255 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 241 | 1,276 | 8k+ | | | Non-prefixed global variable |
| #1256 | Spreadshop Plugin | 35 | 145 | 44 | 4k+ | | | wp function not compatible with requires wp |
| #1257 | Stars Testimonials — Responsive Reviews & Star Ratings | 35 | 29 | 253 | 1k+ | | | Non-prefixed global variable |
| #1258 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons | 35 | 33 | 293 | 10k+ | | | Non-prefixed global variable |
| #1259 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 35 | | 524 | 600 | | | Non-prefixed global variable |
| #1260 | String locator | 35 | 52 | 319 | 100k+ | | | Non-prefixed global variable |
| #1261 | Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress | 35 | 106 | 145 | 500 | | | Non-prefixed global variable |
| #1262 | ووسلام – همگام سازی ووکامرس و باسلام | 35 | 82 | 426 | 4k+ | | | Non-prefixed global variable |
| #1263 | Table Of Content Block – Auto-Generate Clickable Table of Contents | 35 | 2 | 1 | 3k+ | | | Hidden files included |
| #1264 | TailPress – Tailwind for WordPress | 35 | 23 | 22 | 500 | | | Output is not escaped |
| #1265 | TBThemes Theme Import | 35 | 84 | 48 | 400 | | | Text Domain Mismatch |
| #1266 | Team Showcase – Responsive Team Members Grid, Slider & Carousel Plugin | 35 | 1,000 | 410 | 2k+ | | | Text Domain Mismatch |
| #1267 | Teamleader CRM Forms | 35 | 150 | 30 | 500 | | | Non Singular String Literal Domain |
| #1268 | Termageddon: Cookie Consent & Privacy Compliance | 35 | 27 | 13 | 7k+ | | | Exception output is not escaped |
| #1269 | Advance Product Search- Voice & Ajax Search for WooCommerce | 35 | 125 | 92 | 10k+ | | | Text Domain Mismatch |
| #1270 | Themify Icons | 35 | 33 | 12 | 3k+ | | | Output is not escaped |
| #1271 | TS Webfonts for さくらのレンタルサーバ | 35 | 183 | 100 | 30k+ | | | Missing Arg Domain |
| #1272 | Video Grid | 35 | 253 | 106 | 1k+ | | | Output is not escaped |
| #1273 | Video Gallery | 35 | 336 | 178 | 600 | | | Output is not escaped |
| #1274 | ShipStation Live Rates for WooCommerce | 35 | 402 | 73 | 900 | | | Non Singular String Literal Domain |
| #1275 | WC Ukraine Shipping – Integration of Nova Poshta and Ukrposhta for WooCommerce | 35 | 504 | 164 | 7k+ | | | Text Domain Mismatch |
| #1276 | Converter for Media – Optimize images | Convert WebP & AVIF | 35 | 131 | 53 | 500k+ | | | curl curl setopt |
| #1277 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | | | Missing Translators Comment |
| #1278 | WP Courseware for WooCommerce | 35 | 55 | 49 | 1k+ | | | Text Domain Mismatch |
| #1279 | Checkout Terms Conditions Popup for WooCommerce | 35 | 76 | 30 | 1k+ | | | Output is not escaped |
| #1280 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 50 | 236 | 50k+ | | | Non-prefixed hook name |
| #1281 | Product Tabs for WooCommerce | 35 | 196 | 100 | 10k+ | | | Text Domain Mismatch |
| #1282 | Quaderno: Global Tax & Invoicing Automation for WooCommerce | 35 | 4 | 70 | 500 | | | Missing nonce verification |
| #1283 | Brevo for WooCommerce | 35 | 116 | 67 | 30k+ | | | Output is not escaped |
| #1284 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #1285 | Kybernaut IČO DIČ | 35 | 79 | 68 | 2k+ | | | Missing nonce verification |
| #1286 | WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel | 35 | 41 | 10 | 100k+ | | | wp function not compatible with requires wp |
| #1287 | WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets | 35 | 35 | 22 | 100k+ | | | Missing direct file access protection |
| #1288 | WP API Menus | 35 | 12 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #1289 | Bitly's WordPress Plugin | 35 | 6 | 23 | 2k+ | | | Non-prefixed function |
| #1290 | WP Content Copy Protection | 35 | 76 | 11 | 10k+ | | | Text Domain Mismatch |
| #1291 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | | | Non-prefixed global variable |
| #1292 | WP GPX Maps | 35 | 27 | 100 | 4k+ | | | Non-prefixed global variable |
| #1293 | WP-LESS | 35 | 16 | 8 | 10k+ | | | Missing direct file access protection |
| #1294 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | | | Output is not escaped |
| #1295 | WP All Import – Property Import for WP Residence | 35 | 41 | 32 | 700 | | | Output is not escaped |
| #1296 | WP Site Verification tool | 35 | 34 | 37 | 1k+ | | | Non-prefixed global variable |
| #1297 | WP System Information | 35 | 237 | 30 | 700 | | | Text Domain Mismatch |
| #1298 | wpLingua – Automatic translation – Translate and make website multilingual | 35 | 79 | 167 | 2k+ | | | Nonce verification recommended |
| #1299 | WPPerformanceTester | 35 | 94 | 44 | 1k+ | | | Output is not escaped |
| #1300 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |