| #1401 | Delivery Date Time & Pickup for WooCommerce | 37 | 148 | 216 | 400 | | | Output is not escaped |
| #1402 | Call Now Button – The #1 Click to Call Button for WordPress | 37 | 1,273 | 5 | 200k+ | | | Exception output is not escaped |
| #1403 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | | | Non-prefixed class |
| #1404 | ClickRank – Ai SEO Automation | 37 | 10 | 226 | 1k+ | | | Direct Query |
| #1405 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | | Non-prefixed global variable |
| #1406 | Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter | 37 | 151 | 61 | 600 | | | Output is not escaped |
| #1407 | Custom Post Template | 37 | 48 | 30 | 10k+ | | | Output is not escaped |
| #1408 | DSGVO/GDPR Cookies, DSE, Impressum & Google Fonts Proxy | 37 | 391 | 25 | 700 | | | Text Domain Mismatch |
| #1409 | Pricing Table WordPress Plugin – Easy Pricing Tables | 37 | 332 | 161 | 10k+ | | | Output is not escaped |
| #1410 | Easy Testimonial Slider and Form | 37 | 14 | 144 | 700 | | | Request data is not unslashed |
| #1411 | Encyclopedia / Glossary / Wiki | 37 | 263 | 48 | 1k+ | | | Output is not escaped |
| #1412 | Facturare WooCommerce | 37 | 158 | 106 | 3k+ | | | Text Domain Mismatch |
| #1413 | Furgonetka.pl: Przesyłki & Narzędzia e-commerce | 37 | 66 | 48 | 7k+ | | | Exception output is not escaped |
| #1414 | GoPay for WooCommerce | 37 | 66 | 103 | 1k+ | | | Non-prefixed global variable |
| #1415 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #1416 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #1417 | HandL UTM Grabber / Tracker | 37 | 31 | 146 | 10k+ | | | Missing nonce verification |
| #1418 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #1419 | HT Builder – WordPress Theme Builder for Elementor | 37 | 142 | 41 | 1k+ | | | Output is not escaped |
| #1420 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 302 | 58 | 3k+ | | | Text Domain Mismatch |
| #1421 | Image Optimizer by 10web – Image Optimizer and Compression plugin | 37 | 244 | 45 | 3k+ | | | Text Domain Mismatch |
| #1422 | LiveAgent – Omnichannel Help Desk & Live Chat Software | 37 | 125 | 142 | 400 | | | Non Singular String Literal Domain |
| #1423 | Media Sweep – WordPress Media Cleaner | 37 | 56 | 137 | 1k+ | | | Interpolated SQL is not prepared |
| #1424 | Metorik – Reports & Email Automation for WooCommerce | 37 | 75 | 70 | 10k+ | | | Output is not escaped |
| #1425 | CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor | 37 | 47 | 90 | 40k+ | | | Dynamic hook name |
| #1426 | Monobank WP Payment | 37 | 78 | 41 | 1k+ | | | Text Domain Mismatch |
| #1427 | My Post Order | 37 | 100 | 114 | 400 | | | Output is not escaped |
| #1428 | Optin Forms – Simple List Building Plugin for WordPress | 37 | 647 | 22 | 3k+ | | | Output is not escaped |
| #1429 | WP All Export – Order Export for WooCommerce | 37 | 109 | 111 | 4k+ | | | Text Domain Mismatch |
| #1430 | OSM – OpenStreetMap | 37 | 130 | 64 | 10k+ | | | Output is not escaped |
| #1431 | PayU CommercePro Plugin | 37 | | 218 | 7k+ | | | error log error log |
| #1432 | GoHero Store Customizer for WooCommerce | 37 | 75 | 53 | 600 | | | Unsafe printing function |
| #1433 | Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales | 37 | 59 | 64 | 2k+ | | | SQL query is not prepared |
| #1434 | Post Terms Order – per Post based | 37 | 70 | 36 | 2k+ | | | Output is not escaped |
| #1435 | PublishPress Statuses – Custom Post Status and Workflow | 37 | 231 | 78 | 1k+ | | | Missing Arg Domain |
| #1436 | SB RSS feed plus | 37 | 172 | 24 | 1k+ | | | Output is not escaped |
| #1437 | Scroll Back To Top | 37 | 149 | 12 | 10k+ | | | Output is not escaped |
| #1438 | Sezzle Woocommerce Payment | 37 | 108 | 105 | 1k+ | | | Text Domain Mismatch |
| #1439 | Shortcoder — Create Shortcodes for Anything | 37 | 25 | 70 | 100k+ | | | Non-prefixed global variable |
| #1440 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | | | Missing Arg Domain |
| #1441 | Lightbox slider – Responsive Lightbox Gallery | 37 | 36 | 173 | 3k+ | | | Non-prefixed global variable |
| #1442 | Site Offline Or Coming Soon Or Maintenance Mode | 37 | 127 | 138 | 30k+ | | | Unsafe printing function |
| #1443 | Skimlinks Affiliate Marketing Tool | 37 | 84 | 19 | 800 | | | wp function not compatible with requires wp |
| #1444 | Smart Send Logistics | 37 | 92 | 81 | 400 | | | Output is not escaped |
| #1445 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | | | Output is not escaped |
| #1446 | TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot | 37 | 48 | 40 | 6k+ | | | Unsafe printing function |
| #1447 | Time Clock – A WordPress Employee & Volunteer Time Clock Plugin | 37 | 166 | 107 | 500 | | | Output is not escaped |
| #1448 | Ultimate WordPress Auction Plugin | 37 | 623 | 142 | 1k+ | | | Text Domain Mismatch |
| #1449 | Landing Page Builder – Free Landing Page Templates | 37 | 329 | 111 | 600 | | | Output is not escaped |
| #1450 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 600 | | | Output is not escaped |