| #1501 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 4 | 252 | 10k+ | | | Dynamic hook name |
| #1502 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 115 | 46 | 3k+ | | | Output is not escaped |
| #1503 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | | Non-prefixed hook name |
| #1504 | Auto SEO META keywords (META tags keywords) optimization + WooCommerce | 38 | 63 | 34 | 700 | | | Output is not escaped |
| #1505 | Group chat for WordPress – Minnit Chat | 38 | 39 | 65 | 500 | | | Non-prefixed global variable |
| #1506 | Monetag Official Plugin | 38 | 133 | 32 | 5k+ | | | Text Domain Mismatch |
| #1507 | Most And Least Read Posts Widget | 38 | 130 | 24 | 1k+ | | | Output is not escaped |
| #1508 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #1509 | Multiple Domain Mapping on Single Site | 38 | 135 | 51 | 6k+ | | | Text Domain Mismatch |
| #1510 | Customize My Account for WooCommerce – Custom Tabs, Login, Registration, 2FA & Design | 38 | 78 | 172 | 800 | | | Non-prefixed global variable |
| #1511 | Contact Form Widget | 38 | 54 | 107 | 1k+ | | | Request data is not unslashed |
| #1512 | OneSignal – Web Push Notifications | 38 | 53 | 64 | 70k+ | | | Output is not escaped |
| #1513 | YAPE A1 Tiendas | 38 | 24 | 43 | 900 | | | Missing nonce verification |
| #1514 | PayTR Taksit Tablosu – WooCommerce | 38 | 67 | 39 | 3k+ | | | Non Singular String Literal Domain |
| #1515 | PDF Catalog for WooCommerce | 38 | 30 | 46 | 1k+ | | | Nonce verification recommended |
| #1516 | Podlove Subscribe button | 38 | 148 | 45 | 2k+ | | | Output is not escaped |
| #1517 | Post Slider For WPBakery Page Builder | 38 | 201 | 14 | 1k+ | | | Output is not escaped |
| #1518 | Post views Stats | 38 | 37 | 51 | 1k+ | | | Non-prefixed global variable |
| #1519 | qTranslate X Cleanup and WPML Import | 38 | 167 | 102 | 800 | | | Text Domain Mismatch |
| #1520 | Logo Carousel – Display Brand or Client Logos in Slider | 38 | 524 | 42 | 800 | | | Output is not escaped |
| #1521 | Responsive Mailform ( Plugin Version ) – easy, responsive, contact, mailform | 38 | 120 | 107 | 500 | | | Output is not escaped |
| #1522 | LinkBoss – Semantic AI Internal Linking | 38 | 28 | 57 | 2k+ | | | Missing Arg Domain |
| #1523 | Simple Expires | 38 | 32 | 39 | 500 | | | Non Singular String Literal Domain |
| #1524 | Simple JWT Login – Allows you to use JWT on REST endpoints. | 38 | 712 | 95 | 4k+ | | | Output is not escaped |
| #1525 | Slickstream: Engagement and Conversions | 38 | 100 | 19 | 2k+ | | | Output is not escaped |
| #1526 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #1527 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | | Output is not escaped |
| #1528 | Tag Manager – Header, Body And Footer | 38 | 97 | 319 | 20k+ | | | Non-prefixed global variable |
| #1529 | Logo Slider , Logo Carousel , Logo showcase , Client Logo | 38 | 72 | 22 | 1k+ | | | Output is not escaped |
| #1530 | Product Compare for WooCommerce | 38 | 55 | 191 | 3k+ | | | Non-prefixed global variable |
| #1531 | Variation Swatches for WooCommerce | 38 | 45 | 65 | 2k+ | | | Output is not escaped |
| #1532 | Plugin Name: Traffic Stats Widget Plugin | 38 | 69 | 107 | 600 | | | Output is not escaped |
| #1533 | Trash Duplicate and 301 Redirect | 38 | 13 | 103 | 1k+ | | | Nonce verification recommended |
| #1534 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #1535 | VdoCipher: Secure Video Player and Hosting | 38 | 37 | 54 | 2k+ | | | Non-prefixed function |
| #1536 | FancyTube – Video Gallery, Video Slider, and Playlist Slider for YouTube | 38 | 358 | 34 | 1k+ | | | Text Domain Mismatch |
| #1537 | VidShop – Shoppable Videos for WooCommerce | 38 | 54 | 153 | 1k+ | | | Database parameter is not escaped |
| #1538 | Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend | 38 | 84 | 49 | 1k+ | | | Output is not escaped |
| #1539 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | | | Output is not escaped |
| #1540 | Shipping Packages for WooCommerce – Dropship from multiple locations like AliExpress, eBay, Amazon, Etsy | 38 | 94 | 26 | 900 | | | Non Singular String Literal Domain |
| #1541 | Affiliate Sales in Google Analytics and other tools | 38 | 23 | 84 | 1k+ | | | Request data is not unslashed |
| #1542 | WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | 38 | 33 | 181 | 2k+ | | | Non-prefixed global variable |
| #1543 | Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance | 38 | 23 | 104 | 1k+ | | | Direct Query |
| #1544 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #1545 | WP Discord Post Plus – Supports Unlimited Channels | 38 | 116 | 34 | 700 | | | Text Domain Mismatch |
| #1546 | WP Mail SMTP SendGrid Edition | 38 | 102 | 19 | 500 | | | Text Domain Mismatch |
| #1547 | mb.miniAudioPlayer – an HTML5 audio player for your mp3 files | 38 | 204 | 6 | 4k+ | | | Unsafe printing function |
| #1548 | WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups | 38 | 299 | 58 | 3k+ | | | Non Singular String Literal Domain |
| #1549 | Responsive Vertical Icon Menu | 38 | 188 | 85 | 700 | | | Output is not escaped |
| #1550 | ZeroBounce Email Verification & Validation | 38 | 299 | 162 | 900 | | | Text Domain Mismatch |