| #1401 | LuckyWP Scripts Control | 38 | 186 | 23 | 3k+ | | | Output is not escaped |
| #1402 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | | Non-prefixed hook name |
| #1403 | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 38 | 2 | 457 | 3k+ | | | Input is not sanitized |
| #1404 | Auto SEO META keywords (META tags keywords) optimization + WooCommerce | 38 | 63 | 34 | 700 | | | Output is not escaped |
| #1405 | Migrate Store: Export and Import WooCommerce Settings | 38 | 37 | 33 | 1k+ | | | Non-prefixed global variable |
| #1406 | Group chat for WordPress – Minnit Chat | 38 | 39 | 65 | 500 | | | Non-prefixed global variable |
| #1407 | Monetag Official Plugin | 38 | 133 | 32 | 5k+ | | | Text Domain Mismatch |
| #1408 | Customize My Account for WooCommerce – Custom Tabs, Login, Registration, 2FA & Design | 38 | 78 | 172 | 800 | | | Non-prefixed global variable |
| #1409 | PayTR Taksit Tablosu – WooCommerce | 38 | 67 | 39 | 3k+ | | | Non Singular String Literal Domain |
| #1410 | PDF Catalog for WooCommerce | 38 | 30 | 46 | 1k+ | | | Nonce verification recommended |
| #1411 | Post Slider For WPBakery Page Builder | 38 | 201 | 14 | 1k+ | | | Output is not escaped |
| #1412 | qTranslate X Cleanup and WPML Import | 38 | 167 | 102 | 800 | | | Text Domain Mismatch |
| #1413 | Remove WordPress Overhead | 38 | 64 | 47 | 1k+ | | | Text Domain Mismatch |
| #1414 | Responsive Mailform ( Plugin Version ) – easy, responsive, contact, mailform | 38 | 120 | 107 | 500 | | | Output is not escaped |
| #1415 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | | | Text Domain Mismatch |
| #1416 | SCSS WP Editor | 38 | 111 | 40 | 900 | | | Exception output is not escaped |
| #1417 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #1418 | Logo Slider , Logo Carousel , Logo showcase , Client Logo | 38 | 72 | 22 | 1k+ | | | Output is not escaped |
| #1419 | Broadcast | 38 | 21 | 107 | 1k+ | | | Direct Query |
| #1420 | Plugin Name: Traffic Stats Widget Plugin | 38 | 69 | 107 | 600 | | | Output is not escaped |
| #1421 | Twitter for WordPress | 38 | 47 | 24 | 1k+ | | | Output is not escaped |
| #1422 | Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend | 38 | 84 | 49 | 1k+ | | | Output is not escaped |
| #1423 | W2S – Migrate WooCommerce to Shopify | 38 | 33 | 132 | 1k+ | | | Non-prefixed global variable |
| #1424 | Chatbox Manager | 38 | 855 | 78 | 400 | | | Output is not escaped |
| #1425 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |
| #1426 | Shipping Packages for WooCommerce – Dropship from multiple locations like AliExpress, eBay, Amazon, Etsy | 38 | 94 | 26 | 900 | | | Non Singular String Literal Domain |
| #1427 | SSLCommerz Payment Gateway | 38 | 21 | 132 | 2k+ | | | Non-prefixed global variable |
| #1428 | White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard | 38 | 205 | 31 | 10k+ | | | Output is not escaped |
| #1429 | WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | 38 | 33 | 181 | 2k+ | | | Non-prefixed global variable |
| #1430 | Products Coming Soon for WooCommerce | 38 | 151 | 62 | 700 | | | Output is not escaped |
| #1431 | Photo Reviews for WooCommerce | 38 | 26 | 222 | 10k+ | | | Request data is not unslashed |
| #1432 | Show Stock Status for WooCommerce | 38 | 30 | 19 | 1k+ | | | Output is not escaped |
| #1433 | Vietnam Checkout for WooCommerce | 38 | 93 | 137 | 10k+ | | | Nonce verification recommended |
| #1434 | Wholesale for WooCommerce | 38 | 541 | 22 | 1k+ | | | Output is not escaped |
| #1435 | Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance | 38 | 23 | 104 | 1k+ | | | Direct Query |
| #1436 | WooSwipe WooCommerce Gallery | 38 | 88 | 82 | 3k+ | | | Non-prefixed global variable |
| #1437 | WP Hebrew Date | 38 | 102 | 13 | 600 | | | Output is not escaped |
| #1438 | WP 404 Auto Redirect to Similar Post | 38 | 166 | 48 | 30k+ | | | Text Domain Mismatch |
| #1439 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #1440 | WP-Ban | 38 | 99 | 108 | 8k+ | | | Unsafe printing function |
| #1441 | WP-CommentNavi | 38 | 68 | 46 | 700 | | | Output is not escaped |
| #1442 | WP Content Copy Protection with Color Design | 38 | 96 | 61 | 5k+ | | | Non Singular String Literal Domain |
| #1443 | WP Discord Post Plus – Supports Unlimited Channels | 38 | 116 | 34 | 700 | | | Text Domain Mismatch |
| #1444 | WP-DraftsForFriends | 38 | 141 | 71 | 1k+ | | | Output is not escaped |
| #1445 | WP Mail SMTP SendGrid Edition | 38 | 102 | 19 | 500 | | | Text Domain Mismatch |
| #1446 | WP Mailgun SMTP | 38 | 99 | 51 | 900 | | | Text Domain Mismatch |
| #1447 | WP Maintenance Mode & Site Under Construction | 38 | 72 | 57 | 3k+ | | | Output is not escaped |
| #1448 | WP Media Categories | 38 | 40 | 103 | 800 | | | Nonce verification recommended |
| #1449 | mb.miniAudioPlayer – an HTML5 audio player for your mp3 files | 38 | 204 | 6 | 4k+ | | | Unsafe printing function |
| #1450 | Native PHP Sessions | 38 | 30 | 92 | 10k+ | | | Direct Query |