| #1201 | Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News | 41 | | 537 | 20k+ | | | Non-prefixed global variable |
| #1202 | Ultimate Addons for Beaver Builder – Lite | 24 | 2,751 | 486 | 20k+ | | | Text Domain Mismatch |
| #1203 | OG — Better Share on Social Media | 81 | 14 | 51 | 30k+ | | | Non-prefixed hook name |
| #1204 | Sensei LMS – Online Courses, Quizzes, & Learning | 25 | 56 | 928 | 9k+ | | | Nonce verification recommended |
| #1205 | Make Column Clickable for Elementor | 97 | 5 | 2 | 100k+ | | | Non-prefixed hook name |
| #1206 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | | | Non-prefixed hook name |
| #1207 | MouseWheel Smooth Scroll | 41 | 104 | 7 | 100k+ | | | Text Domain Mismatch |
| #1208 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #1209 | Astra Bulk Edit | 91 | 4 | 3 | 30k+ | | | Missing direct file access protection |
| #1210 | Plugin Organizer | 33 | 325 | 257 | 10k+ | | | Output is not escaped |
| #1211 | Slideshow Gallery LITE | 24 | 896 | 414 | 5k+ | | | Output is not escaped |
| #1212 | WP Offload SES Lite | 96 | 541 | 5 | 10k+ | | | Text Domain Mismatch |
| #1213 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 421 | 583 | 10k+ | | | Missing Translators Comment |
| #1214 | IP Geo Block | 23 | 399 | 589 | 8k+ | | | Output is not escaped |
| #1215 | AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth | 33 | 33 | 229 | 9k+ | | | Non-prefixed global variable |
| #1216 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net | 32 | 5 | 933 | 40k+ | | | Non-prefixed global variable |
| #1217 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #1218 | Embeds for YouTube | 35 | 255 | 307 | 10k+ | | | Non-prefixed global variable |
| #1219 | ActiveCampaign Postmark for WordPress | 36 | 47 | 75 | 50k+ | | | Text Domain Mismatch |
| #1220 | Flexible Product Fields (WooCommerce Product Addons) – WooCommerce Product Page Editor | 67 | 57 | 98 | 10k+ | | | Non-prefixed global variable |
| #1221 | Disable REST API | 65 | 12 | 15 | 80k+ | | | Output is not escaped |
| #1222 | Crisp – Live Chat and Chatbot | 40 | 24 | 20 | 20k+ | | | Unsafe printing function |
| #1223 | WF Cookie Consent | 100 | | 0 | 10k+ | | | No open findings |
| #1224 | HTTP Headers | 59 | 20 | 43 | 50k+ | | | Nonce verification recommended |
| #1225 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | | Exception output is not escaped |
| #1226 | Team Members | 96 | 15 | 16 | 20k+ | | | Missing direct file access protection |
| #1227 | WP Subscribe | 29 | 79 | 79 | 7k+ | | | Non-prefixed class |
| #1228 | YITH WooCommerce Brands Add-On | 31 | 393 | 1,425 | 9k+ | | | Non-prefixed global variable |
| #1229 | Custom Adobe Fonts (Typekit) | 75 | 11 | 33 | 60k+ | | | Non-prefixed global variable |
| #1230 | Clear Cache for Me | 47 | 58 | 8 | 40k+ | | | Text Domain Mismatch |
| #1231 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | | | Output is not escaped |
| #1232 | Ocean Stick Anything | 85 | 6 | 6 | 20k+ | | | Missing Arg Domain |
| #1233 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #1234 | FakerPress | 53 | 66 | 152 | 10k+ | | | Non-prefixed global variable |
| #1235 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #1236 | Asesor de Cookies RGPD para normativa europea | 36 | 94 | 91 | 20k+ | | | wp function not compatible with requires wp |
| #1237 | Publish To Apple News | 90 | 882 | 2 | 5k+ | | | Text Domain Mismatch |
| #1238 | Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery | 94 | | 206 | 20k+ | | | Non-prefixed global variable |
| #1239 | Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | 25 | 489 | 1,413 | 7k+ | | | Non-prefixed global variable |
| #1240 | WPBase Cache | 27 | 189 | 113 | 2k+ | | | Text Domain Mismatch |
| #1241 | ThemeHunk Customizer | 23 | 3,968 | 582 | 6k+ | | | Text Domain Mismatch |
| #1242 | MotoPress Hotel Booking | 21 | 3,063 | 1,037 | 10k+ | | | Text Domain Mismatch |
| #1243 | Customizer Search | 87 | 10 | 1 | 50k+ | | | Missing direct file access protection |
| #1244 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | 24 | 91 | 1,725 | 7k+ | | | Non-prefixed hook name |
| #1245 | Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar | 24 | 968 | 2,138 | 7k+ | | | Non-prefixed global variable |
| #1246 | Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio | 97 | 12 | 70 | 20k+ | | | Text Domain Mismatch |
| #1247 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #1248 | Add to Cart Redirect for WooCommerce | 37 | 215 | 141 | 8k+ | | | Text Domain Mismatch |
| #1249 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 941 | 2,179 | 20k+ | | | SQL query is not prepared |
| #1250 | WP Menu Icons | 54 | 68 | 52 | 20k+ | | | Text Domain Mismatch |