| #1401 | Burger Companion | 23 | 3,274 | 472 | 10k+ | | | Text Domain Mismatch |
| #1402 | Patchstack – WordPress & Plugins Security | 23 | 107 | 489 | 50k+ | | | Missing nonce verification |
| #1403 | Acme Demo Setup | 84 | 8 | 6 | 10k+ | | | Non-prefixed function |
| #1404 | eCommerce Companion | 100 | | 0 | 6k+ | | | No open findings |
| #1405 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | | | Output is not escaped |
| #1406 | Block Visibility — Conditional Visibility Control for the Block Editor | 81 | 7 | 11 | 40k+ | | | Input is not sanitized |
| #1407 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #1408 | Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | 34 | 261 | 863 | 20k+ | | | Non-prefixed global variable |
| #1409 | Media Sync | 39 | 193 | 7 | 50k+ | | | Short PHP open tag found |
| #1410 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #1411 | WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets | 80 | 26 | 18 | 30k+ | | | Missing direct file access protection |
| #1412 | Restrict User Access – Ultimate Membership & Content Protection | 22 | 977 | 1,840 | 10k+ | | | Non-prefixed global variable |
| #1413 | Payment Gateway of PayPal for WooCommerce | 41 | 44 | 184 | 7k+ | | | Nonce verification recommended |
| #1414 | Divi Carousel Free (Divi5 Support) | 88 | 268 | 26 | 30k+ | | | Text Domain Mismatch |
| #1415 | EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory | 100 | | 0 | 10k+ | | | No open findings |
| #1416 | Payment Gateway for PayPal on WooCommerce | 24 | 163 | 664 | 10k+ | | | Non-prefixed hook name |
| #1417 | ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce | 35 | 51 | 344 | 10k+ | | | Request data is not unslashed |
| #1418 | YITH WooCommerce Subscription | 24 | 439 | 1,538 | 7k+ | | | Non-prefixed global variable |
| #1419 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,082 | 847 | 10k+ | | | Unsafe printing function |
| #1420 | Spider Blocker | 78 | 19 | 9 | 20k+ | | | Missing Translators Comment |
| #1421 | Social Media Auto Poster – Schedule & Publish to Buffer | 58 | 23 | 211 | 7k+ | | | Dynamic hook name |
| #1422 | Tutor LMS Elementor Addons | 31 | 227 | 453 | 30k+ | | | Non-prefixed global variable |
| #1423 | Secure Custom Fields | 23 | 240 | 1,370 | 80k+ | | | Non-prefixed function |
| #1424 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #1425 | WP Show Posts | 36 | 107 | 102 | 70k+ | | | Output is not escaped |
| #1426 | Chat Button & Custom ChatGPT-Powered Bot by GetButton.io | 58 | 26 | 8 | 20k+ | | | Non-prefixed function |
| #1427 | GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | 61 | 9 | 119 | 80k+ | | | Non-prefixed global variable |
| #1428 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | | Non-prefixed global variable |
| #1429 | Pie Register – User Registration, Profiles & Content Restriction | 27 | | 1,779 | 1k+ | | | Non-prefixed global variable |
| #1430 | Passster – Password Protect Pages and Content | 22 | 539 | 1,419 | 10k+ | | | Non-prefixed global variable |
| #1431 | Duplicate Menu | 66 | 11 | 7 | 100k+ | | | Unsafe printing function |
| #1432 | DHL Shipping Germany for WooCommerce | Pending | - | - | 4k+ | | | Pending scan |
| #1433 | PWA | 96 | 34 | 3 | 20k+ | | | Missing direct file access protection |
| #1434 | What The File | 35 | 9 | 12 | 40k+ | | | Input is not sanitized |
| #1435 | WP Ultimate Review | 55 | 23 | 381 | 70k+ | | | Non-prefixed global variable |
| #1436 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #1437 | My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam | 27 | 713 | 321 | 10k+ | | | Text Domain Mismatch |
| #1438 | Carousel Slider Block for Gutenberg | 96 | 48 | 12 | 40k+ | | | Text Domain Mismatch |
| #1439 | URL Shortify – Simple and Easy URL Shortener | 21 | 1,519 | 2,687 | 10k+ | | | Non-prefixed global variable |
| #1440 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 3k+ | | | Output is not escaped |
| #1441 | EventPrime – Events Calendar, Bookings and Tickets | 21 | 873 | 4,308 | 7k+ | | | Non-prefixed global variable |
| #1442 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #1443 | Raw HTML | 66 | 17 | 35 | 10k+ | | | Non-prefixed function |
| #1444 | SimpleTOC – Table of Contents Block | 35 | 10 | 0 | 10k+ | | | Setting is missing a sanitization callback |
| #1445 | HTML Editor Syntax Highlighter | 42 | 30 | 21 | 50k+ | | | Output is not escaped |
| #1446 | Geolocation IP Detection | 34 | 227 | 167 | 20k+ | | | Output is not escaped |
| #1447 | IntenseDebate Comments | 35 | 203 | 114 | 500 | | | Output is not escaped |
| #1448 | Login as User | 36 | 101 | 64 | 30k+ | | | Output is not escaped |
| #1449 | Advanced Free Shipping for WooCommerce | 34 | 270 | 132 | 40k+ | | | Text Domain Mismatch |
| #1450 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 6,004 | 2,764 | 5k+ | | | Text Domain Mismatch |