| #1851 | Weaver Xtreme Theme Support | 34 | 1,625 | 43 | 9k+ | | | Text Domain Mismatch |
| #1852 | BA Book Everything | 23 | 1,184 | 1,086 | 10k+ | | | Output is not escaped |
| #1853 | Premium Packages – Sell Digital Products Securely | 20 | 2,032 | 2,190 | 2k+ | | | Non-prefixed global variable |
| #1854 | WP REST Cache | 64 | 11 | 113 | 10k+ | | | Direct Query |
| #1855 | Bulky – Bulk Edit Products for WooCommerce | 81 | 3 | 21 | 10k+ | | | Non-prefixed hook name |
| #1856 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | | Output is not escaped |
| #1857 | Diverse Solutions IDX Real Estate Listings & MLS Search | 22 | 745 | 605 | 1k+ | | | Heredoc Output Not Escaped |
| #1858 | Album Gallery for Flickr | 100 | | 1 | 4k+ | | | mismatched plugin name |
| #1859 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #1860 | Multi Step Form | 34 | 277 | 139 | 9k+ | | | Output is not escaped |
| #1861 | Plausible Analytics | 35 | 244 | 61 | 10k+ | | | Exception output is not escaped |
| #1862 | WebToffee WP Backup and Migration | 33 | 132 | 222 | 5k+ | | | Non-prefixed global variable |
| #1863 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #1864 | MAS Static Content | 91 | 3 | 7 | 10k+ | | | Non-prefixed hook name |
| #1865 | WPCargo Track & Trace | 25 | 239 | 557 | 10k+ | | | Non-prefixed global variable |
| #1866 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | | | Exception output is not escaped |
| #1867 | SOGO Add Script to Individual Pages Header Footer | 39 | 74 | 40 | 20k+ | | | Output is not escaped |
| #1868 | WP Social AutoConnect | 33 | 290 | 144 | 400 | | | Output is not escaped |
| #1869 | Bulk Edit Products for WooCommerce – WP Sheet Editor | 25 | 957 | 968 | 10k+ | | | Text Domain Mismatch |
| #1870 | Adapta RGPD | 37 | 349 | 72 | 40k+ | | | Text Domain Mismatch |
| #1871 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | | | Non-prefixed hook name |
| #1872 | MyParcel | 94 | 2 | 84 | 8k+ | | | Non-prefixed global variable |
| #1873 | RSS for Yandex Turbo | 32 | 687 | 307 | 20k+ | | | Unsafe printing function |
| #1874 | Realtyna Organic IDX plugin + WPL Real Estate | 18 | 930 | 3,636 | 2k+ | | | Non-prefixed global variable |
| #1875 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #1876 | MB Custom Post Types & Custom Taxonomies | 50 | 61 | 55 | 10k+ | | | Missing Translators Comment |
| #1877 | Dynamic Product Gallery for WooCommerce | 28 | 414 | 301 | 1k+ | | | Output is not escaped |
| #1878 | Scripts n Styles | 39 | 150 | 92 | 30k+ | | | Output is not escaped |
| #1879 | Smartsupp – live chat, AI shopping assistant and chatbots | 96 | 16 | 4 | 20k+ | | | wp function not compatible with requires wp |
| #1880 | Admin Menu Tree Page View | 43 | 17 | 69 | 10k+ | | | Nonce verification recommended |
| #1881 | WP Call Button – Easy Click to Call Button for WordPress | 54 | 21 | 38 | 40k+ | | | Non-prefixed global variable |
| #1882 | Debloat – Remove Unused CSS, Optimize JS | 58 | 24 | 20 | 30k+ | | | Nonce verification recommended |
| #1883 | Cresta Social Share Counter | 57 | 12 | 13 | 2k+ | | | Output is not escaped |
| #1884 | Flat Rate Shipping Method for WooCommerce | 25 | 1,242 | 1,778 | 5k+ | | | Non-prefixed global variable |
| #1885 | PuSHPress | 42 | 11 | 65 | 20k+ | | | Missing nonce verification |
| #1886 | Throws SPAM Away | 34 | 327 | 123 | 10k+ | | | Missing Arg Domain |
| #1887 | PowerFolio – Portfolio & Image Gallery for Elementor | 97 | 10 | 12 | 10k+ | | | Non-prefixed hook name |
| #1888 | MC4WP: Mailchimp Top Bar – Email Subscribe Notification Bar | 88 | 1 | 21 | 7k+ | | | Non-prefixed global variable |
| #1889 | Posts in Page | 95 | 10 | 12 | 10k+ | | | date date |
| #1890 | Gravity Forms CLI Add-On | 81 | 31 | 4 | 20k+ | | | Missing direct file access protection |
| #1891 | YITH WooCommerce Product Slider Carousel | 30 | 389 | 1,479 | 4k+ | | | Non-prefixed global variable |
| #1892 | WC – APG NIF/CIF/NIE Field | 100 | | 3 | 10k+ | | | trademarked term |
| #1893 | Embed Optimizer | 100 | | 4 | 50k+ | | | Text Domain Mismatch |
| #1894 | Premium Blocks – Gutenberg Blocks, Patterns & Templates | 24 | 140 | 308 | 2k+ | | | Non-prefixed function |
| #1895 | PopupAlly | 75 | 40 | 10 | 2k+ | | | Missing direct file access protection |
| #1896 | TS Webfonts for さくらのレンタルサーバ | 35 | 183 | 100 | 30k+ | | | Missing Arg Domain |
| #1897 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #1898 | PixTypes | 82 | | 178 | 9k+ | | | Non-prefixed global variable |
| #1899 | Clicky Analytics | 33 | 166 | 92 | 10k+ | | | Output is not escaped |
| #1900 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |