| #1901 | GDPR | 77 | 39 | 121 | 10k+ | | | Non-prefixed global variable |
| #1902 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |
| #1903 | Contact Form Builder by vcita | 32 | 666 | 174 | 700 | | | Text Domain Mismatch |
| #1904 | Media Library Organizer – Folders, File Manager & Media Categories | 72 | 20 | 130 | 20k+ | | | Non-prefixed global variable |
| #1905 | Tickera – Sell Tickets & Manage Events | 90 | 5 | 23 | 2k+ | | | Non-prefixed class |
| #1906 | Structured Content (JSON-LD) #wpsc | 39 | 291 | 73 | 40k+ | | | Output is not escaped |
| #1907 | Configure SMTP | 99 | 2 | 1 | 6k+ | | | Discouraged text-domain loading |
| #1908 | Email Before Download | 36 | 89 | 29 | 6k+ | | | Unsafe printing function |
| #1909 | Simple Taxonomy Ordering | 75 | 7 | 10 | 10k+ | | | Direct Query |
| #1910 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | | | Non-prefixed global variable |
| #1911 | Simple Link Directory – AI Powered | 25 | 133 | 420 | 2k+ | | | Non-prefixed global variable |
| #1912 | Page Speed Optimizer: HTTP/2 Push, Async JavaScript, and Defer CSS | 36 | 68 | 33 | 6k+ | | | Output is not escaped |
| #1913 | mb.miniAudioPlayer – an HTML5 audio player for your mp3 files | 38 | 204 | 6 | 4k+ | | | Unsafe printing function |
| #1914 | Smart Custom Fields | 95 | 8 | 28 | 50k+ | | | Dynamic hook name |
| #1915 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |
| #1916 | Word Balloon | 40 | 20 | 125 | 10k+ | | | Request data is not unslashed |
| #1917 | PDF Invoices & Packing Slips for WooCommerce – Challan | 49 | 56 | 151 | 4k+ | | | Non-prefixed global variable |
| #1918 | Cachify | 84 | 9 | 36 | 9k+ | | | Non-prefixed global variable |
| #1919 | WP Super Edit | 36 | 35 | 185 | 2k+ | | | Nonce verification recommended |
| #1920 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 37 | 165 | 72 | 5k+ | | | Text Domain Mismatch |
| #1921 | Text To Speech TTS Accessibility | 93 | | 166 | 3k+ | | | Non-prefixed hook name |
| #1922 | Easy SVG Support | 99 | 1 | 0 | 40k+ | | | outdated tested upto header |
| #1923 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | | | Text Domain Mismatch |
| #1924 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #1925 | Payment Gateway for Redsys & WooCommerce Lite | 32 | 125 | 75 | 20k+ | | | Text Domain Mismatch |
| #1926 | HookMeUp for WooCommerce | 35 | 59 | 29 | 10k+ | | | Output is not escaped |
| #1927 | Blog Filter – Post Grid Filter by Category or Tag | 89 | 1 | 5 | 7k+ | | | Nonce verification recommended |
| #1928 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 32 | 159 | 62 | 10k+ | | | Output is not escaped |
| #1929 | Options for Twenty Seventeen | 99 | 2 | 2 | 9k+ | | | Non-prefixed class |
| #1930 | Custom Product Tabs for WooCommerce & WordPress Tabs Builder – Smart Tabs | 91 | | 412 | 10k+ | | | Non-prefixed global variable |
| #1931 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | | | Non-prefixed global variable |
| #1932 | Uji Countdown | 36 | 284 | 98 | 4k+ | | | Text Domain Mismatch |
| #1933 | CallRail Phone Call Tracking | 69 | 11 | 12 | 10k+ | | | Input is not validated |
| #1934 | Landing Page Builder – Free Landing Page Templates | 37 | 329 | 111 | 600 | | | Output is not escaped |
| #1935 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | | | Non-prefixed global variable |
| #1936 | Rich Table of Contents | 37 | 262 | 57 | 20k+ | | | Output is not escaped |
| #1937 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #1938 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #1939 | External Links | 48 | 42 | 13 | 9k+ | | | Output is not escaped |
| #1940 | Flexible Map | 85 | 10 | 7 | 7k+ | | | Non-prefixed class |
| #1941 | One Stop Shop for WooCommerce | 68 | 23 | 83 | 10k+ | | | Input is not sanitized |
| #1942 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #1943 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | | Text Domain Mismatch |
| #1944 | Enlighter – Customizable Syntax Highlighter | 35 | 50 | 10 | 10k+ | | | Output is not escaped |
| #1945 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #1946 | Duplicate Post Page Menu & Custom Post Type | 41 | 35 | 11 | 10k+ | | | Text Domain Mismatch |
| #1947 | Crelly Slider | 36 | 421 | 185 | 10k+ | | | Unsafe printing function |
| #1948 | Vimeography: Vimeo Video Gallery WordPress Plugin | 24 | 98 | 212 | 5k+ | | | Nonce verification recommended |
| #1949 | SendWP | 37 | 47 | 42 | 10k+ | | | Output is not escaped |
| #1950 | Product Enquiry for WooCommerce (Now with AI Assistant) | 86 | 6 | 146 | 10k+ | | | Non-prefixed global variable |