| #1951 | Related Products – Create Upsells, Cross-sells, and Product Recommendations for WooCommerce | 96 | 78 | 7 | 10k+ | | | wp function not compatible with requires wp |
| #1952 | Lightbox slider – Responsive Lightbox Gallery | 37 | 36 | 173 | 3k+ | | | Non-prefixed global variable |
| #1953 | LH HSTS | 78 | 3 | 12 | 600 | | | Input is not sanitized |
| #1954 | Stream Video Player | 27 | 220 | 135 | 600 | | | Output is not escaped |
| #1955 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | | Request data is not unslashed |
| #1956 | JCH Optimize | 22 | 1,145 | 136 | 4k+ | | | Output is not escaped |
| #1957 | WP Booking System – Booking Calendar | 28 | 502 | 549 | 20k+ | | | Output is not escaped |
| #1958 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | | | Unsafe printing function |
| #1959 | WP Extended Search | 41 | 159 | 37 | 20k+ | | | Output is not escaped |
| #1960 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #1961 | ShopWP | 22 | 430 | 225 | 700 | | | Text Domain Mismatch |
| #1962 | Image Regenerate & Select Crop | 99 | 3 | 1 | 8k+ | | | wp function not compatible with requires wp |
| #1963 | Pay for Payment for WooCommerce | 41 | 29 | 67 | 10k+ | | | Missing nonce verification |
| #1964 | WP LinkedIn Auto Publish | 34 | 165 | 56 | 8k+ | | | Output is not escaped |
| #1965 | Clicky by Yoast | 95 | 10 | 7 | 4k+ | | | Missing direct file access protection |
| #1966 | Clean Image Filenames | 82 | 6 | 1 | 30k+ | | | Output is not escaped |
| #1967 | WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) | 39 | 165 | 24 | 700 | | | Unsafe printing function |
| #1968 | Music Player for Elementor – Audio Player & Podcast Player | 24 | 608 | 1,302 | 10k+ | | | Non-prefixed global variable |
| #1969 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #1970 | Reorder Posts – Quick Post Type and Page Ordering | 61 | 10 | 23 | 10k+ | | | Request data is not unslashed |
| #1971 | Simple Like Page – Fast & Privacy-Friendly Page Embeds | 41 | 145 | 31 | 10k+ | | | Output is not escaped |
| #1972 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | | | Unsafe printing function |
| #1973 | WP Search with Algolia | 64 | 28 | 16 | 7k+ | | | Missing direct file access protection |
| #1974 | WP Extra File Types | 43 | 11 | 26 | 40k+ | | | Request data is not unslashed |
| #1975 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 500 | | | SQL query is not prepared |
| #1976 | Widget Content Blocks | 98 | 5 | 1 | 10k+ | | | Missing Translators Comment |
| #1977 | WCBoost – Wishlist | 97 | 2 | 29 | 50k+ | | | Non-prefixed global variable |
| #1978 | GEO my WP | 24 | 554 | 2,091 | 3k+ | | | Non-prefixed hook name |
| #1979 | Radio Buttons for Taxonomies | 39 | 40 | 24 | 20k+ | | | Output is not escaped |
| #1980 | Prisna GWT – Google Website Translator | 39 | 117 | 77 | 8k+ | | | Text Domain Mismatch |
| #1981 | Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools | 39 | 322 | 66 | 8k+ | | | Output is not escaped |
| #1982 | Easy Hide Login | 98 | 3 | 12 | 20k+ | | | Non-prefixed global variable |
| #1983 | Modern Cart – WooCommerce Side Cart & Popup Cart | 86 | 8 | 95 | 50k+ | | | Non-prefixed global variable |
| #1984 | WP Notification Bars | 67 | 13 | 32 | 10k+ | | | Request data is not unslashed |
| #1985 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #1986 | Currency Switcher for WooCommerce | 32 | 357 | 263 | 10k+ | | | Text Domain Mismatch |
| #1987 | Tabby Responsive Tabs | 60 | 16 | 5 | 10k+ | | | Output is not escaped |
| #1988 | Database Manager – WP Adminer | 24 | 1,005 | 2,752 | 20k+ | | | Non-prefixed global variable |
| #1989 | WC Hide Shipping Methods | 88 | 5 | 5 | 20k+ | | | trademarked term |
| #1990 | Canvas | 90 | 2 | 115 | 10k+ | | | Non-prefixed global variable |
| #1991 | Points and Rewards for WooCommerce | 100 | 1 | 0 | 7k+ | | | invalid tested upto minor |
| #1992 | WPS Cleaner | 30 | 430 | 491 | 20k+ | | | Output is not escaped |
| #1993 | Oceanwp sticky header | 64 | 8 | 13 | 10k+ | | | Missing nonce verification |
| #1994 | Swift SMTP (formerly Welcome Email Editor) | 51 | 12 | 62 | 7k+ | | | Missing nonce verification |
| #1995 | Real Custom Post Order: Create a custom order for your content | 89 | 1 | 19 | 8k+ | | | Non-prefixed global variable |
| #1996 | User Verification by PickPlugins | 29 | 41 | 314 | 5k+ | | | Request data is not unslashed |
| #1997 | Lockdown WP Admin | 41 | 20 | 50 | 10k+ | | | Request data is not unslashed |
| #1998 | Social Icons | 38 | 72 | 83 | 10k+ | | | Output is not escaped |
| #1999 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | | | Non-prefixed hook name |
| #2000 | Gantry 5 Framework | 100 | | 0 | 7k+ | | | No open findings |