| #1401 | WP Child Theme Generator | 42 | 35 | 66 | 20k+ | | | Request data is not unslashed |
| #1402 | WP Console – WordPress PHP Console powered by PsySH | 53 | 34 | 48 | 20k+ | | | Exception output is not escaped |
| #1403 | WP Customer Reviews | 98 | | 11 | 20k+ | | | slow db query meta query |
| #1404 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | | | Non-prefixed global variable |
| #1405 | WP Dashboard Notes | 41 | 24 | 29 | 20k+ | | | Unsafe printing function |
| #1406 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #1407 | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | 90 | | 20 | 20k+ | | | Non-prefixed function |
| #1408 | WP Extended Search | 41 | 159 | 37 | 20k+ | | | Output is not escaped |
| #1409 | Hide Dashboard Notifications | 76 | 10 | 10 | 20k+ | | | Output is not escaped |
| #1410 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #1411 | WP Lightbox 2 | 46 | 52 | 18 | 20k+ | | | Text Domain Mismatch |
| #1412 | Mail logging – WP Mail Catcher | 35 | 232 | 157 | 20k+ | | | Text Domain Mismatch |
| #1413 | WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map by aBlocks | 79 | 6 | 10 | 20k+ | | | trademarked term |
| #1414 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 941 | 2,179 | 20k+ | | | SQL query is not prepared |
| #1415 | WP Maximum Execution Time Exceeded | 97 | 4 | 3 | 20k+ | | | trademarked term |
| #1416 | Media Library Categories | 40 | 29 | 49 | 20k+ | | | Output is not escaped |
| #1417 | WP Menu Icons | 54 | 68 | 52 | 20k+ | | | Text Domain Mismatch |
| #1418 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | | | Output is not escaped |
| #1419 | WP-Paginate | 35 | 37 | 55 | 20k+ | | | Input is not validated |
| #1420 | JWT Authentication for WP REST APIs | 93 | 140 | 28 | 20k+ | | | wp function not compatible with requires wp |
| #1421 | WP Simple Booking Calendar | 31 | 337 | 380 | 20k+ | | | Output is not escaped |
| #1422 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | | | Nonce verification recommended |
| #1423 | WP Test Email | 41 | 32 | 28 | 20k+ | | | Unsafe printing function |
| #1424 | Backup and Staging by WP Time Capsule | Pending | - | - | 20k+ | | | Pending scan |
| #1425 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,029 | 5,700 | 20k+ | | | Non-prefixed global variable |
| #1426 | wp-Typography | 67 | 91 | 33 | 20k+ | | | Missing direct file access protection |
| #1427 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #1428 | WP User Avatars | 68 | 5 | 20 | 20k+ | | | Input is not sanitized |
| #1429 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 291 | 1,516 | 20k+ | | | Non-prefixed global variable |
| #1430 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #1431 | WP YouTube Lyte | 28 | 204 | 178 | 20k+ | | | Non-prefixed global variable |
| #1432 | wpForo Forum | 17 | 4,054 | 3,033 | 20k+ | | | Unsafe printing function |
| #1433 | WPS Cleaner | 30 | 430 | 491 | 20k+ | | | Output is not escaped |
| #1434 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |
| #1435 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | | Non-prefixed global variable |
| #1436 | Dynamic XML Sitemaps Generator for Google | 31 | 75 | 417 | 20k+ | | | Non-prefixed global variable |
| #1437 | Yandex Metrica | 39 | 92 | 46 | 20k+ | | | Output is not escaped |
| #1438 | YITH WooCommerce Product Add-Ons | 23 | 461 | 2,069 | 20k+ | | | Non-prefixed global variable |
| #1439 | YITH WooCommerce Product Gallery & Image Zoom | 24 | 418 | 1,490 | 20k+ | | | Non-prefixed global variable |
| #1440 | WP All Import – Import SEO Settings for Yoast SEO | 46 | 19 | 26 | 20k+ | | | Nonce verification recommended |
| #1441 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #1442 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #1443 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | | Request data is not unslashed |
| #1444 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | | Input is not validated |
| #1445 | Vertical Timeline Widget for Elementor | 90 | 2 | 10 | 10k+ | | | Non-prefixed function |
| #1446 | 404 Solution | 24 | 483 | 1,355 | 10k+ | | | Non-prefixed class |
| #1447 | Web Accessibility by accessiBe | 72 | 1 | 25 | 10k+ | | | Input is not sanitized |
| #1448 | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 87 | | 18 | 10k+ | | | Database parameter is not escaped |
| #1449 | Accordion Blocks | 78 | 9 | 3 | 10k+ | | | Unsafe printing function |
| #1450 | ACF Field For CF7 | 99 | 1 | 0 | 10k+ | | | outdated tested upto header |