| #1151 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #1152 | Stock Locations for WooCommerce | 32 | 549 | 360 | 1k+ | | | Output is not escaped |
| #1153 | Beds24 Online Booking | 23 | 532 | 374 | 2k+ | | | wp function not compatible with requires wp |
| #1154 | Vimeotheque – Vimeo WordPress Plugin & Video Gallery | 32 | 642 | 264 | 2k+ | | | Unsafe printing function |
| #1155 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |
| #1156 | Wishlist for WooCommerce | 29 | 610 | 296 | 600 | | | Output is not escaped |
| #1157 | FiboSearch – Ajax Search for WooCommerce | 25 | 603 | 302 | 100k+ | | | Output is not escaped |
| #1158 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | | Non Singular String Literal Domain |
| #1159 | Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More | 24 | 146 | 759 | 100k+ | | | Non-prefixed global variable |
| #1160 | Virtue/Ascend/Pinnacle Toolkit | 26 | 605 | 300 | 30k+ | | | Output is not escaped |
| #1161 | ExpressTechSoftwares Discord Add-on for Paid Memberships Pro | 23 | 454 | 449 | 700 | | | Text Domain Mismatch |
| #1162 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | | | Direct Query |
| #1163 | Webcomic | 25 | 593 | 308 | 600 | | | Output is not escaped |
| #1164 | Automatic Post Tagger | 38 | 592 | 307 | 2k+ | | | Output is not escaped |
| #1165 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #1166 | Polls CP | 27 | 399 | 500 | 400 | | | Output is not escaped |
| #1167 | Gallery – Photo Albums Plugin | 27 | 647 | 252 | 2k+ | | | Output is not escaped |
| #1168 | Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin | 25 | 173 | 726 | 1k+ | | | Non-prefixed global variable |
| #1169 | ElementsReady Addons for Elementor | 23 | 231 | 666 | 3k+ | | | Non-prefixed global variable |
| #1170 | Better WordPress Minify | 22 | 412 | 484 | 8k+ | | | Non Singular String Literal Domain |
| #1171 | AnyComment | 17 | 445 | 449 | 5k+ | | | Output is not escaped |
| #1172 | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | 23 | 306 | 587 | 100k+ | | | Dynamic hook name |
| #1173 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | | Missing Arg Domain |
| #1174 | Fix Alt Text | 24 | 544 | 346 | 1k+ | | | Non Singular String Literal Domain |
| #1175 | ShopPress – Shop Builder for Elementor and WooCommerce | 33 | 11 | 879 | 500 | | | Non-prefixed global variable |
| #1176 | Insights from Google PageSpeed | 32 | 414 | 475 | 20k+ | | | Text Domain Mismatch |
| #1177 | Export and Import Users and Customers | 68 | 223 | 662 | 60k+ | | | Non-prefixed global variable |
| #1178 | Publish To Apple News | 90 | 882 | 2 | 5k+ | | | Text Domain Mismatch |
| #1179 | PayPal Brasil para WooCommerce | 24 | 554 | 329 | 1k+ | | | Unsafe printing function |
| #1180 | Quick Contact Form | 22 | 260 | 623 | 1k+ | | | Non-prefixed function |
| #1181 | BP Classic | 32 | 664 | 216 | 6k+ | | | Unsafe printing function |
| #1182 | My Tickets – Accessible Event Ticketing | 34 | 314 | 566 | 600 | | | Nonce verification recommended |
| #1183 | Clever Mega Menu for Elementor | 38 | 835 | 44 | 1k+ | | | Output is not escaped |
| #1184 | Coming Soon Page & Maintenance Mode | 31 | 613 | 266 | 3k+ | | | Text Domain Mismatch |
| #1185 | Travelpayouts | 23 | 769 | 110 | 6k+ | | | Output is not escaped |
| #1186 | Post Pay Counter | 31 | 639 | 238 | 1k+ | | | Output is not escaped |
| #1187 | Email Subscription Popup — Newsletter & GDPR Consent | 35 | 683 | 193 | 1k+ | | | Output is not escaped |
| #1188 | PDF Builder for WooCommerce. Create invoices,packing slips and more | 25 | 372 | 503 | 2k+ | | | Non-prefixed global variable |
| #1189 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #1190 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #1191 | Delivery & Pickup Date Time for WooCommerce | 30 | 439 | 435 | 5k+ | | | Non-prefixed global variable |
| #1192 | Nirweb support | 23 | 254 | 617 | 800 | | | Request data is not unslashed |
| #1193 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 599 | 6k+ | | | Request data is not unslashed |
| #1194 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | | | Non-prefixed global variable |
| #1195 | News Element Elementor Blog Magazine | 85 | 174 | 695 | 400 | | | Non-prefixed global variable |
| #1196 | Product Gallery Slider, Additional Variation Images for WooCommerce | 28 | 552 | 316 | 20k+ | | | Output is not escaped |
| #1197 | Businessx Extensions | 29 | 337 | 529 | 1k+ | | | Non-prefixed function |
| #1198 | FA Lite – WP responsive slider plugin | 32 | 726 | 140 | 500 | | | Unsafe printing function |
| #1199 | WP Database Backup – Unlimited Database & Files Backup by Backup for WP | 89 | 855 | 11 | 30k+ | | | Text Domain Mismatch |
| #1200 | Easy Modal | 24 | 564 | 299 | 7k+ | | | Unsafe printing function |