| #1201 | Ultimate Reviews | 26 | 515 | 345 | 500 | | | Output is not escaped |
| #1202 | WP2Social Auto Publish | 35 | 643 | 215 | 9k+ | | | Unsafe printing function |
| #1203 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 322 | 10k+ | | | Text Domain Mismatch |
| #1204 | Query Wrangler | 28 | 628 | 229 | 700 | | | Output is not escaped |
| #1205 | Awesome GDPR Compliant Cookie Consent and Notice | 36 | 653 | 201 | 500 | | | Text Domain Mismatch |
| #1206 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | | Output is not escaped |
| #1207 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 25 | 498 | 355 | 1k+ | | | Text Domain Mismatch |
| #1208 | WP Club Manager – WordPress Sports Club Plugin | 44 | 171 | 682 | 600 | | | Non-prefixed global variable |
| #1209 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #1210 | Seraphinite Accelerator | 22 | 595 | 255 | 50k+ | | | Output is not escaped |
| #1211 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 21 | 190 | 660 | 30k+ | | | Non-prefixed global variable |
| #1212 | WP Gravity Forms Constant Contact Plugin | 31 | 684 | 164 | 600 | | | Text Domain Mismatch |
| #1213 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | | Output is not escaped |
| #1214 | Campaign Monitor for WordPress | 21 | 386 | 461 | 2k+ | | | Non-prefixed global variable |
| #1215 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #1216 | Connector for Gravity Forms and Google Sheets | 33 | 692 | 155 | 3k+ | | | Text Domain Mismatch |
| #1217 | Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | 29 | 20 | 826 | 20k+ | | | Non-prefixed namespace |
| #1218 | Friends | 28 | 164 | 679 | 1k+ | | | Non-prefixed global variable |
| #1219 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | | Text Domain Mismatch |
| #1220 | Contact Form Builder by vcita | 32 | 666 | 174 | 700 | | | Text Domain Mismatch |
| #1221 | Accordion Slider | 29 | 391 | 447 | 2k+ | | | Unsafe printing function |
| #1222 | Jupiter X Core | 38 | 71 | 767 | 70k+ | | | Non-prefixed global variable |
| #1223 | MaxGalleria | 26 | 278 | 560 | 2k+ | | | Non-prefixed global variable |
| #1224 | Event Tickets Manager for WooCommerce | 28 | 182 | 655 | 1k+ | | | Non-prefixed global variable |
| #1225 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | | | wp function not compatible with requires wp |
| #1226 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #1227 | Shortcodes and extra features for Phlox theme | 23 | 412 | 424 | 90k+ | | | Output is not escaped |
| #1228 | Quick Restaurant Reservations | 33 | 654 | 179 | 500 | | | Text Domain Mismatch |
| #1229 | European VAT Compliance Assistant for WooCommerce | 24 | 515 | 317 | 3k+ | | | Output is not escaped |
| #1230 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #1231 | Genesis Club Lite | 25 | 513 | 317 | 900 | | | Output is not escaped |
| #1232 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #1233 | AL Pack | 29 | 13 | 816 | 2k+ | | | Non-prefixed global variable |
| #1234 | Freesoul Deactivate Plugins – Disable plugins on individual WordPress pages | 32 | 53 | 776 | 8k+ | | | Nonce verification recommended |
| #1235 | Name Directory | 38 | 520 | 309 | 3k+ | | | Output is not escaped |
| #1236 | Pre-Orders for WooCommerce | 30 | 568 | 261 | 7k+ | | | Output is not escaped |
| #1237 | Tamara Checkout | 25 | 601 | 228 | 2k+ | | | Exception output is not escaped |
| #1238 | Ultimate Fields | 23 | 371 | 458 | 600 | | | Alternative PHP tag found |
| #1239 | MapPress Maps for WordPress | 32 | 695 | 133 | 30k+ | | | Missing Arg Domain |
| #1240 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #1241 | Payment Gateway for PayPal on WooCommerce | 24 | 163 | 664 | 10k+ | | | Non-prefixed hook name |
| #1242 | Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder | 80 | 94 | 732 | 10k+ | | | Non-prefixed global variable |
| #1243 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |
| #1244 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #1245 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | | | Non-prefixed global variable |
| #1246 | Comment Link Remove and Other Comment Tools | 27 | 691 | 132 | 7k+ | | | Text Domain Mismatch |
| #1247 | Democracy Poll | 24 | 387 | 436 | 7k+ | | | Short PHP open tag found |
| #1248 | Posti Shipping | 32 | 664 | 157 | 1k+ | | | Text Domain Mismatch |
| #1249 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #1250 | Moyasar | 32 | 589 | 230 | 700 | | | Text Domain Mismatch |