| #1401 | Easy Dash for LearnDash | 35 | 623 | 88 | 700 | | | Text Domain Mismatch |
| #1402 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #1403 | Herzog Dupont for YOOtheme Pro | 34 | 477 | 233 | 4k+ | | | Output is not escaped |
| #1404 | Event Timeline – Vertical Timeline | 34 | 26 | 684 | 1k+ | | | Non-prefixed global variable |
| #1405 | Testimonial Slider | 34 | 448 | 262 | 3k+ | | | Unsafe printing function |
| #1406 | Child Theme Configurator | 32 | 442 | 267 | 300k+ | | | Unsafe printing function |
| #1407 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 27 | 212 | 497 | 2k+ | | | Non-prefixed global variable |
| #1408 | GDPR CCPA Compliance & Cookie Consent Banner | 33 | 622 | 87 | 1k+ | | | Non Singular String Literal Domain |
| #1409 | SiteGuard WP Plugin | 24 | 359 | 350 | 500k+ | | | Output is not escaped |
| #1410 | Ultimate Client Dash | 39 | 697 | 12 | 2k+ | | | Text Domain Mismatch |
| #1411 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #1412 | Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce | 25 | 492 | 216 | 400 | | | Text Domain Mismatch |
| #1413 | Social Share Button | 85 | 1 | 707 | 1k+ | | | Non-prefixed global variable |
| #1414 | Secure Client Portal and Private File Sharing Plugin – User Private Files | 32 | 183 | 525 | 1k+ | | | Non-prefixed global variable |
| #1415 | Broadstreet | 20 | 434 | 273 | 700 | | | Output is not escaped |
| #1416 | Wp Default Sender Email by IT Pixelz | 34 | 682 | 25 | 500 | | | Output is not escaped |
| #1417 | BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress | 39 | 480 | 226 | 4k+ | | | Text Domain Mismatch |
| #1418 | SEO Ultimate | 24 | 437 | 269 | 10k+ | | | Output is not escaped |
| #1419 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #1420 | MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) | 27 | 154 | 551 | 5k+ | | | Non-prefixed global variable |
| #1421 | Cart PDF for WooCommerce | 23 | 531 | 172 | 1k+ | | | Exception output is not escaped |
| #1422 | Aitasi Coming Soon | 30 | 516 | 186 | 1k+ | | | Output is not escaped |
| #1423 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | | Output is not escaped |
| #1424 | PostNL for WooCommerce | 34 | 597 | 104 | 3k+ | | | Text Domain Mismatch |
| #1425 | HireZoot – Job Listings, Career Page & Recruitment Tool | 26 | 80 | 620 | 30k+ | | | Non-prefixed global variable |
| #1426 | WPOrLogin – Custom Login, Social Login, Limit Attempts, Hide Login & reCAPTCHA | 31 | 483 | 217 | 2k+ | | | Unsafe printing function |
| #1427 | Login & Register Forms – Popup, Slider, Profile & WooCommerce | 24 | 184 | 515 | 40k+ | | | Non-prefixed global variable |
| #1428 | Membership For WooCommerce | 33 | 40 | 659 | 900 | | | Non-prefixed global variable |
| #1429 | PDF for Elementor Forms + Drag And Drop Template Builder | 86 | 668 | 31 | 1k+ | | | wp function not compatible with requires wp |
| #1430 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | | | Text Domain Mismatch |
| #1431 | Connector Wizard (formerly LC Wizard) | 24 | 249 | 448 | 1k+ | | | Non-prefixed function |
| #1432 | WC Builder – WooCommerce Page Builder for WPBakery | 36 | 647 | 50 | 1k+ | | | Text Domain Mismatch |
| #1433 | Icyclub | 29 | 557 | 139 | 9k+ | | | Output is not escaped |
| #1434 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | | | Non-prefixed global variable |
| #1435 | Restrict Usernames Emails Characters | 32 | 327 | 367 | 1k+ | | | Output is not escaped |
| #1436 | Webyx for Elementor – Fullpage Fullscreen Scrolling Websites | 67 | 684 | 10 | 500 | | | Non Singular String Literal Domain |
| #1437 | IP Locator | 25 | 482 | 211 | 600 | | | Text Domain Mismatch |
| #1438 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | | | Non-prefixed global variable |
| #1439 | Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules | 28 | 187 | 505 | 2k+ | | | Non-prefixed global variable |
| #1440 | Theater for WordPress | 26 | 348 | 344 | 600 | | | Output is not escaped |
| #1441 | Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) | 43 | 208 | 483 | 20k+ | | | Non-prefixed function |
| #1442 | Uix Shortcodes | 33 | 246 | 444 | 400 | | | Non-prefixed global variable |
| #1443 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #1444 | Saphali Woocommerce Lite | 34 | 376 | 313 | 10k+ | | | Non-prefixed global variable |
| #1445 | WP Email Template | 19 | 344 | 345 | 2k+ | | | Exception output is not escaped |
| #1446 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #1447 | Timetable and Event Schedule by MotoPress | 24 | 456 | 232 | 30k+ | | | Output is not escaped |
| #1448 | Sign-up Sheets | 27 | 325 | 363 | 1k+ | | | Output is not escaped |
| #1449 | Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load) | 25 | 185 | 502 | 400 | | | Direct Query |
| #1450 | Memberful – Membership Plugin | 27 | 351 | 336 | 1k+ | | | Text Domain Mismatch |