| #1501 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #1502 | AForms — Form Builder for Price Calculator & Cost Estimation | 28 | 564 | 95 | 3k+ | | | Text Domain Mismatch |
| #1503 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #1504 | Dynamic User Directory | 28 | 403 | 256 | 1k+ | | | Output is not escaped |
| #1505 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #1506 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #1507 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #1508 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | | | Output is not escaped |
| #1509 | Wiremo – Product Reviews for WooCommerce | 27 | 445 | 212 | 700 | | | Output is not escaped |
| #1510 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #1511 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | | Text Domain Mismatch |
| #1512 | Lenix Leads Collector | 34 | 414 | 242 | 10k+ | | | Text Domain Mismatch |
| #1513 | Jim Soft Swiss QR Invoice | 22 | 263 | 392 | 400 | | | Non-prefixed global variable |
| #1514 | ShopWP | 22 | 430 | 225 | 700 | | | Text Domain Mismatch |
| #1515 | Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress | 49 | 478 | 176 | 1k+ | | | Text Domain Mismatch |
| #1516 | Amazing Affiliates – Toolkit for Amazon Associates with Amazon Product Blocks and Amazon PAAPI5 / Creators API integration | 72 | 3 | 650 | 600 | | | Non-prefixed global variable |
| #1517 | Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin | 42 | 472 | 181 | 400 | | | Text Domain Mismatch |
| #1518 | Podamibe Simple Footer Widget Area | 31 | 596 | 57 | 2k+ | | | wp function not compatible with requires wp |
| #1519 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 173 | 479 | 100k+ | | | Interpolated SQL is not prepared |
| #1520 | Responsive Lightbox & Gallery | 28 | 139 | 513 | 100k+ | | | Non-prefixed hook name |
| #1521 | BestWebSoft's Twitter | 50 | 477 | 174 | 900 | | | Text Domain Mismatch |
| #1522 | AR for WordPress | 23 | 151 | 499 | 400 | | | Non-prefixed global variable |
| #1523 | Plugin BlueX for WooCommerce | 29 | 431 | 216 | 2k+ | | | Text Domain Mismatch |
| #1524 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | | Missing direct file access protection |
| #1525 | Tab – Accordion, FAQ | 28 | 104 | 542 | 1k+ | | | Non-prefixed global variable |
| #1526 | Vertex Addons for Elementor | 28 | 232 | 413 | 400 | | | Output is not escaped |
| #1527 | EasyParcel Shipping– All-in-one Shipping Solution, Real-Time Shipping Rates | 30 | 37 | 608 | 600 | | | Non-prefixed global variable |
| #1528 | Fattura24 | 24 | 312 | 333 | 400 | | | Output is not escaped |
| #1529 | Terms descriptions | 28 | 222 | 423 | 1k+ | | | Non-prefixed function |
| #1530 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #1531 | Redirectioner | 37 | 234 | 410 | 1k+ | | | Output is not escaped |
| #1532 | iPages – FlipBook Image & PDF Viewer | 35 | 467 | 177 | 2k+ | | | Text Domain Mismatch |
| #1533 | Evento | 34 | 583 | 60 | 1k+ | | | Text Domain Mismatch |
| #1534 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | 22 | 407 | 236 | 700k+ | | | Text Domain Mismatch |
| #1535 | Netgsm | 19 | 334 | 308 | 1k+ | | | Setting is missing a sanitization callback |
| #1536 | pensopay Payments | 24 | 396 | 246 | 1k+ | | | Output is not escaped |
| #1537 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 500 | | | Non-prefixed class |
| #1538 | WP Travel Gutenberg Blocks | 28 | 485 | 157 | 900 | | | Output is not escaped |
| #1539 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #1540 | Easy 3D Viewer | 32 | 399 | 241 | 1k+ | | | Text Domain Mismatch |
| #1541 | Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo | 80 | 580 | 59 | 40k+ | | | Text Domain Mismatch |
| #1542 | Service Showcase | 41 | 41 | 597 | 800 | | | Non-prefixed global variable |
| #1543 | WP Testimonials | 31 | 183 | 455 | 10k+ | | | Non-prefixed global variable |
| #1544 | CurrencyConverter | 41 | 629 | 6 | 700 | | | Non Singular String Literal Domain |
| #1545 | Up2pay e-Transactions WooCommerce Payment Gateway | 31 | 459 | 175 | 4k+ | | | Text Domain Mismatch |
| #1546 | Online Booking & Scheduling Calendar for WordPress by vcita | 27 | 473 | 161 | 1k+ | | | Output is not escaped |
| #1547 | Faktur Pro for WooCommerce | 26 | 416 | 218 | 1k+ | | | Text Domain Mismatch |
| #1548 | Beehive Analytics – Google Analytics Dashboard | 90 | 611 | 22 | 20k+ | | | Text Domain Mismatch |
| #1549 | Logo Showcase – Logo Slider, Carousel & Sponsors Gallery | 39 | 535 | 98 | 1k+ | | | Text Domain Mismatch |
| #1550 | Novelist | 30 | 475 | 158 | 1k+ | | | Output is not escaped |