| #1801 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #1802 | MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | 33 | 2 | 503 | 700 | | | Non-prefixed function |
| #1803 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #1804 | Sailthru for WordPress | 24 | 239 | 266 | 2k+ | | | Non-prefixed global variable |
| #1805 | Theme Builder For Elementor | 37 | 477 | 28 | 2k+ | | | Text Domain Mismatch |
| #1806 | wp-mpdf | 27 | 123 | 382 | 1k+ | | | Non-prefixed global variable |
| #1807 | Datafeedr Comparison Sets | 38 | 450 | 53 | 3k+ | | | Output is not escaped |
| #1808 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | | | Unsafe printing function |
| #1809 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #1810 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #1811 | Advanced Custom Fields: Typography Field | 33 | 445 | 57 | 4k+ | | | Text Domain Mismatch |
| #1812 | GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites | 26 | 286 | 216 | 500 | | | badly named files |
| #1813 | Health Check & Troubleshooting | 35 | 264 | 238 | 300k+ | | | Missing Arg Domain |
| #1814 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | | | Output is not escaped |
| #1815 | WooCommerce Legacy REST API | 31 | 324 | 177 | 400k+ | | | Missing Translators Comment |
| #1816 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #1817 | LuckyWP Table of Contents | 39 | 438 | 62 | 100k+ | | | Output is not escaped |
| #1818 | RSS Feed Pro | 33 | 484 | 16 | 500 | | | Output is not escaped |
| #1819 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 143 | 357 | 60k+ | | | Input is not sanitized |
| #1820 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #1821 | Slider by Soliloquy – Responsive Image Slider for WordPress | 90 | 470 | 29 | 30k+ | | | Text Domain Mismatch |
| #1822 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | | | Input is not sanitized |
| #1823 | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | 31 | 167 | 332 | 5m+ | | | Non-prefixed global variable |
| #1824 | WP Bannerize Pro | 32 | 281 | 216 | 800 | | | Text Domain Mismatch |
| #1825 | Disable XML-RPC-API | 35 | 444 | 52 | 100k+ | | | Text Domain Mismatch |
| #1826 | GiveWP Donation Widgets for Elementor | 38 | 483 | 13 | 6k+ | | | Text Domain Mismatch |
| #1827 | News Announcement Scroll | 33 | 237 | 259 | 2k+ | | | Non-prefixed global variable |
| #1828 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | | Direct Query |
| #1829 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #1830 | Simple Event Planner | 27 | 149 | 346 | 1k+ | | | Non-prefixed global variable |
| #1831 | WP Layouts | 24 | 349 | 146 | 3k+ | | | Text Domain Mismatch |
| #1832 | Compliance by Hu-manity.co | 32 | 153 | 341 | 900k+ | | | Missing nonce verification |
| #1833 | XML Sitemap & Google News | 47 | 270 | 224 | 100k+ | | | Non-prefixed global variable |
| #1834 | Blogsqode – Blog Layouts and News Post Design | 35 | 430 | 63 | 400 | | | Text Domain Mismatch |
| #1835 | Pricing Table WordPress Plugin – Easy Pricing Tables | 37 | 332 | 161 | 10k+ | | | Output is not escaped |
| #1836 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 56 | 437 | 4k+ | | | Non-prefixed global variable |
| #1837 | Multi-Carrier EasyPost Shipping Methods & Address Validation for WooCommerce | 33 | 424 | 69 | 400 | | | Non Singular String Literal Domain |
| #1838 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #1839 | Members – Membership & User Role Editor Plugin | 32 | 233 | 259 | 300k+ | | | Output is not escaped |
| #1840 | Ni WooCommerce Sales Report | 35 | 236 | 256 | 500 | | | Text Domain Mismatch |
| #1841 | Simple Download Monitor | 27 | 219 | 273 | 20k+ | | | Output is not escaped |
| #1842 | PDF Flipbook, WPBakery Addon – Unreal FlipBook | 36 | 400 | 92 | 1k+ | | | Non Singular String Literal Domain |
| #1843 | Dynamic XML Sitemaps Generator for Google | 31 | 75 | 417 | 20k+ | | | Non-prefixed global variable |
| #1844 | Bicycles by falbar | 35 | 426 | 65 | 600 | | | Output is not escaped |
| #1845 | Brilliant Web-to-Lead for Salesforce | 28 | 247 | 244 | 2k+ | | | Text Domain Mismatch |
| #1846 | Star Addons for Elementor | 30 | 236 | 255 | 1k+ | | | Non-prefixed global variable |
| #1847 | WebHotelier for WordPress | 39 | 451 | 40 | 500 | | | Text Domain Mismatch |
| #1848 | Rich Showcase for Google Reviews | 33 | 212 | 278 | 100k+ | | | Output is not escaped |
| #1849 | WooPayments: Integrated WooCommerce Payments | 30 | 182 | 308 | 900k+ | | | Exception output is not escaped |
| #1850 | WordPress REST API (Version 2) | 82 | 476 | 13 | 10k+ | | | Missing Arg Domain |