| #1901 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #1902 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #1903 | Ultimate Watermark – Image Watermark, Image Protection & Bulk Watermarking | 27 | 164 | 303 | 1k+ | | | Nonce verification recommended |
| #1904 | VG WORT METIS | 28 | 150 | 317 | 900 | | | Nonce verification recommended |
| #1905 | Admin and Site Enhancements (ASE) | 23 | 138 | 328 | 200k+ | | | Nonce verification recommended |
| #1906 | Quantity Discounts, Breaks & Product Bundles for Woocommerce By Bundler | 32 | 147 | 319 | 400 | | | Direct Query |
| #1907 | ForumWP – Forum & Discussion Board | 82 | 22 | 444 | 900 | | | Non-prefixed global variable |
| #1908 | Travelers' Map | 30 | 311 | 155 | 1k+ | | | Output is not escaped |
| #1909 | BH Custom CSS3 Preloader – Just play and play | 40 | 439 | 26 | 900 | | | Text Domain Mismatch |
| #1910 | wModes – Catalog Mode, Product Pricing, Enquiry Forms & Promotions | for WooCommerce | 80 | | 465 | 900 | | | Non-prefixed global variable |
| #1911 | Discount Rules for WooCommerce | 71 | 10 | 454 | 100k+ | | | Non-prefixed global variable |
| #1912 | Wbcom Designs – Custom Font Uploader | 35 | 340 | 123 | 3k+ | | | Text Domain Mismatch |
| #1913 | Meta Tag Manager | 34 | 142 | 321 | 80k+ | | | Nonce verification recommended |
| #1914 | Whols – Wholesale Prices and B2B Store Solution for WooCommerce | 27 | 228 | 235 | 2k+ | | | Output is not escaped |
| #1915 | Razorpay Quick Payments | 21 | 399 | 63 | 3k+ | | | Exception output is not escaped |
| #1916 | Web Push Notifications – Webpushr | 31 | 169 | 293 | 10k+ | | | Output is not escaped |
| #1917 | ZeroBounce Email Verification & Validation | 38 | 299 | 162 | 900 | | | Text Domain Mismatch |
| #1918 | Contact List – Online Staff Directory & Address Book | 33 | 118 | 342 | 1k+ | | | Nonce verification recommended |
| #1919 | We’re Open! | 36 | 273 | 187 | 5k+ | | | Unsafe printing function |
| #1920 | Webling | 30 | 147 | 313 | 500 | | | Input is not validated |
| #1921 | Wonder Slider Lite | 33 | 273 | 187 | 8k+ | | | Output is not escaped |
| #1922 | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 38 | 2 | 457 | 3k+ | | | Input is not sanitized |
| #1923 | Sensei LMS Certificates | 37 | 97 | 362 | 4k+ | | | Non-prefixed global variable |
| #1924 | Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce | 80 | 9 | 450 | 80k+ | | | Non-prefixed hook name |
| #1925 | Advanced Shipping Validation for WooCommerce | 34 | 331 | 127 | 400 | | | Text Domain Mismatch |
| #1926 | EU Order Withdrawal Button for WooCommerce | 72 | 52 | 406 | 4k+ | | | Non-prefixed hook name |
| #1927 | Razorpay for Gravity Forms | 21 | 411 | 47 | 600 | | | Exception output is not escaped |
| #1928 | Companion Auto Update | 33 | 159 | 298 | 40k+ | | | Direct Query |
| #1929 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 26 | 159 | 297 | 1k+ | | | Non-prefixed global variable |
| #1930 | WPLMS MyCred AddOn | 34 | 383 | 73 | 800 | | | Text Domain Mismatch |
| #1931 | Custom Login Page by SeedProd | 34 | 330 | 125 | 500 | | | Output is not escaped |
| #1932 | JetGridBuilder — Grid Builder for Elementor and Gutenberg | 39 | 414 | 40 | 4k+ | | | Text Domain Mismatch |
| #1933 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | | | Non-prefixed global variable |
| #1934 | Email Inquiry & Cart Options for WooCommerce | 28 | 181 | 273 | 800 | | | Output is not escaped |
| #1935 | NGG Smart Image Search | 35 | 298 | 155 | 400 | | | Output is not escaped |
| #1936 | UiCore Blocks – Free WordPress Gutenberg Blocks | 32 | 59 | 394 | 500 | | | Non-prefixed global variable |
| #1937 | Quotes for WooCommerce | 90 | 186 | 265 | 4k+ | | | Text Domain Mismatch |
| #1938 | Throws SPAM Away | 34 | 327 | 123 | 10k+ | | | Missing Arg Domain |
| #1939 | Easy Accept Payments via PayPal | 35 | 322 | 128 | 7k+ | | | Text Domain Mismatch |
| #1940 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #1941 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | | | Missing nonce verification |
| #1942 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | | Exception output is not escaped |
| #1943 | Premium Blocks – Gutenberg Blocks, Patterns & Templates | 24 | 140 | 308 | 2k+ | | | Non-prefixed function |
| #1944 | Advanced Forms for ACF | 33 | 169 | 278 | 3k+ | | | Non-prefixed hook name |
| #1945 | Elfsight Blocks for Elementor — 80+ Widgets | 35 | 444 | 3 | 2k+ | | | Text Domain Mismatch |
| #1946 | Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | 30 | 60 | 387 | 3k+ | | | Non-prefixed global variable |
| #1947 | UpdraftCentral Dashboard | 26 | 267 | 180 | 5k+ | | | Missing Translators Comment |
| #1948 | Dynamic QR Code – generator | 22 | 238 | 208 | 6k+ | | | Missing direct file access protection |
| #1949 | Translate WordPress with GTranslate | 32 | 82 | 364 | 900k+ | | | Non-prefixed global variable |
| #1950 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 8k+ | | | Text Domain Mismatch |