| #2401 | WP Smart Import : Import any XML File to WordPress | 49 | 28 | 302 | 1k+ | | | Non-prefixed global variable |
| #2402 | Customer Email Verification for WooCommerce | 37 | 165 | 164 | 2k+ | | | Nonce verification recommended |
| #2403 | GSheetConnector for Forminator Forms | 33 | 128 | 201 | 1k+ | | | Non-prefixed global variable |
| #2404 | Countdown Timer | 33 | 311 | 17 | 900 | | | Text Domain Mismatch |
| #2405 | Dynamic Front-End Heartbeat Control | 36 | 217 | 111 | 1k+ | | | Text Domain Mismatch |
| #2406 | GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM | 37 | 59 | 269 | 600 | | | Direct Query |
| #2407 | Maps Plugin using Google Maps for WordPress – WP Google Map | 48 | 289 | 38 | 10k+ | | | wp function not compatible with requires wp |
| #2408 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #2409 | Custom Post Type Maker | 35 | 240 | 86 | 6k+ | | | Unsafe printing function |
| #2410 | Peter’s Post Notes | 36 | 224 | 102 | 3k+ | | | Output is not escaped |
| #2411 | RY Tools for WooCommerce | 42 | | 326 | 5k+ | | | Non-prefixed class |
| #2412 | Simple Staff List | 39 | 90 | 236 | 3k+ | | | Non-prefixed global variable |
| #2413 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons | 35 | 33 | 293 | 10k+ | | | Non-prefixed global variable |
| #2414 | SuperFrete | 34 | 84 | 242 | 1k+ | | | Request data is not unslashed |
| #2415 | DD Last Viewed | 34 | 193 | 132 | 500 | | | Output is not escaped |
| #2416 | IP Based Login | 35 | 179 | 146 | 600 | | | Output is not escaped |
| #2417 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #2418 | bunny.net – WordPress CDN Plugin | 37 | 165 | 159 | 10k+ | | | Output is not escaped |
| #2419 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
| #2420 | Media File Renamer: Rename for better SEO (AI-Powered) | 26 | 154 | 170 | 40k+ | | | Direct Query |
| #2421 | reCAPTCHA in WP comments form | 31 | 264 | 60 | 8k+ | | | Output is not escaped |
| #2422 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | | | Output is not escaped |
| #2423 | IP2Location Redirection | 32 | 201 | 122 | 7k+ | | | Output is not escaped |
| #2424 | Pofily – WooCommerce Product Filters | 86 | 1 | 322 | 600 | | | Non-prefixed global variable |
| #2425 | SEUR Oficial | 35 | 25 | 298 | 1k+ | | | Non-prefixed global variable |
| #2426 | TotalSurvey for Survey, Quiz and Form | 46 | 290 | 33 | 600 | | | Missing direct file access protection |
| #2427 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 600 | | | Output is not escaped |
| #2428 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #2429 | Custom post type templates for Elementor | 38 | 289 | 33 | 700 | | | Text Domain Mismatch |
| #2430 | FAZ Cookie Manager | 70 | | 322 | 1k+ | | | Non-prefixed hook name |
| #2431 | MeetingHub – Webinar & Meeting Plugin for Zoom, Google Meet, Webex, Microsoft Teams, & Jitsi Meet | 35 | 33 | 289 | 400 | | | Non-prefixed global variable |
| #2432 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | | Missing Translators Comment |
| #2433 | SKT Themes Demo Import | 49 | 218 | 104 | 4k+ | | | Text Domain Mismatch |
| #2434 | Device Detector | 33 | 209 | 112 | 600 | | | Output is not escaped |
| #2435 | Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization | 92 | 19 | 302 | 5k+ | | | Non-prefixed hook name |
| #2436 | افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | 28 | 131 | 190 | 20k+ | | | Missing nonce verification |
| #2437 | VS Contact Form | 55 | 3 | 318 | 7k+ | | | Non-prefixed global variable |
| #2438 | Product Category Slider & Grid for WooCommerce – WooCategory | 92 | | 321 | 9k+ | | | Non-prefixed global variable |
| #2439 | WP Flow Plus | 37 | 175 | 146 | 800 | | | Output is not escaped |
| #2440 | Wbcom Designs – BuddyPress Activity Social Share | 35 | 293 | 27 | 400 | | | Text Domain Mismatch |
| #2441 | Social Comments by Heateor | 35 | 285 | 35 | 700 | | | Unsafe printing function |
| #2442 | Blog News Addons For Elementor (News, Magazine and Blog Addons) | 37 | 23 | 296 | 400 | | | Non-prefixed global variable |
| #2443 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | 77 | 37 | 282 | 40k+ | | | Non-prefixed global variable |
| #2444 | Flag Icons | 40 | 300 | 19 | 3k+ | | | Output is not escaped |
| #2445 | Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | 29 | 86 | 233 | 500 | | | Nonce verification recommended |
| #2446 | Nova Blocks by Pixelgrade | 31 | 209 | 110 | 800 | | | Output is not escaped |
| #2447 | Rich Table of Contents | 37 | 262 | 57 | 20k+ | | | Output is not escaped |
| #2448 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #2449 | Orders Tracking for WooCommerce | 37 | 7 | 312 | 10k+ | | | Request data is not unslashed |
| #2450 | ActiveDEMAND | 32 | 157 | 161 | 1k+ | | | Output is not escaped |