| #1201 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #1202 | Image Photo Gallery Final Tiles Grid | 23 | 578 | 1,502 | 20k+ | | | Non-prefixed global variable |
| #1203 | Flexible Editor Panel for Elementor | 42 | 154 | 42 | 20k+ | | | Text Domain Mismatch |
| #1204 | Flexy Breadcrumb | 38 | 241 | 13 | 20k+ | | | Output is not escaped |
| #1205 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | 42 | 111 | 17 | 20k+ | | | Exception output is not escaped |
| #1206 | Fluent PDF Generator | 80 | 102 | 6 | 20k+ | | | Text Domain Mismatch |
| #1207 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #1208 | Flying Pages: Preload Pages for Faster Navigation & Improved User Experience | 47 | 21 | 21 | 20k+ | | | Missing direct file access protection |
| #1209 | Forget About Shortcode Buttons | 78 | 11 | 25 | 20k+ | | | Missing direct file access protection |
| #1210 | Fullwidth Templates for Any Theme & Page Builder | 81 | 12 | 23 | 20k+ | | | Non-prefixed constant |
| #1211 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #1212 | Futurio Extra | 23 | 787 | 205 | 20k+ | | | Text Domain Mismatch |
| #1213 | FV Top Level Categories | 56 | 24 | 16 | 20k+ | | | Text Domain Mismatch |
| #1214 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #1215 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #1216 | Lightbox for Gallery & Image Block | 98 | 3 | 0 | 20k+ | | | Missing direct file access protection |
| #1217 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #1218 | Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery | 92 | 6 | 30 | 20k+ | | | Non-prefixed global variable |
| #1219 | Genesis Simple Hooks | 84 | 14 | 1 | 20k+ | | | Output is not escaped |
| #1220 | Geolocation IP Detection | 34 | 227 | 167 | 20k+ | | | Output is not escaped |
| #1221 | GN Publisher: Google News Compatible RSS Feeds | 86 | 76 | 6 | 20k+ | | | wp function not compatible with requires wp |
| #1222 | Google Authenticator | 41 | 39 | 65 | 20k+ | | | Output is not escaped |
| #1223 | Easy Google Maps | 24 | 1,764 | 389 | 20k+ | | | Non Singular String Literal Domain |
| #1224 | Insights from Google PageSpeed | 32 | 414 | 475 | 20k+ | | | Text Domain Mismatch |
| #1225 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | | | Text Domain Mismatch |
| #1226 | Event Tracking for Gravity Forms | 43 | 34 | 25 | 20k+ | | | rand mt rand |
| #1227 | Gravity PDF | 57 | 116 | 152 | 20k+ | | | Non-prefixed global variable |
| #1228 | Gravity Forms CLI Add-On | 81 | 31 | 4 | 20k+ | | | Missing direct file access protection |
| #1229 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #1230 | Gutenverse – WordPress Blocks, Page Builder & Site Editor | 51 | 17 | 47 | 20k+ | | | Non-prefixed hook name |
| #1231 | Gwolle Guestbook | 32 | 269 | 527 | 20k+ | | | Output is not escaped |
| #1232 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #1233 | Header Footer Builder for Elementor | 99 | | 6 | 20k+ | | | Non-prefixed class |
| #1234 | Hide Admin Bar | 51 | 35 | 17 | 20k+ | | | Unsafe printing function |
| #1235 | Hide Admin Bar Based on User Roles | 26 | 549 | 1,345 | 20k+ | | | Non-prefixed global variable |
| #1236 | Hide Admin Menu | 55 | 18 | 27 | 20k+ | | | Non-prefixed function |
| #1237 | Hide Admin Notices | 57 | 9 | 16 | 20k+ | | | Input is not sanitized |
| #1238 | Hide/Remove Metadata | 100 | | 1 | 20k+ | | | readme parser warnings too many tags |
| #1239 | HT Slider For Elementor | 50 | 884 | 40 | 20k+ | | | Text Domain Mismatch |
| #1240 | HTML5 Video Player – Embed and Play Videos in Custom Player | 99 | | 5 | 20k+ | | | Non-prefixed global variable |
| #1241 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 33 | 377 | 139 | 20k+ | | | Unsafe printing function |
| #1242 | Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | 29 | 20 | 826 | 20k+ | | | Non-prefixed namespace |
| #1243 | Insert Html Snippet | 39 | 159 | 205 | 20k+ | | | Output is not escaped |
| #1244 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #1245 | RD Station | 74 | | 65 | 20k+ | | | Non-prefixed global variable |
| #1246 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #1247 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #1248 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #1249 | JivoChat Live Chat – WP live chat plugin for WordPress | 81 | 27 | 13 | 20k+ | | | wp function not compatible with requires wp |
| #1250 | jQuery Updater | 97 | 8 | 4 | 20k+ | | | library core files |