| #1251 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | | | Non Singular String Literal Domain |
| #1252 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #1253 | LeadConnector | 100 | | 0 | 20k+ | | | No open findings |
| #1254 | LearnPress – Course Review | 37 | 67 | 43 | 20k+ | | | Output is not escaped |
| #1255 | LearnPress – Course Wishlist | 56 | 35 | 22 | 20k+ | | | Output is not escaped |
| #1256 | Lightbox with PhotoSwipe | 88 | 1 | 24 | 20k+ | | | Non-prefixed global variable |
| #1257 | Link Manager | 98 | 4 | 0 | 20k+ | | | Missing direct file access protection |
| #1258 | Load More Products for WooCommerce | 24 | 731 | 459 | 20k+ | | | Text Domain Mismatch |
| #1259 | Login Logout Menu | 72 | 7 | 20 | 20k+ | | | Input is not sanitized |
| #1260 | Login or Logout Menu Item | 55 | 13 | 7 | 20k+ | | | Unsafe printing function |
| #1261 | Login rebuilder | 31 | 406 | 226 | 20k+ | | | Non Singular String Literal Domain |
| #1262 | Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery | 94 | | 206 | 20k+ | | | Non-prefixed global variable |
| #1263 | LWS Cleaner | 38 | 81 | 129 | 20k+ | | | Direct Query |
| #1264 | LWS Hide Login | 45 | 5 | 58 | 20k+ | | | Request data is not unslashed |
| #1265 | MainWP Dashboard: Self-hosted WordPress Management for Agencies | 31 | 95 | 317 | 20k+ | | | Interpolated SQL is not prepared |
| #1266 | Mammoth .docx converter | 83 | 11 | 0 | 20k+ | | | Output is not escaped |
| #1267 | Mantenimiento web | 63 | 49 | 15 | 20k+ | | | Text Domain Mismatch |
| #1268 | Map Block for Google Maps | 35 | 6 | 5 | 20k+ | | | Hidden files included |
| #1269 | Marquee Addons for Elementor – Essential Motion Widgets & Templates | 94 | 2 | 24 | 20k+ | | | Post Not In exclude |
| #1270 | Input Mask For Elementor Form Fields | 100 | | 1 | 20k+ | | | Non-prefixed class |
| #1271 | Material Design Icons for Page Builders | 46 | 69 | 46 | 20k+ | | | Missing direct file access protection |
| #1272 | Media Library Organizer – Folders, File Manager & Media Categories | 72 | 20 | 130 | 20k+ | | | Non-prefixed global variable |
| #1273 | Mega Addons For WPBakery Page Builder | 39 | 1,320 | 154 | 20k+ | | | Text Domain Mismatch |
| #1274 | Meks Simple Flickr Widget | 49 | 38 | 0 | 20k+ | | | Output is not escaped |
| #1275 | Metronet Tag Manager | 52 | 17 | 36 | 20k+ | | | Input is not validated |
| #1276 | Min and Max Quantity for WooCommerce | 24 | 603 | 459 | 20k+ | | | Text Domain Mismatch |
| #1277 | Movable Type and TypePad Importer | 39 | 42 | 25 | 20k+ | | | Output is not escaped |
| #1278 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | | Text Domain Mismatch |
| #1279 | Multi Device Switcher | 98 | 2 | 9 | 20k+ | | | Non-prefixed function |
| #1280 | Multiple Post Thumbnails | 53 | 25 | 18 | 20k+ | | | Output is not escaped |
| #1281 | My Calendar – Accessible Event Manager | 25 | 10 | 2,205 | 20k+ | | | Non-prefixed function |
| #1282 | ND Shortcodes | 23 | 621 | 2,426 | 20k+ | | | Non-prefixed global variable |
| #1283 | New User Approve | 24 | 652 | 1,415 | 20k+ | | | Non-prefixed global variable |
| #1284 | No Right Click Images | 97 | 14 | 13 | 20k+ | | | wp function not compatible with requires wp |
| #1285 | Ocean Custom Sidebar | 80 | 8 | 3 | 20k+ | | | Missing Arg Domain |
| #1286 | Ocean Product Sharing | 86 | 9 | 18 | 20k+ | | | Non-prefixed global variable |
| #1287 | Ocean Stick Anything | 85 | 6 | 6 | 20k+ | | | Missing Arg Domain |
| #1288 | SOGO Add Script to Individual Pages Header Footer | 39 | 74 | 40 | 20k+ | | | Output is not escaped |
| #1289 | Packlink PRO for WooCommerce | 27 | 132 | 160 | 20k+ | | | Non-prefixed global variable |
| #1290 | Donations via PayPal | 40 | 143 | 17 | 20k+ | | | Output is not escaped |
| #1291 | PDF Poster – Display PDF Files with Custom Viewer | 100 | | 0 | 20k+ | | | No open findings |
| #1292 | PDF.js Viewer | 69 | 14 | 38 | 20k+ | | | Non-prefixed global variable |
| #1293 | گرویتی فرم فارسی | 30 | 205 | 157 | 20k+ | | | Text Domain Mismatch |
| #1294 | افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | 28 | 131 | 190 | 20k+ | | | Missing nonce verification |
| #1295 | Database Manager – WP Adminer | 24 | 1,005 | 2,752 | 20k+ | | | Non-prefixed global variable |
| #1296 | Pochipp | 35 | 27 | 102 | 20k+ | | | Non-prefixed global variable |
| #1297 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #1298 | Portfolio Filter Gallery – Photo Gallery & Video Gallery | 85 | 3 | 9 | 20k+ | | | Missing nonce verification |
| #1299 | Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News | 41 | | 537 | 20k+ | | | Non-prefixed global variable |
| #1300 | Post Snippets – Custom WordPress Code Snippets Customizer | 25 | 808 | 1,654 | 20k+ | | | Non-prefixed global variable |