| #1401 | WP Booking System – Booking Calendar | 28 | 502 | 549 | 20k+ | | | Output is not escaped |
| #1402 | WP Bottom Menu | 60 | 74 | 52 | 20k+ | | | Non-prefixed hook name |
| #1403 | WP Child Theme Generator | 42 | 35 | 66 | 20k+ | | | Request data is not unslashed |
| #1404 | WP Console – WordPress PHP Console powered by PsySH | 53 | 34 | 48 | 20k+ | | | Exception output is not escaped |
| #1405 | WP Customer Reviews | 98 | | 11 | 20k+ | | | slow db query meta query |
| #1406 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | | | Non-prefixed global variable |
| #1407 | WP Dashboard Notes | 41 | 24 | 29 | 20k+ | | | Unsafe printing function |
| #1408 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #1409 | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | 90 | | 20 | 20k+ | | | Non-prefixed function |
| #1410 | WP Extended Search | 41 | 159 | 37 | 20k+ | | | Output is not escaped |
| #1411 | Hide Dashboard Notifications | 76 | 10 | 10 | 20k+ | | | Output is not escaped |
| #1412 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #1413 | Mail logging – WP Mail Catcher | 35 | 232 | 157 | 20k+ | | | Text Domain Mismatch |
| #1414 | WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map by aBlocks | 79 | 6 | 10 | 20k+ | | | trademarked term |
| #1415 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 941 | 2,179 | 20k+ | | | SQL query is not prepared |
| #1416 | WP Maximum Execution Time Exceeded | 97 | 4 | 3 | 20k+ | | | trademarked term |
| #1417 | Media Library Categories | 40 | 29 | 49 | 20k+ | | | Output is not escaped |
| #1418 | WP Menu Icons | 54 | 68 | 52 | 20k+ | | | Text Domain Mismatch |
| #1419 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | | | Output is not escaped |
| #1420 | WP-Paginate | 35 | 37 | 55 | 20k+ | | | Input is not validated |
| #1421 | JWT Authentication for WP REST APIs | 93 | 140 | 28 | 20k+ | | | wp function not compatible with requires wp |
| #1422 | WP Simple Booking Calendar | 31 | 337 | 380 | 20k+ | | | Output is not escaped |
| #1423 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | | | Nonce verification recommended |
| #1424 | WP Test Email | 41 | 32 | 28 | 20k+ | | | Unsafe printing function |
| #1425 | Backup and Staging by WP Time Capsule | Pending | - | - | 20k+ | | | Pending scan |
| #1426 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,012 | 5,689 | 20k+ | | | Non-prefixed global variable |
| #1427 | wp-Typography | 67 | 91 | 33 | 20k+ | | | Missing direct file access protection |
| #1428 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #1429 | WP User Avatars | 68 | 5 | 20 | 20k+ | | | Input is not sanitized |
| #1430 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #1431 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,380 | 888 | 20k+ | | | Output is not escaped |
| #1432 | WP YouTube Lyte | 28 | 204 | 178 | 20k+ | | | Non-prefixed global variable |
| #1433 | wpForo Forum | 17 | 4,054 | 3,033 | 20k+ | | | Unsafe printing function |
| #1434 | WPS Cleaner | 30 | 430 | 491 | 20k+ | | | Output is not escaped |
| #1435 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |
| #1436 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | | Non-prefixed global variable |
| #1437 | Dynamic XML Sitemaps Generator for Google | 31 | 75 | 411 | 20k+ | | | Non-prefixed global variable |
| #1438 | Yandex Metrica | 39 | 92 | 46 | 20k+ | | | Output is not escaped |
| #1439 | YITH WooCommerce Product Add-Ons | 24 | 460 | 2,069 | 20k+ | | | Non-prefixed global variable |
| #1440 | YITH WooCommerce Product Gallery & Image Zoom | 24 | 418 | 1,490 | 20k+ | | | Non-prefixed global variable |
| #1441 | WP All Import – Import SEO Settings for Yoast SEO | 46 | 19 | 26 | 20k+ | | | Nonce verification recommended |
| #1442 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #1443 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #1444 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | | Request data is not unslashed |
| #1445 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | | Input is not validated |
| #1446 | Vertical Timeline Widget for Elementor | 90 | 2 | 10 | 10k+ | | | Non-prefixed function |
| #1447 | 404 Solution | 24 | 483 | 1,355 | 10k+ | | | Non-prefixed class |
| #1448 | Web Accessibility by accessiBe | 72 | 1 | 25 | 10k+ | | | Input is not sanitized |
| #1449 | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 87 | | 18 | 10k+ | | | Database parameter is not escaped |
| #1450 | Accordion Blocks | 78 | 9 | 3 | 10k+ | | | Unsafe printing function |