| #1101 | WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | 38 | 33 | 181 | 2k+ | | | Non-prefixed global variable |
| #1102 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,063 | 10k+ | | | Non-prefixed global variable |
| #1103 | SureRank SEO – Smart Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema | 77 | 58 | 95 | 300k+ | | | Non-prefixed hook name |
| #1104 | Listdomer Core | 40 | 45 | 92 | 400 | | | Non-prefixed global variable |
| #1105 | Secure Client Portal and Private File Sharing Plugin – User Private Files | 32 | 183 | 525 | 1k+ | | | Non-prefixed global variable |
| #1106 | WP Client Reports | 100 | | 3 | 6k+ | | | trademarked term |
| #1107 | Disable Block Editor FullScreen mode | 87 | 6 | 2 | 1k+ | | | Output is not escaped |
| #1108 | Add LinkedIn Insight Tag for LinkedIn Ads | 49 | 126 | 23 | 5k+ | | | Non Singular String Literal Domain |
| #1109 | Create | 25 | 1,637 | 764 | 6k+ | | | Text Domain Mismatch |
| #1110 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | | Exception output is not escaped |
| #1111 | Conditional Fields for Contact Form 7 | 41 | 106 | 53 | 100k+ | | | Output is not escaped |
| #1112 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #1113 | easypay Gateway Checkout for WooCommerce | 77 | 6 | 42 | 600 | | | Nonce verification recommended |
| #1114 | Addi – Cuotas que se adaptan a ti | 33 | 106 | 209 | 2k+ | | | Direct Query |
| #1115 | Universally – AI Translation & Multilingual SEO: Translate Your Site into 110+ Languages | 100 | | 1 | 10k+ | | | mismatched plugin name |
| #1116 | Easy Appointments | 99 | 2 | 2 | 10k+ | | | Non-prefixed class |
| #1117 | Freesoul Deactivate Plugins – Disable plugins on individual WordPress pages | 32 | 53 | 776 | 8k+ | | | Nonce verification recommended |
| #1118 | Constant Contact Forms | 35 | 41 | 89 | 20k+ | | | Missing nonce verification |
| #1119 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | 24 | 938 | 2,935 | 200k+ | | | Non-prefixed global variable |
| #1120 | PVT – Product Variation Table for WooCommerce | 99 | 2 | 2 | 1k+ | | | Non-prefixed class |
| #1121 | Sprout Invoices – Client Invoicing & Estimates | 35 | 40 | 1,800 | 1k+ | | | Non-prefixed hook name |
| #1122 | WebberZone Snippetz – Header, Body and Footer manager | 96 | 1 | 53 | 2k+ | | | Dynamic hook name |
| #1123 | Jquery Validation For Contact Form 7 | 57 | 16 | 19 | 9k+ | | | Missing direct file access protection |
| #1124 | Stream | 81 | 5 | 80 | 80k+ | | | Direct Query |
| #1125 | Event Genius – Event Management, Events Calendar, Registration, and RSVP | 25 | 181 | 1,579 | 500 | | | Non-prefixed global variable |
| #1126 | PilotPress | 32 | 150 | 285 | 900 | | | Output is not escaped |
| #1127 | Faust.js | 91 | 9 | 4 | 1k+ | | | Missing direct file access protection |
| #1128 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | | | Non-prefixed global variable |
| #1129 | WP Armour – Honeypot Anti Spam | 40 | 54 | 66 | 400k+ | | | Missing nonce verification |
| #1130 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 244 | 568 | 1m+ | | | Non-prefixed hook name |
| #1131 | Flexible Invoices for WooCommerce – KSeF Add-on | 35 | 39 | 15 | 600 | | | Non-prefixed global variable |
| #1132 | Slider Block by Sliderberg – WordPress Slider & Carousel Plugin for Gutenberg | 55 | 23 | 19 | 1k+ | | | Output is not escaped |
| #1133 | Tableberg – Simple Gutenberg Table Block | 98 | 3 | 4 | 3k+ | | | date date |
| #1134 | Better Block Editor (BBE) | 95 | 4 | 53 | 5k+ | | | Non-prefixed global variable |
| #1135 | Stape Conversion Tracking | 84 | 23 | 4 | 10k+ | | | Non Singular String Literal Domain |
| #1136 | Mailmunch Forms for Mailchimp | 34 | 120 | 53 | 10k+ | | | Output is not escaped |
| #1137 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |
| #1138 | Crowdsignal Forms | 100 | | 0 | 200k+ | | | No open findings |
| #1139 | Site Search 360 | 32 | 202 | 213 | 400 | | | Output is not escaped |
| #1140 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | | | Direct Query |
| #1141 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #1142 | Local Pickup for WooCommerce | 25 | 547 | 1,389 | 1k+ | | | Non-prefixed global variable |
| #1143 | Flexible Quantity – Measurement Price Calculator for WooCommerce | 98 | 2 | 9 | 2k+ | | | Non-prefixed global variable |
| #1144 | Zorem Local Pickup | 99 | | 5 | 3k+ | | | Non-prefixed class |
| #1145 | Add to Calendar Button | 35 | 31 | 9 | 3k+ | | | Output is not escaped |
| #1146 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,188 | 770 | 30k+ | | | Output is not escaped |
| #1147 | Blog2Social: Social Media Auto Post & Scheduler | 32 | 7 | 957 | 50k+ | | | Direct Query |
| #1148 | WP Store Locator | 35 | 26 | 14 | 50k+ | | | wp function not compatible with requires wp |
| #1149 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,713 | 5,660 | 70k+ | | | Output is not escaped |
| #1150 | Event Post | 34 | 329 | 99 | 1k+ | | | Output is not escaped |