| #1401 | Bulk Download for Gravity Forms | 35 | 5 | 2 | 500 | | | Hidden files included |
| #1402 | WPC Frequently Bought Together for WooCommerce | 40 | 63 | 109 | 10k+ | | | Output is not escaped |
| #1403 | Welcart e-Commerce | 22 | 10,378 | 10,931 | 10k+ | | | Text Domain Mismatch |
| #1404 | FormLayer | 96 | | 2 | 70k+ | | | Nonce verification recommended |
| #1405 | Trusty Whistleblowing Solution | 44 | 234 | 16 | 400 | | | Text Domain Mismatch |
| #1406 | WishSuite – Wishlist for WooCommerce | 38 | 76 | 133 | 1k+ | | | Output is not escaped |
| #1407 | WP Simple HTML Sitemap | 99 | 2 | 3 | 3k+ | | | trademarked term |
| #1408 | Gianism | 29 | 391 | 154 | 700 | | | Text Domain Mismatch |
| #1409 | WP OAuth Server ( Login with WordPress ) | 96 | 26 | 9 | 1k+ | | | wp function not compatible with requires wp |
| #1410 | Real Thumbnail Generator: Efficient regeneration of thumbnails in all sizes | 85 | 5 | 58 | 1k+ | | | Non-prefixed constant |
| #1411 | Real Category Management: Content Management in Category Folders | 79 | 4 | 73 | 2k+ | | | Non-prefixed constant |
| #1412 | Real Custom Post Order: Create a custom order for your content | 89 | 1 | 19 | 8k+ | | | Non-prefixed global variable |
| #1413 | Solace Extra | 99 | | 5 | 10k+ | | | Non-prefixed class |
| #1414 | flowpaper | 59 | 13 | 31 | 10k+ | | | Non-prefixed function |
| #1415 | Real Media Library: Media Library Folder & File Manager | 47 | 1 | 365 | 100k+ | | | Direct Query |
| #1416 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #1417 | WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager | 88 | 27 | 33 | 3m+ | | | wp function not compatible with requires wp |
| #1418 | Captivate Sync | 24 | 173 | 557 | 1k+ | | | Non-prefixed global variable |
| #1419 | Snow Monkey Blocks | 92 | 87 | 173 | 30k+ | | | Non-prefixed global variable |
| #1420 | Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations | 35 | 255 | 225 | 10k+ | | | Output is not escaped |
| #1421 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #1422 | Exclusive Addons for Elementor | 30 | 3,630 | 263 | 50k+ | | | Text Domain Mismatch |
| #1423 | Colete-Online | 30 | 776 | 346 | 600 | | | Text Domain Mismatch |
| #1424 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 6k+ | | | Text Domain Mismatch |
| #1425 | Secure Passkeys | 43 | 145 | 83 | 1k+ | | | Exception output is not escaped |
| #1426 | Responsive Gallery Grid | 40 | 90 | 14 | 4k+ | | | Output is not escaped |
| #1427 | Importify – AI Dropshipping for WooCommerce | 59 | 22 | 71 | 2k+ | | | Non-prefixed global variable |
| #1428 | Sina Extension for Elementor | 30 | 3,691 | 160 | 40k+ | | | Text Domain Mismatch |
| #1429 | Protect Login | 100 | | 0 | 600 | | | No open findings |
| #1430 | Address Validation and Autocomplete for WooCommerce | Addressfinder | 89 | 85 | 15 | 900 | | | Text Domain Mismatch |
| #1431 | PublishPress Statuses – Custom Post Status and Workflow | 37 | 231 | 78 | 1k+ | | | Missing Arg Domain |
| #1432 | Plugin Detective – Troubleshooting Conflicts | 98 | 6 | 3 | 5k+ | | | Missing direct file access protection |
| #1433 | SpiceBox | 24 | 828 | 1,816 | 20k+ | | | Non-prefixed global variable |
| #1434 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #1435 | Realtyna Organic IDX plugin + WPL Real Estate | 18 | 930 | 3,636 | 2k+ | | | Non-prefixed global variable |
| #1436 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | | | wp function not compatible with requires wp |
| #1437 | WP Job Manager | 27 | 93 | 582 | 80k+ | | | Non-prefixed hook name |
| #1438 | BabyLoveGrowth Integration | 35 | 2 | 10 | 1k+ | | | Direct Query |
| #1439 | Suffice Toolkit | 98 | 2 | 25 | 1k+ | | | Non-prefixed class |
| #1440 | Affiliate Links – Link Cloaking and Management | 39 | 23 | 113 | 3k+ | | | Non-prefixed global variable |
| #1441 | GSpeech TTS – WordPress Text To Speech Plugin | 27 | 842 | 333 | 3k+ | | | Output is not escaped |
| #1442 | Flow-Flow Social Streams | 99 | | 17 | 8k+ | | | Non-prefixed constant |
| #1443 | AyeCode Connect | 34 | 178 | 253 | 10k+ | | | Nonce verification recommended |
| #1444 | CloudPayments Gateway for WooCommerce | 36 | 205 | 70 | 500 | | | Text Domain Mismatch |
| #1445 | UiCore Blocks – Free WordPress Gutenberg Blocks | 32 | 59 | 394 | 500 | | | Non-prefixed global variable |
| #1446 | Clear Cache Everywhere | 76 | 7 | 17 | 700 | | | Nonce verification recommended |
| #1447 | Interactive Image Map Builder | 31 | 160 | 381 | 1k+ | | | Non-prefixed global variable |
| #1448 | SUMIT Payment Gateway for WooCommerce | 37 | 358 | 74 | 1k+ | | | Text Domain Mismatch |
| #1449 | Image Hotspot – Map Image Annotation | 31 | 95 | 287 | 3k+ | | | Non-prefixed global variable |
| #1450 | Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio | 97 | 12 | 70 | 20k+ | | | Text Domain Mismatch |