| #1501 | Live Carts for WooCommerce: Track Active, Abandoned, and Converted Carts & Wishlists in Real Time! | 100 | | 0 | 600 | | | No open findings |
| #1502 | Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | 23 | 2,129 | 993 | 400k+ | | | Text Domain Mismatch |
| #1503 | Praison AI SEO | 28 | 649 | 306 | 1k+ | | | Text Domain Mismatch |
| #1504 | Authorsy – Author Box, Multiple Authors, Guest Authors & Post Rating | 81 | 1 | 20 | 1k+ | | | Request data is not unslashed |
| #1505 | Picture Gallery – Frontend Image Uploads, AJAX Photo List | 92 | 5 | 2 | 400 | | | date date |
| #1506 | Custom Login Logo | 100 | | 1 | 700 | | | trademarked term |
| #1507 | MarqueeX – Smooth Marquee Slider, News Ticker & Post Marquee for Block Editor & Elementor | 100 | | 1 | 600 | | | missing composer json file |
| #1508 | Appointment Booking Calendar | 25 | 327 | 1,055 | 1k+ | | | Non-prefixed global variable |
| #1509 | MotoPress Appointment Booking | 23 | 2,362 | 857 | 2k+ | | | Text Domain Mismatch |
| #1510 | SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent | 25 | 432 | 1,357 | 10k+ | | | Direct Query |
| #1511 | Product Video Gallery for Woocommerce | 40 | 61 | 36 | 10k+ | | | Setting is missing a sanitization callback |
| #1512 | Simple User Avatar | 61 | 8 | 14 | 20k+ | | | Output is not escaped |
| #1513 | Easy HTTPS Redirection (SSL) | 29 | 266 | 152 | 100k+ | | | Unsafe printing function |
| #1514 | WP Migrate Lite – Migration Made Easy | 23 | 369 | 255 | 200k+ | | | Exception output is not escaped |
| #1515 | Widgets for Social Post Feed | 91 | 1 | 146 | 400 | | | Non-prefixed global variable |
| #1516 | Post Lockdown | 95 | 5 | 3 | 1k+ | | | Missing direct file access protection |
| #1517 | Special Text Boxes | 37 | 38 | 42 | 2k+ | | | Direct Query |
| #1518 | DietPress | 100 | | 1 | 2k+ | | | trademarked term |
| #1519 | Block Editor Colors | 88 | 23 | 9 | 3k+ | | | Missing Arg Domain |
| #1520 | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 25 | 691 | 1,581 | 50k+ | | | Non-prefixed global variable |
| #1521 | Regen. Thumbs | 88 | 3 | 3 | 400 | | | Input is not sanitized |
| #1522 | Adaptify SEO One-Click Publishing | 100 | | 0 | 700 | | | No open findings |
| #1523 | WPC Countdown Timer for WooCommerce | 43 | 52 | 36 | 1k+ | | | Output is not escaped |
| #1524 | MyRewards | 89 | 1,213 | 5 | 2k+ | | | Text Domain Mismatch |
| #1525 | Widgets for Social Photo Feed | 91 | 1 | 147 | 10k+ | | | Non-prefixed global variable |
| #1526 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #1527 | Quaderno: Global Tax & Invoicing Automation for WooCommerce | 35 | 4 | 70 | 500 | | | Missing nonce verification |
| #1528 | PiWeb Min/Max Quantity & Minimum Order Limits for WooCommerce | 78 | | 41 | 700 | | | Nonce verification recommended |
| #1529 | Smart Search & Product Filter for WooCommerce – Searchanise | 97 | 2 | 24 | 900 | | | Non-prefixed global variable |
| #1530 | PiWeb Conditional cart fee / Extra charge rule for WooCommerce | 37 | 164 | 214 | 2k+ | | | Text Domain Mismatch |
| #1531 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #1532 | WPEPP – Essential Security, Password Protect & Login Page Customizer | 39 | 34 | 29 | 3k+ | | | Unsupported Identifier Placeholder |
| #1533 | Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator | 46 | 13 | 25 | 7k+ | | | Request data is not unslashed |
| #1534 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 316 | 639 | 90k+ | | | Output is not escaped |
| #1535 | Restrict for Elementor | 27 | 530 | 1,223 | 900 | | | Non-prefixed global variable |
| #1536 | FooGallery Migrate | 35 | 41 | 232 | 1k+ | | | Non-prefixed global variable |
| #1537 | Zoho Campaigns | 38 | 3 | 129 | 3k+ | | | Non-prefixed global variable |
| #1538 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 90k+ | | | Text Domain Mismatch |
| #1539 | morkva Plata by Mono Extended | 95 | 112 | 14 | 400 | | | Text Domain Mismatch |
| #1540 | Events Block | 100 | | 0 | 600 | | | No open findings |
| #1541 | Smartarget – Chat Buttons & Engagement Apps | 68 | 31 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #1542 | Digital Signature Add-on for WooCommerce | 34 | 165 | 76 | 1k+ | | | Text Domain Mismatch |
| #1543 | Signature Add-On for Gravity Forms | 34 | 161 | 48 | 1k+ | | | Text Domain Mismatch |
| #1544 | Zoho Marketing Automation | 37 | 24 | 194 | 1k+ | | | Non-prefixed global variable |
| #1545 | AVIF Uploader | 51 | 49 | 44 | 4k+ | | | Missing Arg Domain |
| #1546 | Arile Extra | 30 | 537 | 570 | 10k+ | | | Non-prefixed global variable |
| #1547 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #1548 | BBH Custom Schema – Add Custom JSON-LD to Your Website | 100 | | 1 | 600 | | | Non-prefixed class |
| #1549 | Payment Gateway for Authorize.net for WooCommerce | 76 | 6 | 16 | 700 | | | Input is not sanitized |
| #1550 | Modal Popup Box — Popup Maker & Popup Builder | 93 | 1 | 4 | 2k+ | | | Input is not sanitized |
