| #1151 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #1152 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,066 | 2k+ | | | Non-prefixed hook name |
| #1153 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 5k+ | | | Exception output is not escaped |
| #1154 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 8k+ | | | Text Domain Mismatch |
| #1155 | AI Content Writing Assistant | 26 | 1,069 | 516 | 700 | | | Text Domain Mismatch |
| #1156 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #1157 | A WP Life Companion | 26 | 1,703 | 458 | 6k+ | | | Text Domain Mismatch |
| #1158 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #1159 | Blog Floating Button | 26 | 705 | 240 | 9k+ | | | Output is not escaped |
| #1160 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #1161 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #1162 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 400k+ | | | Non-prefixed global variable |
| #1163 | Conditional Logic for Woo Product Add-ons | 26 | 575 | 1,352 | 500 | | | Non-prefixed global variable |
| #1164 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #1165 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 26 | 159 | 297 | 1k+ | | | Non-prefixed global variable |
| #1166 | CP Multi View Events Calendar | 26 | 86 | 439 | 900 | | | Non-prefixed global variable |
| #1167 | Cyclone Demo Importer | 26 | 1,778 | 448 | 10k+ | | | Text Domain Mismatch |
| #1168 | WP Frontend Admin – Display WP Admin Pages in the Frontend | 26 | 347 | 337 | 400 | | | Non Singular String Literal Domain |
| #1169 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | | Output is not escaped |
| #1170 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #1171 | Easy Post Views Count | 26 | 534 | 1,180 | 2k+ | | | Non-prefixed global variable |
| #1172 | ELEX WooCommerce Google Shopping (Google Product Feed) | 26 | 226 | 242 | 1k+ | | | Text Domain Mismatch |
| #1173 | Event Monster – Event Manager, Ticket Booking & Registration | 26 | 781 | 781 | 600 | | | Non-prefixed global variable |
| #1174 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |
| #1175 | RSS Redirect & Feedburner Alternative | 26 | 277 | 272 | 1k+ | | | Output is not escaped |
| #1176 | FG Drupal to WordPress | 26 | 275 | 100 | 700 | | | Unsafe printing function |
| #1177 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |
| #1178 | FlagShip WooCommerce Shipping | 26 | 495 | 188 | 400 | | | Non Singular String Literal Domain |
| #1179 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #1180 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #1181 | FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) | 26 | 594 | 417 | 2k+ | | | Exception output is not escaped |
| #1182 | FV Antispam | 26 | 332 | 239 | 900 | | | Output is not escaped |
| #1183 | Translate WordPress – Google Language Translator | 26 | 200 | 317 | 100k+ | | | Non-prefixed global variable |
| #1184 | GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites | 26 | 286 | 216 | 500 | | | badly named files |
| #1185 | Hide Admin Bar Based on User Roles | 26 | 549 | 1,345 | 20k+ | | | Non-prefixed global variable |
| #1186 | Ibtana – WordPress Website Builder | 26 | 173 | 409 | 10k+ | | | Non-prefixed global variable |
| #1187 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 26 | 423 | 292 | 2k+ | | | Output is not escaped |
| #1188 | Integrate Razorpay for Contact Form 7 | 26 | 152 | 97 | 500 | | | curl curl setopt |
| #1189 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #1190 | JustTables – WooCommerce Product Table | 26 | 534 | 652 | 600 | | | Non-prefixed global variable |
| #1191 | Kirki – Freeform Page Builder, Website Builder & Customizer | 26 | 191 | 803 | 500k+ | | | Nonce verification recommended |
| #1192 | Klarna for WooCommerce | 26 | 284 | 507 | 30k+ | | | Dynamic hook name |
| #1193 | Landing Page Cat – Coming Soon & Maintenance Pages | 26 | 91 | 180 | 600 | | | Non-prefixed class |
| #1194 | Live Composer – Free WordPress Website Builder | 26 | 1,211 | 427 | 10k+ | | | Output is not escaped |
| #1195 | Login Widget With Shortcode | 26 | 335 | 198 | 6k+ | | | wp function not compatible with requires wp |
| #1196 | MakeStories (for Google Web Stories) | 26 | 117 | 416 | 600 | | | Nonce verification recommended |
| #1197 | MaxGalleria | 26 | 278 | 560 | 2k+ | | | Non-prefixed global variable |
| #1198 | Media File Renamer: Rename for better SEO (AI-Powered) | 26 | 154 | 170 | 40k+ | | | Direct Query |
| #1199 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |
| #1200 | Omise Payments | 26 | 358 | 256 | 2k+ | | | Output is not escaped |