| #1201 | Online Contact Widget-多合一在线客服插件 | 26 | 708 | 80 | 800 | | | Non Singular String Literal Domain |
| #1202 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 599 | 6k+ | | | Request data is not unslashed |
| #1203 | Open User Map – Interactive Leaflet Maps | 26 | 895 | 988 | 10k+ | | | Non-prefixed global variable |
| #1204 | Organic Builder Widgets – Simple WordPress Page Builder | 26 | 1,034 | 125 | 3k+ | | | Output is not escaped |
| #1205 | Paytium: Mollie payment forms & donations | 26 | 506 | 551 | 3k+ | | | Unsafe printing function |
| #1206 | PDF for WPForms + Drag and Drop Template Builder | 26 | 674 | 113 | 1k+ | | | wp function not compatible with requires wp |
| #1207 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | | Output is not escaped |
| #1208 | Crowdsignal Dashboard – Polls, Surveys & more | 26 | 481 | 491 | 200k+ | | | Unsafe printing function |
| #1209 | Polylang | 26 | 36 | 564 | 800k+ | | | Non-prefixed hook name |
| #1210 | Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | 26 | 525 | 240 | 600 | | | Text Domain Mismatch |
| #1211 | Post List Designer – Category Post, Recent Post, Post List | 26 | 542 | 1,320 | 1k+ | | | Non-prefixed global variable |
| #1212 | Premmerce User Roles | 26 | 597 | 1,357 | 600 | | | Non-prefixed global variable |
| #1213 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #1214 | Product Table For WooCommerce | 26 | 191 | 858 | 600 | | | Non-prefixed global variable |
| #1215 | Profile Extra Fields by BestWebSoft | 26 | 514 | 532 | 2k+ | | | Text Domain Mismatch |
| #1216 | RestaurantPress | 26 | 265 | 518 | 600 | | | Output is not escaped |
| #1217 | Role Based Pricing for Woo by Meow Crew | 26 | 548 | 1,354 | 2k+ | | | Non-prefixed global variable |
| #1218 | Send Users Email – Email Subscribers, Email Marketing Newsletter | 26 | 188 | 415 | 5k+ | | | Non-prefixed global variable |
| #1219 | SEO Booster | 26 | 403 | 1,331 | 1k+ | | | Non-prefixed global variable |
| #1220 | SP Move Login | 26 | 881 | 215 | 6k+ | | | Text Domain Mismatch |
| #1221 | Sliced Invoices – WordPress Invoice Plugin | 26 | 684 | 455 | 5k+ | | | Output is not escaped |
| #1222 | Video Gallery – Vimeo and YouTube Gallery | 26 | 561 | 794 | 6k+ | | | Non-prefixed global variable |
| #1223 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #1224 | StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart | 26 | 125 | 420 | 2k+ | | | Non-prefixed global variable |
| #1225 | Subscriber by BestWebSoft | 26 | 550 | 376 | 900 | | | Text Domain Mismatch |
| #1226 | SV Proven Expert | 26 | 747 | 380 | 900 | | | Output is not escaped |
| #1227 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 26 | 351 | 232 | 3k+ | | | Unsafe printing function |
| #1228 | Theater for WordPress | 26 | 348 | 344 | 600 | | | Output is not escaped |
| #1229 | Ultimate Reviews | 26 | 515 | 345 | 500 | | | Output is not escaped |
| #1230 | UpdraftCentral Dashboard | 26 | 267 | 180 | 5k+ | | | Missing Translators Comment |
| #1231 | URL Image Importer – Import External Images to the Media Library from URL, CSV & XML | 26 | 143 | 239 | 700 | | | Missing nonce verification |
| #1232 | User Avatar | 26 | 104 | 173 | 4k+ | | | Non-prefixed constant |
| #1233 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | | | Text Domain Mismatch |
| #1234 | VikWidgetsLoader – Collection of Widgets | 26 | 1,182 | 538 | 1k+ | | | Output is not escaped |
| #1235 | Virtue/Ascend/Pinnacle Toolkit | 26 | 605 | 300 | 30k+ | | | Output is not escaped |
| #1236 | Visitors Online by BestWebSoft | 26 | 512 | 269 | 1k+ | | | Text Domain Mismatch |
| #1237 | Conditional Fees for WooCommerce Lite | 26 | 566 | 1,303 | 500 | | | Non-prefixed global variable |
| #1238 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | | Direct Query |
| #1239 | Parcel Pro | 26 | 171 | 220 | 600 | | | Output is not escaped |
| #1240 | Premmerce SEO for WooCommerce | 26 | 550 | 1,285 | 1k+ | | | Non-prefixed global variable |
| #1241 | Set Price Note (Units, Offers, Editions) for WooCommerce | 26 | 596 | 1,307 | 800 | | | Non-prefixed global variable |
| #1242 | Shipping Method Display Style for WooCommerce | 26 | 529 | 1,308 | 2k+ | | | Non-prefixed global variable |
| #1243 | XL NMI Gateway for WooCommerce | 26 | 695 | 436 | 1k+ | | | Text Domain Mismatch |
| #1244 | Faktur Pro for WooCommerce | 26 | 416 | 218 | 1k+ | | | Text Domain Mismatch |
| #1245 | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | 26 | 2,652 | 2,093 | 10k+ | | | Text Domain Mismatch |
| #1246 | WP Flashy Marketing Automation | 26 | 432 | 186 | 2k+ | | | Text Domain Mismatch |
| #1247 | HireZoot – Job Listings, Career Page & Recruitment Tool | 26 | 80 | 620 | 40k+ | | | Non-prefixed global variable |
| #1248 | WPCOM Member | 26 | 432 | 638 | 1k+ | | | Non Singular String Literal Domain |
| #1249 | WPFrank Companion | 26 | 2,356 | 865 | 1k+ | | | Text Domain Mismatch |
| #1250 | Accordions – Responsive Accordion & FAQ Plugin for WordPress | 27 | 554 | 158 | 1k+ | | | Text Domain Mismatch |