| #1251 | Accordions – Responsive Accordion & FAQ Plugin for WordPress | 27 | 554 | 158 | 1k+ | | | Text Domain Mismatch |
| #1252 | Addon Elements for Elementor (formerly Elementor Addon Elements) | 27 | 4,065 | 103 | 90k+ | | | Text Domain Mismatch |
| #1253 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 146 | 274 | 50k+ | | | Non-prefixed global variable |
| #1254 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #1255 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #1256 | Arconix FAQ | 27 | 552 | 201 | 6k+ | | | Text Domain Mismatch |
| #1257 | Lean Player – Video and Audio Player with Playlist for WordPress, Elementor and Gutenberg | 27 | 1,615 | 466 | 2k+ | | | Text Domain Mismatch |
| #1258 | BackUpWordPress | 27 | 245 | 271 | 90k+ | | | Non-prefixed global variable |
| #1259 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #1260 | WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | 27 | 692 | 381 | 3k+ | | | Text Domain Mismatch |
| #1261 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | | | Non-prefixed function |
| #1262 | Divi Collage | 27 | 516 | 1,183 | 700 | | | Non-prefixed global variable |
| #1263 | Comment Link Remove and Other Comment Tools | 27 | 691 | 132 | 7k+ | | | Text Domain Mismatch |
| #1264 | Contact Form Generator : Creative form builder for WordPress | 27 | 1,076 | 1,510 | 800 | | | Output is not escaped |
| #1265 | Duplicate Post | 27 | 447 | 274 | 300k+ | | | Unsafe printing function |
| #1266 | Polls CP | 27 | 399 | 500 | 400 | | | Output is not escaped |
| #1267 | Custom Scrollbar | 27 | 184 | 191 | 2k+ | | | Output is not escaped |
| #1268 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #1269 | Gallery – Photo Albums Plugin | 27 | 647 | 252 | 2k+ | | | Output is not escaped |
| #1270 | Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 27 | 289 | 751 | 10k+ | | | Output is not escaped |
| #1271 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | | | Output is not escaped |
| #1272 | Embedder for Google Reviews | 27 | 531 | 1,333 | 6k+ | | | Non-prefixed global variable |
| #1273 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | | | Output is not escaped |
| #1274 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #1275 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #1276 | Extra Product Options for WooCommerce | 27 | 548 | 1,342 | 600 | | | Non-prefixed global variable |
| #1277 | FG Joomla to WordPress | 27 | 278 | 101 | 7k+ | | | Unsafe printing function |
| #1278 | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 27 | 1,629 | 360 | 7k+ | | | Unsafe printing function |
| #1279 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 27 | 212 | 497 | 2k+ | | | Non-prefixed global variable |
| #1280 | StylePress for Elementor | 27 | 767 | 283 | 600 | | | Text Domain Mismatch |
| #1281 | Login for Google Apps | 27 | 139 | 85 | 10k+ | | | Exception output is not escaped |
| #1282 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #1283 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #1284 | GSpeech TTS – WordPress Text To Speech Plugin | 27 | 842 | 333 | 3k+ | | | Output is not escaped |
| #1285 | Hester Core | 27 | 253 | 103 | 10k+ | | | Output is not escaped |
| #1286 | HM Multiple Roles | 27 | 537 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #1287 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #1288 | Import Eventbrite Events | 27 | 156 | 575 | 3k+ | | | Non-prefixed global variable |
| #1289 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #1290 | My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam | 27 | 713 | 321 | 10k+ | | | Text Domain Mismatch |
| #1291 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | | | Non-prefixed global variable |
| #1292 | Liza Widget For Spotify and Elementor | 27 | 609 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #1293 | Loco Translate | 27 | 451 | 225 | 1m+ | | | Output is not escaped |
| #1294 | Login Security Solution | 27 | 216 | 154 | 4k+ | | | Output is not escaped |
| #1295 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 27 | 34 | 518 | 10k+ | | | Non-prefixed global variable |
| #1296 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #1297 | MakeCommerce for WooCommerce | 27 | 826 | 452 | 3k+ | | | Text Domain Mismatch |
| #1298 | Online Booking & Scheduling Calendar for WordPress by vcita | 27 | 473 | 161 | 1k+ | | | Output is not escaped |
| #1299 | Memberful – Membership Plugin | 27 | 351 | 336 | 1k+ | | | Text Domain Mismatch |
| #1300 | MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) | 27 | 154 | 551 | 5k+ | | | Non-prefixed global variable |