| #1351 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #1352 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #1353 | WPBase Cache | 27 | 189 | 113 | 3k+ | | | Text Domain Mismatch |
| #1354 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | | Non-prefixed global variable |
| #1355 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | | | Non-prefixed global variable |
| #1356 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #1357 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | | | Text Domain Mismatch |
| #1358 | Vertex Addons for Elementor | 28 | 232 | 413 | 400 | | | Output is not escaped |
| #1359 | AForms — Form Builder for Price Calculator & Cost Estimation | 28 | 564 | 95 | 3k+ | | | Text Domain Mismatch |
| #1360 | AJAX Login and Registration modal popup + inline form | 28 | 157 | 261 | 3k+ | | | Output is not escaped |
| #1361 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #1362 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #1363 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #1364 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms | 28 | 659 | 359 | 400 | | | Text Domain Mismatch |
| #1365 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #1366 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |
| #1367 | Maspik – Ultimate Spam Protection | 28 | 212 | 862 | 30k+ | | | Missing nonce verification |
| #1368 | Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin | 28 | 639 | 85 | 1k+ | | | Text Domain Mismatch |
| #1369 | Database Cleaner | 28 | 139 | 294 | 10k+ | | | Direct Query |
| #1370 | Deposits & Partial Payments for WooCommerce – Bayna | 28 | 593 | 336 | 1k+ | | | Output is not escaped |
| #1371 | Dynamic User Directory | 28 | 403 | 256 | 1k+ | | | Output is not escaped |
| #1372 | Discount Rules and Dynamic Pricing for WooCommerce | 28 | 181 | 334 | 10k+ | | | Output is not escaped |
| #1373 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #1374 | Educare – Students & Result Management System | 28 | 1,114 | 1,043 | 800 | | | Missing nonce verification |
| #1375 | Event Tickets Manager for WooCommerce | 28 | 182 | 655 | 1k+ | | | Non-prefixed global variable |
| #1376 | Expand Divi | 28 | 91 | 100 | 1k+ | | | Non-prefixed global variable |
| #1377 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #1378 | Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules | 28 | 187 | 505 | 2k+ | | | Non-prefixed global variable |
| #1379 | Friends | 28 | 164 | 679 | 1k+ | | | Non-prefixed global variable |
| #1380 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #1381 | گیتلند | درگاه پرداخت هوشمند گیتلند | 28 | 327 | 235 | 3k+ | | | Output is not escaped |
| #1382 | Geo Mashup | 28 | 775 | 232 | 1k+ | | | Text Domain Mismatch |
| #1383 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #1384 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |
| #1385 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #1386 | HootKit | 28 | 429 | 1,295 | 8k+ | | | Non-prefixed global variable |
| #1387 | IdeaPush | 28 | 283 | 298 | 800 | | | Output is not escaped |
| #1388 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #1389 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 200k+ | | | Missing Arg Domain |
| #1390 | Kama Thumbnail | 28 | 80 | 47 | 9k+ | | | Output is not escaped |
| #1391 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #1392 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #1393 | Loginfy – Custom Login Page Customizer | 28 | 338 | 398 | 2k+ | | | Output is not escaped |
| #1394 | Maven Algolia | 28 | 148 | 89 | 6k+ | | | Non Singular String Literal Domain |
| #1395 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 5k+ | | | Non Singular String Literal Domain |
| #1396 | درگاه پرداخت بانک ملت ووکامرس | 28 | 61 | 130 | 2k+ | | | Request data is not unslashed |
| #1397 | MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | 28 | 62 | 246 | 600k+ | | | Non-prefixed global variable |
| #1398 | My auctions allegro | 28 | 483 | 235 | 500 | | | Non Singular String Literal Domain |
| #1399 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #1400 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | | | Non-prefixed global variable |