| #1551 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #1552 | WP Popular Posts | 29 | 77 | 300 | 100k+ | | | Non-prefixed global variable |
| #1553 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | | | Output is not escaped |
| #1554 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |
| #1555 | WP-PostRatings | 29 | 425 | 384 | 30k+ | | | Output is not escaped |
| #1556 | WP Subscribe | 29 | 79 | 79 | 7k+ | | | Non-prefixed class |
| #1557 | WPComplete | 29 | 383 | 333 | 1k+ | | | Output is not escaped |
| #1558 | Xagio SEO & AEO – AI SEO for Google Rankings & AI Visibility | 29 | 2 | 1,277 | 10k+ | | | Direct Query |
| #1559 | XML for Google Merchant Center | 29 | 52 | 312 | 3k+ | | | Non-prefixed global variable |
| #1560 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #1561 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 173 | 479 | 100k+ | | | Interpolated SQL is not prepared |
| #1562 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #1563 | AI Product Tools – Bulk Product Content Generator & AI Toolkit for WooCommerce | 30 | 508 | 562 | 400 | | | SQL query is not prepared |
| #1564 | Aitasi Coming Soon | 30 | 516 | 186 | 1k+ | | | Output is not escaped |
| #1565 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #1566 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #1567 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #1568 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #1569 | Arile Extra | 30 | 537 | 570 | 10k+ | | | Non-prefixed global variable |
| #1570 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #1571 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #1572 | Blockons – Gutenberg blocks for WordPress and WooCommerce websites | 30 | 69 | 205 | 700 | | | Non-prefixed global variable |
| #1573 | BrightEdge Autopilot | 30 | 107 | 31 | 600 | | | curl curl setopt |
| #1574 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #1575 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #1576 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | | | Non-prefixed global variable |
| #1577 | Colete-Online | 30 | 776 | 346 | 600 | | | Text Domain Mismatch |
| #1578 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 400 | | | rand rand |
| #1579 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | 30 | 334 | 284 | 500 | | | Output is not escaped |
| #1580 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #1581 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #1582 | EDI – Обмен данными между WooCommerce и 1С | 30 | 284 | 101 | 600 | | | Text Domain Mismatch |
| #1583 | Easy Affiliate Links | 30 | 186 | 198 | 7k+ | | | Missing direct file access protection |
| #1584 | Easy Custom Auto Excerpt | 30 | 84 | 166 | 6k+ | | | Non-prefixed global variable |
| #1585 | EasyParcel Shipping– All-in-one Shipping Solution, Real-Time Shipping Rates | 30 | 37 | 608 | 600 | | | Non-prefixed global variable |
| #1586 | Edwiser Bridge – WordPress Moodle Integration | 30 | 4 | 669 | 4k+ | | | Non-prefixed hook name |
| #1587 | Element Invader – Template Kits for Elementor | 30 | 274 | 130 | 3k+ | | | Output is not escaped |
| #1588 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #1589 | Epeken All Kurir for Woocommerce | 30 | 590 | 1,246 | 400 | | | Missing nonce verification |
| #1590 | Eway Payment Gateway | 30 | 509 | 92 | 800 | | | Missing Translators Comment |
| #1591 | Exclusive Addons for Elementor | 30 | 3,630 | 263 | 50k+ | | | Text Domain Mismatch |
| #1592 | Export Plugins and Templates | 30 | 143 | 33 | 1k+ | | | file system operations fread |
| #1593 | PiWeb Export Customers Users & Guest customer to CSV for WooCommerce | 30 | 173 | 75 | 1k+ | | | Text Domain Mismatch |
| #1594 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #1595 | Formzu WP | 30 | 167 | 163 | 3k+ | | | Text Domain Mismatch |
| #1596 | GlobalPayments Gateway Provider for WooCommerce | 30 | 640 | 172 | 1k+ | | | Text Domain Mismatch |
| #1597 | Kargo Takip, Kargo SMS, İlçe Mahalle Sözleşme by Hezarfen | 30 | 70 | 297 | 2k+ | | | Non-prefixed global variable |
| #1598 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #1599 | Invisible reCaptcha for WordPress | 30 | 90 | 185 | 80k+ | | | Input is not sanitized |
| #1600 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |