| #1701 | Theme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons | 31 | 393 | 329 | 6k+ | | | Missing direct file access protection |
| #1702 | Crowdfundly | 31 | 594 | 402 | 500 | | | Output is not escaped |
| #1703 | Custom WP Store Locator | 31 | 26 | 245 | 400 | | | Non-prefixed global variable |
| #1704 | MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | 31 | 663 | 273 | 2k+ | | | Text Domain Mismatch |
| #1705 | DirectoryPress Frontend | 31 | 402 | 563 | 800 | | | Non-prefixed global variable |
| #1706 | Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) | 31 | 113 | 233 | 2k+ | | | Non-prefixed namespace |
| #1707 | Download Plugin | 31 | 78 | 102 | 60k+ | | | Output is not escaped |
| #1708 | Up2pay e-Transactions WooCommerce Payment Gateway | 31 | 459 | 175 | 4k+ | | | Text Domain Mismatch |
| #1709 | EnvoThemes Demo Import | 31 | 221 | 140 | 3k+ | | | Output is not escaped |
| #1710 | Export Order Items for WooCommerce | 31 | 100 | 108 | 1k+ | | | Text Domain Mismatch |
| #1711 | Express Checkout via PayPal for WooCommerce | 31 | 158 | 200 | 800 | | | Nonce verification recommended |
| #1712 | افزونه پیامک حرفه ای فراز اس ام اس | 31 | 89 | 180 | 1k+ | | | wp function not compatible with requires wp |
| #1713 | FastDup – Fastest WordPress Migration & Duplicator | 31 | 83 | 66 | 5k+ | | | wp function not compatible with requires wp |
| #1714 | FraudLabs Pro for WooCommerce | 31 | 169 | 213 | 1k+ | | | Request data is not unslashed |
| #1715 | g-FFL Checkout | 31 | 249 | 300 | 600 | | | Request data is not unslashed |
| #1716 | Gabfire Widget Pack | 31 | 1,041 | 60 | 600 | | | Output is not escaped |
| #1717 | WP Gravity Forms Constant Contact Plugin | 31 | 684 | 164 | 600 | | | Text Domain Mismatch |
| #1718 | GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets | 31 | 402 | 156 | 1k+ | | | Text Domain Mismatch |
| #1719 | HFD ePost Integration | 31 | 186 | 110 | 1k+ | | | Text Domain Mismatch |
| #1720 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 62 | 300k+ | | | Output is not escaped |
| #1721 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | | | Text Domain Mismatch |
| #1722 | HT Mega – Absolute Addons for WPBakery Page Builder | 31 | 2,740 | 115 | 900 | | | Text Domain Mismatch |
| #1723 | Image Hotspot – Map Image Annotation | 31 | 95 | 287 | 3k+ | | | Non-prefixed global variable |
| #1724 | ImgSEO – AI Image Alt Text Generator & Image SEO Tools | 31 | 1 | 677 | 500 | | | Direct Query |
| #1725 | Interactive Image Map Builder | 31 | 160 | 381 | 1k+ | | | Non-prefixed global variable |
| #1726 | Kindeditor For WordPress | 31 | 63 | 130 | 500 | | | Non-prefixed global variable |
| #1727 | Linguise – AI Automatic Multilingual Translation | 31 | 61 | 284 | 1k+ | | | Non-prefixed global variable |
| #1728 | Keywords to Links Converter | 31 | 288 | 144 | 700 | | | Text Domain Mismatch |
| #1729 | Login rebuilder | 31 | 406 | 226 | 20k+ | | | Non Singular String Literal Domain |
| #1730 | Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity | 31 | 122 | 131 | 2k+ | | | Output is not escaped |
| #1731 | LWS Tools | 31 | 104 | 134 | 10k+ | | | Request data is not unslashed |
| #1732 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | | | Unsafe printing function |
| #1733 | MainWP Dashboard: Self-hosted WordPress Management for Agencies | 31 | 95 | 317 | 20k+ | | | Interpolated SQL is not prepared |
| #1734 | Melapress Login Security | 31 | 69 | 278 | 2k+ | | | Non-prefixed global variable |
| #1735 | Nova Blocks by Pixelgrade | 31 | 209 | 110 | 800 | | | Output is not escaped |
| #1736 | Openpay Cards Plugin | 31 | 166 | 105 | 3k+ | | | Text Domain Mismatch |
| #1737 | Openpay Stores Plugin | 31 | 121 | 75 | 1k+ | | | Non-prefixed global variable |
| #1738 | PanoPress | 31 | 111 | 234 | 2k+ | | | Output is not escaped |
| #1739 | Patreon WordPress | 31 | 276 | 339 | 3k+ | | | Output is not escaped |
| #1740 | PayKeeper Payment Gateway for WooCommerce | 31 | 113 | 44 | 500 | | | Non Singular String Literal Domain |
| #1741 | افزونه پیامک ووکامرس Persian WooCommerce SMS | 31 | 72 | 269 | 40k+ | | | Nonce verification recommended |
| #1742 | Podamibe Simple Footer Widget Area | 31 | 596 | 57 | 2k+ | | | wp function not compatible with requires wp |
| #1743 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #1744 | Portfolio, Gallery, Product Catalog – Grid KIT Portfolio | 31 | 61 | 329 | 6k+ | | | Non-prefixed global variable |
| #1745 | Post Pay Counter | 31 | 639 | 238 | 1k+ | | | Output is not escaped |
| #1746 | Product Configurator for WooCommerce | 31 | 41 | 562 | 3k+ | | | Non-prefixed hook name |
| #1747 | Active Products Tables for WooCommerce. Use constructor to create tables | 31 | 364 | 424 | 1k+ | | | Output is not escaped |
| #1748 | Push notification for Mobile and Web app | 31 | 87 | 83 | 400 | | | Non Singular String Literal Domain |
| #1749 | Qi Blocks | 31 | 46 | 345 | 60k+ | | | Non-prefixed global variable |
| #1750 | Qode Essential Addons | 31 | 55 | 295 | 10k+ | | | Non-prefixed global variable |