| #1851 | Insights from Google PageSpeed | 32 | 414 | 475 | 20k+ | | | Text Domain Mismatch |
| #1852 | GSheetConnector For Ninja Forms | 32 | 165 | 93 | 1k+ | | | Unsafe printing function |
| #1853 | GSheetConnector For WPForms – WPForms Google Sheets Integration (Real-Time Sync) | 32 | 120 | 145 | 8k+ | | | Non-prefixed global variable |
| #1854 | Translate WordPress with GTranslate | 32 | 82 | 364 | 900k+ | | | Non-prefixed global variable |
| #1855 | Gwolle Guestbook | 32 | 269 | 527 | 20k+ | | | Output is not escaped |
| #1856 | Honeypot Toolkit | 32 | 155 | 770 | 400 | | | Missing nonce verification |
| #1857 | HTML5 jQuery Audio Player | 32 | 251 | 153 | 1k+ | | | Unsafe printing function |
| #1858 | Image Slider Slideshow | 32 | 409 | 171 | 2k+ | | | Text Domain Mismatch |
| #1859 | RealHomes Stripe Payments | 32 | 201 | 33 | 500 | | | Exception output is not escaped |
| #1860 | IP2Location Redirection | 32 | 201 | 122 | 7k+ | | | Output is not escaped |
| #1861 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #1862 | Juiz Last Tweet Widget | 32 | 136 | 53 | 500 | | | Output is not escaped |
| #1863 | Manager for IcoMoon | 32 | 270 | 68 | 400 | | | Short PHP open tag found |
| #1864 | MapPress Maps for WordPress | 32 | 695 | 133 | 30k+ | | | Missing Arg Domain |
| #1865 | Muslim Prayer Time-Salah/Iqamah | 32 | 155 | 179 | 400 | | | date date |
| #1866 | Members – Membership & User Role Editor Plugin | 32 | 233 | 259 | 300k+ | | | Output is not escaped |
| #1867 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 32 | 159 | 62 | 10k+ | | | Output is not escaped |
| #1868 | WP Mobile Menu – The Mobile-Friendly Responsive Menu | 32 | 990 | 195 | 70k+ | | | Output is not escaped |
| #1869 | Mollie Payments for WooCommerce | 32 | 71 | 134 | 100k+ | | | Dynamic hook name |
| #1870 | Moyasar | 32 | 589 | 230 | 700 | | | Text Domain Mismatch |
| #1871 | Notice Bar | 32 | 95 | 284 | 700 | | | Non-prefixed global variable |
| #1872 | Opal Mega Menu | 32 | 419 | 119 | 400 | | | Text Domain Mismatch |
| #1873 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #1874 | Organization chart | 32 | 187 | 334 | 5k+ | | | SQL query is not prepared |
| #1875 | Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin | 32 | 446 | 173 | 5k+ | | | Text Domain Mismatch |
| #1876 | DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | 32 | 166 | 119 | 5k+ | | | Output is not escaped |
| #1877 | Account Engagement | 32 | 115 | 74 | 2k+ | | | Output is not escaped |
| #1878 | Barion Payment Gateway for WooCommerce | 32 | 67 | 152 | 6k+ | | | Non-prefixed global variable |
| #1879 | Autopay dla WooCommerce | 32 | 95 | 83 | 900 | | | Output is not escaped |
| #1880 | Persian Admnin Fonts | 32 | 343 | 468 | 500 | | | Non-prefixed global variable |
| #1881 | PilotPress | 32 | 150 | 285 | 900 | | | Output is not escaped |
| #1882 | TS Poll – Survey, Versus Poll, Image Poll, Video Poll | 32 | 570 | 171 | 4k+ | | | Text Domain Mismatch |
| #1883 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 32 | 348 | 258 | 50k+ | | | Output is not escaped |
| #1884 | Posti Shipping | 32 | 664 | 157 | 1k+ | | | Text Domain Mismatch |
| #1885 | Volunteer Sign Up Sheets | 32 | 967 | 401 | 1k+ | | | Output is not escaped |
| #1886 | Quick Featured Images | 32 | 436 | 323 | 50k+ | | | Non-prefixed global variable |
| #1887 | Relevanssi – A Better Search | 32 | 86 | 266 | 100k+ | | | Missing direct file access protection |
| #1888 | Responsive Filterable Portfolio Gallery – Media Grid & Video Portfolio | 32 | 436 | 163 | 1k+ | | | Output is not escaped |
| #1889 | Restrict Usernames Emails Characters | 32 | 327 | 367 | 1k+ | | | Output is not escaped |
| #1890 | WowRevenue – Product Bundles & Bulk Discounts | 32 | 13 | 2,027 | 1k+ | | | Non-prefixed global variable |
| #1891 | Revolut Gateway for WooCommerce | 32 | 85 | 157 | 7k+ | | | Input is not sanitized |
| #1892 | RSS for Yandex Turbo | 32 | 687 | 307 | 20k+ | | | Unsafe printing function |
| #1893 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #1894 | Showcase IDX Real Estate Search & Lead Capture | 32 | 123 | 52 | 2k+ | | | Output is not escaped |
| #1895 | Simple Ajax Chat – Add a Fast, Secure Chat Box | 32 | 107 | 266 | 2k+ | | | Output is not escaped |
| #1896 | Site Search 360 | 32 | 202 | 213 | 400 | | | Output is not escaped |
| #1897 | Sky Addons for Elementor | 32 | 85 | 351 | 2k+ | | | Non-prefixed namespace |
| #1898 | Spoki – Chat Buttons and WooCommerce Notifications | 32 | 1,074 | 260 | 700 | | | Unsafe printing function |
| #1899 | Stock Locations for WooCommerce | 32 | 549 | 360 | 900 | | | Output is not escaped |
| #1900 | Stock Sync for WooCommerce | 32 | 362 | 232 | 1k+ | | | Text Domain Mismatch |