| #701 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #702 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #703 | Polls CP | 27 | 399 | 500 | 400 | | | Output is not escaped |
| #704 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #705 | Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 27 | 289 | 751 | 10k+ | | | Output is not escaped |
| #706 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | | | Output is not escaped |
| #707 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #708 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #709 | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 27 | 1,629 | 360 | 7k+ | | | Unsafe printing function |
| #710 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 27 | 213 | 495 | 2k+ | | | Non-prefixed global variable |
| #711 | StylePress for Elementor | 27 | 767 | 283 | 600 | | | Text Domain Mismatch |
| #712 | Login for Google Apps | 27 | 139 | 85 | 10k+ | | | Exception output is not escaped |
| #713 | Hester Core | 27 | 253 | 103 | 10k+ | | | Output is not escaped |
| #714 | HM Multiple Roles | 27 | 537 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #715 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #716 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #717 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #718 | MakeCommerce for WooCommerce | 27 | 826 | 452 | 3k+ | | | Text Domain Mismatch |
| #719 | MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) | 27 | 154 | 551 | 5k+ | | | Non-prefixed global variable |
| #720 | Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher | 27 | 465 | 345 | 3k+ | | | Text Domain Mismatch |
| #721 | MW WP Form | 27 | 334 | 219 | 200k+ | | | Output is not escaped |
| #722 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | | | Output is not escaped |
| #723 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | | | Text Domain Mismatch |
| #724 | Pie Register – User Registration, Profiles & Content Restriction | 27 | | 1,779 | 1k+ | | | Non-prefixed global variable |
| #725 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | | | Missing Translators Comment |
| #726 | Quick Paypal Payments | 27 | 101 | 303 | 1k+ | | | Non-prefixed function |
| #727 | RS Elements Elementor Addon | 27 | 2,026 | 321 | 500 | | | Text Domain Mismatch |
| #728 | Side Cart Woocommerce | Woocommerce Cart | 27 | 490 | 439 | 80k+ | | | Output is not escaped |
| #729 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #730 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | | Text Domain Mismatch |
| #731 | Social Web Suite – Social Media Auto Post, Social Media Auto Publish | 27 | 74 | 164 | 500 | | | Non-prefixed global variable |
| #732 | Stream Video Player | 27 | 220 | 135 | 600 | | | Output is not escaped |
| #733 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #734 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #735 | Theme One Click Demo Importer | 27 | 210 | 157 | 500 | | | Text Domain Mismatch |
| #736 | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | 27 | 165 | 430 | 100k+ | | | Non-prefixed global variable |
| #737 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 27 | 25 | 1,320 | 3k+ | | | Non-prefixed global variable |
| #738 | Ultimate Watermark – Image Watermark, Image Protection & Bulk Watermarking | 27 | 164 | 303 | 1k+ | | | Nonce verification recommended |
| #739 | Under Construction, Coming Soon & Maintenance Mode | 27 | 401 | 148 | 10k+ | | | Output is not escaped |
| #740 | Video Gallery for WooCommerce – Add Product Video & Featured Video | 27 | 116 | 476 | 3k+ | | | Non-prefixed global variable |
| #741 | VOD Infomaniak | 27 | 797 | 385 | 20k+ | | | Output is not escaped |
| #742 | Watu Quiz | 27 | 1,089 | 1,014 | 3k+ | | | Output is not escaped |
| #743 | WC Booster | 27 | 191 | 282 | 800 | | | Non-prefixed global variable |
| #744 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #745 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #746 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #747 | WP Job Manager | 27 | 93 | 582 | 80k+ | | | Non-prefixed hook name |
| #748 | WP Activity Log | 27 | 96 | 230 | 300k+ | | | Nonce verification recommended |
| #749 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | | Non-prefixed global variable |
| #750 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |