| #851 | W4 Post List | 35 | 50 | 138 | 3k+ | | | Non-prefixed global variable |
| #852 | WC Ukraine Shipping – Integration of Nova Poshta and Ukrposhta for WooCommerce | 35 | 504 | 164 | 7k+ | | | Text Domain Mismatch |
| #853 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 2k+ | | | Output is not escaped |
| #854 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #855 | Wired Impact Volunteer Management | 35 | 253 | 175 | 1k+ | | | Output is not escaped |
| #856 | Save and Share Cart for WooCommerce | 35 | 125 | 51 | 600 | | | Text Domain Mismatch |
| #857 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 49 | 230 | 50k+ | | | Non-prefixed hook name |
| #858 | Payment Gateway for PayPal Pro & PayPal Checkout for WooCommerce | 35 | 67 | 147 | 2k+ | | | Request data is not unslashed |
| #859 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #860 | PDF Invoices & Packing Slips for WooCommerce | 35 | 35 | 964 | 300k+ | | | Non-prefixed hook name |
| #861 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #862 | WP Geo | 35 | 180 | 84 | 900 | | | Output is not escaped |
| #863 | WPGraphQL | 35 | 10 | 86 | 30k+ | | | Non-prefixed hook name |
| #864 | WP-PostViews | 35 | 132 | 64 | 100k+ | | | Unsafe printing function |
| #865 | Integration for WooCommerce and QuickBooks | 35 | 263 | 125 | 1k+ | | | Output is not escaped |
| #866 | WPC Badge Management for WooCommerce | 35 | 28 | 129 | 2k+ | | | Missing nonce verification |
| #867 | WP Views Counter | 35 | 81 | 42 | 2k+ | | | Output is not escaped |
| #868 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |
| #869 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #870 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #871 | Ziina | 35 | 8 | 19 | 2k+ | | | wp redirect wp redirect |
| #872 | Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | 36 | 3 | 321 | 10k+ | | | Nonce verification recommended |
| #873 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #874 | BP Profile Search | 36 | 321 | 85 | 5k+ | | | Output is not escaped |
| #875 | Constant Contact Forms | 36 | 39 | 89 | 20k+ | | | Missing nonce verification |
| #876 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #877 | Easy Support Videos – Embed videos in the admin | 36 | 160 | 95 | 500 | | | Output is not escaped |
| #878 | g-FFL Cockpit | 36 | 17 | 220 | 500 | | | Direct Query |
| #879 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #880 | Header Footer Script Adder – Insert Code in Header, Body & Footer | 36 | 203 | 78 | 1k+ | | | Text Domain Mismatch |
| #881 | Injection Guard | 36 | 87 | 45 | 1k+ | | | Unsafe printing function |
| #882 | Jetpack VideoPress | 36 | 618 | 224 | 7k+ | | | Text Domain Mismatch |
| #883 | M Chart | 36 | 29 | 155 | 3k+ | | | Non-prefixed global variable |
| #884 | Materialis Companion | 36 | 129 | 67 | 6k+ | | | Unsafe printing function |
| #885 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #886 | PDF Forms Filler for CF7 | 36 | 185 | 79 | 3k+ | | | Text Domain Mismatch |
| #887 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #888 | ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution | 36 | 63 | 667 | 100k+ | | | Non-prefixed global variable |
| #889 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #890 | Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder | 36 | 162 | 40 | 200k+ | | | Output is not escaped |
| #891 | Bulk Product Editor plugin allows you to create and edit your WooCommerce products and categories with Google Sheets. | 36 | 50 | 105 | 400 | | | Direct Query |
| #892 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | | | Non-prefixed hook name |
| #893 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #894 | Slider Ultimate | 36 | 294 | 80 | 500 | | | Output is not escaped |
| #895 | Video Thumbnails Reloaded | 36 | 343 | 58 | 2k+ | | | Text Domain Mismatch |
| #896 | WC Builder – WooCommerce Page Builder for WPBakery | 36 | 647 | 50 | 1k+ | | | Text Domain Mismatch |
| #897 | When Last Login | 36 | 52 | 123 | 50k+ | | | Non-prefixed global variable |
| #898 | Disable Payment Methods based on cart conditions for WooCommerce | 36 | 158 | 57 | 1k+ | | | Non Singular String Literal Domain |
| #899 | Custom Add to Cart Button Label and Link for WooCommerce | 36 | 371 | 112 | 3k+ | | | Text Domain Mismatch |
| #900 | Guaranteed Reviews Company (Société des Avis Garantis) | 36 | 369 | 197 | 1k+ | | | Output is not escaped |