| #751 | Events Calendar by FooEvents | 35 | 56 | 59 | 4k+ | | | Non-prefixed global variable |
| #752 | GDPR Compliance & Cookie Consent | 35 | 251 | 61 | 4k+ | | | Output is not escaped |
| #753 | Gum Addon for Elementor | 35 | 660 | 72 | 50k+ | | | Text Domain Mismatch |
| #754 | Ultimate Addons for Elementor | 35 | 70 | 226 | 2m+ | | | Non-prefixed hook name |
| #755 | Help Scout | 35 | 11 | 13 | 400 | | | Missing direct file access protection |
| #756 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | | Direct Query |
| #757 | Hyve Lite – AI Chatbot, ChatGPT-Powered Conversational Support | 35 | 1 | 40 | 7k+ | | | Direct Query |
| #758 | InPost PL | 35 | 2 | 925 | 10k+ | | | Non-prefixed global variable |
| #759 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #760 | Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor | 35 | 6 | 200 | 10k+ | | | Non-prefixed global variable |
| #761 | Issuu PDF Sync | 35 | 159 | 28 | 900 | | | Text Domain Mismatch |
| #762 | Kargo Takip | 35 | 84 | 142 | 3k+ | | | Missing nonce verification |
| #763 | Kirki – Freeform Page Builder, Website Builder & Customizer | 35 | 1 | 773 | 500k+ | | | Nonce verification recommended |
| #764 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | | | Non-prefixed hook name |
| #765 | Topic Progression Using Storyline/Captivate for LearnDash | 35 | 382 | 25 | 400 | | | Text Domain Mismatch |
| #766 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 273 | 127 | 5k+ | | | Output is not escaped |
| #767 | MapSVG – Vector maps, Image maps, Google Maps | 35 | 74 | 47 | 1k+ | | | Missing direct file access protection |
| #768 | MeetingHub – Webinar & Meeting Plugin for Zoom, Google Meet, Webex, Microsoft Teams, & Jitsi Meet | 35 | 33 | 289 | 500 | | | Non-prefixed global variable |
| #769 | More Widgets | 35 | 55 | 15 | 1k+ | | | Output is not escaped |
| #770 | Moyasar | 35 | 436 | 128 | 700 | | | Text Domain Mismatch |
| #771 | Never Let Me Go | 35 | 34 | 47 | 400 | | | Non-prefixed global variable |
| #772 | Noted! | 35 | 5 | 22 | 1k+ | | | Non-prefixed global variable |
| #773 | Paytrail for WooCommerce | 35 | 28 | 46 | 3k+ | | | Non-prefixed global variable |
| #774 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | | | SQL query is not prepared |
| #775 | PiWeb Delivery & Pickup Date Time for WooCommerce | 35 | 377 | 163 | 500 | | | Text Domain Mismatch |
| #776 | Pie Calendar – Events Calendar Made Simple | 35 | 83 | 53 | 1k+ | | | Text Domain Mismatch |
| #777 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | | | Output is not escaped |
| #778 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | | | Post Not In exclude |
| #779 | Presto Player | 35 | 59 | 77 | 100k+ | | | Missing Arg Domain |
| #780 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | | | Non-prefixed function |
| #781 | Random Post on Refresh | 35 | 3 | 8 | 500 | | | Non-prefixed hook name |
| #782 | Recurio – Ultimate Subscription for WooCommerce | 35 | 34 | 304 | 1k+ | | | Direct Query |
| #783 | Related Posts for WordPress | 35 | 207 | 180 | 10k+ | | | Output is not escaped |
| #784 | Restrict Elementor Widgets, Columns and Sections | 35 | 18 | 53 | 500 | | | Non-prefixed function |
| #785 | RTMKit | 35 | 5 | 378 | 50k+ | | | Non-prefixed global variable |
| #786 | SEO Slider | 35 | 242 | 17 | 1k+ | | | Text Domain Mismatch |
| #787 | Security Optimizer – The All-In-One Protection Plugin | 35 | 40 | 82 | 1m+ | | | Request data is not unslashed |
| #788 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 82 | 148 | 100k+ | | | Output is not escaped |
| #789 | Gutenberg Blocks – Unlimited blocks For Gutenberg | 35 | 51 | 247 | 900 | | | Missing nonce verification |
| #790 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | | Text Domain Mismatch |
| #791 | W4 Post List | 35 | 50 | 138 | 3k+ | | | Non-prefixed global variable |
| #792 | Conditional Payments and Shipping for WooCommerce | 35 | 338 | 27 | 1k+ | | | Text Domain Mismatch |
| #793 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 1k+ | | | Output is not escaped |
| #794 | Wired Impact Volunteer Management | 35 | 253 | 175 | 1k+ | | | Output is not escaped |
| #795 | Asaas Gateway for WooCommerce | 35 | 12 | 109 | 8k+ | | | Non-prefixed global variable |
| #796 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 49 | 229 | 50k+ | | | Non-prefixed hook name |
| #797 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #798 | PDF Invoices & Packing Slips for WooCommerce | 35 | 35 | 956 | 300k+ | | | Non-prefixed hook name |
| #799 | Brevo for WooCommerce | 35 | 116 | 67 | 30k+ | | | Output is not escaped |
| #800 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |