| #601 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | | Direct Query |
| #602 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #603 | Keyring | 35 | 233 | 203 | 1k+ | | | Output is not escaped |
| #604 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | | | Non-prefixed hook name |
| #605 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |
| #606 | MainWP Child Reports | 35 | 49 | 116 | 100k+ | | | Non-prefixed hook name |
| #607 | MapSVG – Vector maps, Image maps, Google Maps | 35 | 74 | 47 | 1k+ | | | Missing direct file access protection |
| #608 | Moyasar | 35 | 506 | 128 | 700 | | | Text Domain Mismatch |
| #609 | Paytrail for WooCommerce | 35 | 28 | 46 | 3k+ | | | Non-prefixed global variable |
| #610 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | | | Output is not escaped |
| #611 | Min Max Step Quantity Limits Manager for WooCommerce | 35 | 67 | 158 | 3k+ | | | Non-prefixed global variable |
| #612 | Protect the Children! | 35 | 2 | 34 | 1k+ | | | Missing nonce verification |
| #613 | Related Posts by Taxonomy | 35 | 131 | 97 | 10k+ | | | Output is not escaped |
| #614 | ReOrder Posts within Categories | 35 | 39 | 207 | 7k+ | | | Non-prefixed global variable |
| #615 | Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | 35 | 83 | 76 | 2k+ | | | Output is not escaped |
| #616 | Svea Checkout for WooCommerce | 35 | 18 | 72 | 800 | | | Request data is not unslashed |
| #617 | ووسلام – همگام سازی ووکامرس و باسلام | 35 | 74 | 392 | 4k+ | | | Non-prefixed global variable |
| #618 | Starter Sites & Templates by Neve | 35 | 28 | 88 | 100k+ | | | Non-prefixed hook name |
| #619 | W4 Post List | 35 | 50 | 138 | 3k+ | | | Non-prefixed global variable |
| #620 | WC Ukraine Shipping – Integration of Nova Poshta and Ukrposhta for WooCommerce | 35 | 504 | 164 | 7k+ | | | Text Domain Mismatch |
| #621 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #622 | Save and Share Cart for WooCommerce | 35 | 125 | 51 | 600 | | | Text Domain Mismatch |
| #623 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 49 | 230 | 50k+ | | | Non-prefixed hook name |
| #624 | Payment Gateway for PayPal Pro & PayPal Checkout for WooCommerce | 35 | 67 | 147 | 2k+ | | | Request data is not unslashed |
| #625 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #626 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #627 | Access Areas for WordPress | 35 | 17 | 95 | 400 | | | Direct Query |
| #628 | WP Geo | 35 | 180 | 84 | 900 | | | Output is not escaped |
| #629 | Integration for WooCommerce and QuickBooks | 35 | 263 | 125 | 1k+ | | | Output is not escaped |
| #630 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |
| #631 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #632 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #633 | SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | 36 | 4 | 342 | 2k+ | | | Nonce verification recommended |
| #634 | Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | 36 | 3 | 321 | 10k+ | | | Nonce verification recommended |
| #635 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #636 | Dynamic Visibility for Elementor | 36 | 56 | 89 | 50k+ | | | Non-prefixed hook name |
| #637 | Easy Support Videos – Embed videos in the admin | 36 | 160 | 95 | 500 | | | Output is not escaped |
| #638 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #639 | Jetpack VideoPress | 36 | 618 | 224 | 7k+ | | | Text Domain Mismatch |
| #640 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #641 | PDF Forms Filler for CF7 | 36 | 185 | 79 | 3k+ | | | Text Domain Mismatch |
| #642 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #643 | ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution | 36 | 63 | 667 | 100k+ | | | Non-prefixed global variable |
| #644 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #645 | Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder | 36 | 162 | 40 | 200k+ | | | Output is not escaped |
| #646 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #647 | Video Thumbnails Reloaded | 36 | 343 | 58 | 2k+ | | | Text Domain Mismatch |
| #648 | When Last Login | 36 | 52 | 123 | 50k+ | | | Non-prefixed global variable |
| #649 | Disable Payment Methods based on cart conditions for WooCommerce | 36 | 158 | 57 | 1k+ | | | Non Singular String Literal Domain |
| #650 | Guaranteed Reviews Company (Société des Avis Garantis) | 36 | 369 | 197 | 1k+ | | | Output is not escaped |