| #701 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #702 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #703 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #704 | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 25 | 554 | 982 | 200k+ | | | Output is not escaped |
| #705 | DecaLog | 25 | 943 | 236 | 1k+ | | | Exception output is not escaped |
| #706 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | | | Non-prefixed hook name |
| #707 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #708 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #709 | ELEX WooCommerce Dynamic Pricing and Discounts | 25 | 478 | 748 | 800 | | | Text Domain Mismatch |
| #710 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | | | Non-prefixed function |
| #711 | Event Genius – Event Management, Events Calendar, Registration, and RSVP | 25 | 181 | 1,579 | 500 | | | Non-prefixed global variable |
| #712 | Events Made Easy | 25 | 521 | 6,324 | 1k+ | | | Non-prefixed function |
| #713 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #714 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #715 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 321 | 455 | 7k+ | | | Non-prefixed global variable |
| #716 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #717 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #718 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #719 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #720 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #721 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #722 | GD Rating System | 25 | 1,511 | 1,043 | 1k+ | | | Output is not escaped |
| #723 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #724 | GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content | 25 | 88 | 863 | 6k+ | | | Non-prefixed global variable |
| #725 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |
| #726 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | | Non Singular String Literal Domain |
| #727 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | | | Missing direct file access protection |
| #728 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | | | Text Domain Mismatch |
| #729 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #730 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #731 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 160 | 597 | 10k+ | | | Non-prefixed global variable |
| #732 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 235 | 699 | 2k+ | | | Non-prefixed global variable |
| #733 | Image SEO – AI-Driven Image SEO Optimizer | 25 | 350 | 328 | 1k+ | | | Text Domain Mismatch |
| #734 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | | Non-prefixed global variable |
| #735 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #736 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | 25 | 449 | 1,300 | 1m+ | | | Interpolated SQL is not prepared |
| #737 | Instantio — Side Cart & One-Page Checkout for WooCommerce | 25 | 568 | 369 | 700 | | | Output is not escaped |
| #738 | IP Location Block | 25 | 521 | 624 | 10k+ | | | Output is not escaped |
| #739 | IP Locator | 25 | 482 | 211 | 600 | | | Text Domain Mismatch |
| #740 | JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin | 25 | 1,541 | 1,578 | 1k+ | | | Non-prefixed global variable |
| #741 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #742 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | | | Unsafe printing function |
| #743 | Loginizer | 25 | 814 | 504 | 1m+ | | | Output is not escaped |
| #744 | Bulk Page Generator – LPagery | 25 | 665 | 1,922 | 3k+ | | | Non-prefixed global variable |
| #745 | M Chart | 25 | 558 | 1,465 | 3k+ | | | Non-prefixed global variable |
| #746 | Media Cleaner: Clean your WordPress! | 25 | 263 | 546 | 90k+ | | | Direct Query |
| #747 | Media Cloud Sync | 25 | 1,095 | 274 | 1k+ | | | Exception output is not escaped |
| #748 | Create | 25 | 1,637 | 764 | 6k+ | | | Text Domain Mismatch |
| #749 | Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce | 25 | 492 | 216 | 400 | | | Text Domain Mismatch |
| #750 | MyFatoorah – WooCommerce | 25 | 191 | 89 | 3k+ | | | Output is not escaped |