| #801 | VikRestaurants Table Reservations and Take-Away | 25 | 11,644 | 4,932 | 600 | | | Output is not escaped |
| #802 | Product Customer List for WooCommerce | 25 | 610 | 1,334 | 9k+ | | | Non-prefixed global variable |
| #803 | Webcomic | 25 | 593 | 308 | 600 | | | Output is not escaped |
| #804 | weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | 25 | 279 | 518 | 4k+ | | | Non-prefixed global variable |
| #805 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #806 | Advanced Shipment Tracking for WooCommerce | 25 | 499 | 704 | 60k+ | | | Non-prefixed global variable |
| #807 | Bulk Edit Products for WooCommerce – WP Sheet Editor | 25 | 957 | 968 | 10k+ | | | Text Domain Mismatch |
| #808 | Bulk Edit Coupons for WooCommerce – WP Sheet Editor | 25 | 1,022 | 982 | 500 | | | Text Domain Mismatch |
| #809 | WFatture for WooCommerce Fattureincloud | 25 | 229 | 774 | 800 | | | Non-prefixed global variable |
| #810 | PDF Builder for WooCommerce. Create invoices,packing slips and more | 25 | 372 | 503 | 2k+ | | | Non-prefixed global variable |
| #811 | Pay with Vipps and MobilePay for WooCommerce | 25 | 846 | 514 | 5k+ | | | Output is not escaped |
| #812 | Wordfence Login Security | 25 | 248 | 418 | 60k+ | | | Output is not escaped |
| #813 | WP Airbnb Review Slider | 25 | 325 | 646 | 1k+ | | | Non-prefixed global variable |
| #814 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 143 | 357 | 60k+ | | | Input is not sanitized |
| #815 | Comments Extra Fields For Post,Pages and CPT | 25 | 577 | 418 | 500 | | | Text Domain Mismatch |
| #816 | WP Coupons and Deals – WordPress Coupon Plugin | 25 | 914 | 1,460 | 1k+ | | | Non-prefixed global variable |
| #817 | WP Review Slider | 25 | 1,186 | 2,279 | 6k+ | | | Non-prefixed global variable |
| #818 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 4,996 | 1,008 | 300k+ | | | Unsafe printing function |
| #819 | WP Google Review Slider | 25 | 1,366 | 2,584 | 30k+ | | | Non-prefixed global variable |
| #820 | WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, SSL Security | 25 | 875 | 1,764 | 50k+ | | | Non-prefixed global variable |
| #821 | Nested Pages | 25 | 674 | 560 | 90k+ | | | Non-prefixed global variable |
| #822 | WP-Polls | 25 | 618 | 639 | 40k+ | | | Unsafe printing function |
| #823 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | | | Output is not escaped |
| #824 | Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF | 25 | 158 | 118 | 60k+ | | | Non-prefixed global variable |
| #825 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | | | Exception output is not escaped |
| #826 | Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | 25 | 244 | 568 | 1m+ | | | Non-prefixed hook name |
| #827 | Wp Social Login and Register Social Counter | 25 | 80 | 738 | 90k+ | | | Non-prefixed global variable |
| #828 | WP Super Cache | 25 | 800 | 989 | 1m+ | | | Output is not escaped |
| #829 | WP Time Slots Booking Form | 25 | 439 | 1,137 | 1k+ | | | Non-prefixed global variable |
| #830 | WP TripAdvisor Review Slider | 25 | 1,063 | 2,582 | 8k+ | | | Non-prefixed global variable |
| #831 | WP Yelp Review Slider | 25 | 600 | 1,086 | 1k+ | | | Non-prefixed global variable |
| #832 | WPCargo Track & Trace | 25 | 239 | 557 | 10k+ | | | Non-prefixed global variable |
| #833 | WPvivid Backup for MainWP | 25 | 818 | 1,794 | 10k+ | | | Missing nonce verification |
| #834 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #835 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,066 | 2k+ | | | Non-prefixed hook name |
| #836 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 5k+ | | | Exception output is not escaped |
| #837 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 8k+ | | | Text Domain Mismatch |
| #838 | AI Content Writing Assistant | 26 | 1,069 | 516 | 700 | | | Text Domain Mismatch |
| #839 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #840 | Blog Floating Button | 26 | 705 | 240 | 9k+ | | | Output is not escaped |
| #841 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #842 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #843 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 400k+ | | | Non-prefixed global variable |
| #844 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #845 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 26 | 159 | 297 | 1k+ | | | Non-prefixed global variable |
| #846 | CP Multi View Events Calendar | 26 | 86 | 439 | 900 | | | Non-prefixed global variable |
| #847 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | | Output is not escaped |
| #848 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #849 | Event Monster – Event Manager, Ticket Booking & Registration | 26 | 781 | 781 | 600 | | | Non-prefixed global variable |
| #850 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |