| #401 | Sequential Order Numbers for WooCommerce | 24 | 709 | 469 | 1k+ | | | Text Domain Mismatch |
| #402 | Servebolt Optimizer | 24 | 1,958 | 681 | 1k+ | | | Text Domain Mismatch |
| #403 | ShiftController Employee Shift Scheduling | 24 | 358 | 196 | 700 | | | Output is not escaped |
| #404 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | | Output is not escaped |
| #405 | Simple Membership | 24 | 2,373 | 1,789 | 40k+ | | | Unsafe printing function |
| #406 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | | | Output is not escaped |
| #407 | SiteGuard WP Plugin | 24 | 361 | 346 | 500k+ | | | Output is not escaped |
| #408 | Sitepact's Contact Form 7 Extension For Klaviyo | 24 | 541 | 1,412 | 500 | | | Non-prefixed global variable |
| #409 | Slideshow Gallery LITE | 24 | 896 | 414 | 5k+ | | | Output is not escaped |
| #410 | Smart Variations Images & Swatches for WooCommerce | 24 | 990 | 1,486 | 1k+ | | | Non-prefixed global variable |
| #411 | MoreConvert Wishlist for WooCommerce | 24 | 3,678 | 629 | 9k+ | | | Text Domain Mismatch |
| #412 | Social Media Auto Publish | 24 | 1,468 | 713 | 6k+ | | | Unsafe printing function |
| #413 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #414 | GEO Plugin by Squirrly SEO | 24 | 1,196 | 224 | 30k+ | | | Missing Translators Comment |
| #415 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 24 | 149 | 482 | 600 | | | Non-prefixed global variable |
| #416 | StreamWeasels Online Status Bar | 24 | 555 | 1,349 | 500 | | | Non-prefixed global variable |
| #417 | StreamWeasels YouTube Integration | 24 | 544 | 1,384 | 1k+ | | | Non-prefixed global variable |
| #418 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #419 | Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | 24 | 589 | 897 | 2k+ | | | Non-prefixed global variable |
| #420 | Tainacan | 24 | 156 | 598 | 1k+ | | | Direct Query |
| #421 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 222 | 400k+ | | | Nonce verification recommended |
| #422 | Terms and Conditions Popup for WooCommerce | 24 | 644 | 435 | 1k+ | | | Text Domain Mismatch |
| #423 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #424 | Timber | 24 | 85 | 128 | 20k+ | | | Non-prefixed hook name |
| #425 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #426 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | 24 | 938 | 2,935 | 200k+ | | | Non-prefixed global variable |
| #427 | Ultimate Product Catalog | 24 | 554 | 525 | 5k+ | | | Unsafe printing function |
| #428 | Ultimate WP Mail | 24 | 400 | 546 | 800 | | | Unsafe printing function |
| #429 | Unlimited Elements For Elementor | 24 | 710 | 2,093 | 300k+ | | | Non-prefixed global variable |
| #430 | UpdraftPlus: WP Backup & Migration Plugin | 24 | 277 | 299 | 3m+ | | | Non-prefixed global variable |
| #431 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 664 | 3,321 | 60k+ | | | Non-prefixed global variable |
| #432 | Video Conferencing with Zoom | 24 | 1,105 | 440 | 10k+ | | | Unsafe printing function |
| #433 | VikRentItems Flexible Rental Management System | 24 | 4,755 | 4,639 | 600 | | | Non-prefixed global variable |
| #434 | Vimeography: Vimeo Video Gallery WordPress Plugin | 24 | 98 | 212 | 5k+ | | | Nonce verification recommended |
| #435 | PDF Ink Lite – Free PDF Watermark & Password Protection | 24 | 226 | 561 | 2k+ | | | Non-prefixed global variable |
| #436 | WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce | 24 | 730 | 499 | 5k+ | | | Output is not escaped |
| #437 | Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels | 24 | 1,615 | 1,381 | 70k+ | | | Text Domain Mismatch |
| #438 | Extra Fees for WooCommerce | 24 | 1,113 | 1,569 | 7k+ | | | Non-prefixed global variable |
| #439 | Coupon Affiliates – Affiliate Plugin for WooCommerce | 24 | 1,022 | 3,074 | 5k+ | | | Non-prefixed global variable |
| #440 | Payment Plugins Braintree For WooCommerce | 24 | 731 | 755 | 2k+ | | | Output is not escaped |
| #441 | Payment Gateway for PayPal on WooCommerce | 24 | 153 | 561 | 10k+ | | | Nonce verification recommended |
| #442 | pensopay Payments | 24 | 397 | 246 | 2k+ | | | Output is not escaped |
| #443 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | | Non-prefixed global variable |
| #444 | wallee | 24 | 331 | 220 | 400 | | | Exception output is not escaped |
| #445 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | | Non Singular String Literal Domain |
| #446 | European VAT Compliance Assistant for WooCommerce | 24 | 515 | 317 | 3k+ | | | Output is not escaped |
| #447 | Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers | 24 | 480 | 1,272 | 7k+ | | | Non-prefixed function |
| #448 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | | | SQL query is not prepared |
| #449 | WP Admin Audit | 24 | 1,051 | 781 | 1k+ | | | error log print r |
| #450 | WP-Appbox | 24 | 418 | 390 | 2k+ | | | Missing Arg Domain |