| #601 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | Output Not Escaped |
| #602 | Throws SPAM Away | 34 | 327 | 123 | 20k+ | | Missing Arg Domain |
| #603 | Donation Platform for WooCommerce: Fundraising & Donation Management | 34 | 331 | 448 | 7k+ | | Non Prefixed Variable Found |
| #604 | Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin | 34 | 230 | 154 | 2k+ | | Output Not Escaped |
| #605 | Easy Booking – WooCommerce Booking & Reservation Plugin | 34 | 138 | 172 | 4k+ | | Output Not Escaped |
| #606 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | Non Prefixed Variable Found |
| #607 | Advanced Custom Fields: Image Aspect Ratio Crop Field | 35 | 70 | 37 | 20k+ | | Text Domain Mismatch |
| #608 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | | Output Not Escaped |
| #609 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | Non Prefixed Function Found |
| #610 | BTCPay Server – Accept Bitcoin payments in WooCommerce | 35 | 48 | 86 | 1k+ | | Missing |
| #611 | Conditional Widgets | 35 | 67 | 33 | 7k+ | | Output Not Escaped |
| #612 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | Output Not Escaped |
| #613 | Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | 35 | 30 | 168 | 1k+ | | Non Prefixed Variable Found |
| #614 | Custom CSS and JavaScript | 35 | 38 | 91 | 10k+ | | Input Not Sanitized |
| #615 | Datafeedr Product Sets | 35 | 602 | 206 | 5k+ | | Output Not Escaped |
| #616 | Deposits & Partial Payments for WooCommerce | 35 | 172 | 144 | 5k+ | | Text Domain Mismatch |
| #617 | Email Subscription Popup — Newsletter & GDPR Consent | 35 | 683 | 193 | 1k+ | | Output Not Escaped |
| #618 | WP2Social Auto Publish | 35 | 643 | 215 | 9k+ | | Unsafe Printing Function |
| #619 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | | Output Not Escaped |
| #620 | Reviews Block for Google | 35 | 244 | 35 | 1k+ | | Missing Arg Domain |
| #621 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | Direct Query |
| #622 | Iframely – WP media embeds, cards and blocks | 35 | 136 | 43 | 2k+ | | Unsafe Printing Function |
| #623 | Nobs • Share Buttons | 35 | 314 | 85 | 3k+ | | Output Not Escaped |
| #624 | Kargo Takip | 35 | 84 | 142 | 3k+ | | Missing |
| #625 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | | Non Prefixed Variable Found |
| #626 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 35 | 157 | 49 | 10k+ | | Output Not Escaped |
| #627 | My Eyes Are Up Here | 35 | 7 | 12 | 2k+ | | Missing |
| #628 | Min Max Step Quantity Limits Manager for WooCommerce | 35 | 67 | 158 | 3k+ | | Non Prefixed Variable Found |
| #629 | Recurio – Ultimate Subscription for WooCommerce | 35 | 41 | 300 | 1k+ | | Direct Query |
| #630 | Related Posts for WordPress | 35 | 207 | 180 | 10k+ | | Output Not Escaped |
| #631 | Internal Links Manager | 35 | 188 | 121 | 10k+ | | Output Not Escaped |
| #632 | SiteGround Migrator | 35 | 113 | 74 | 70k+ | | Missing Arg Domain |
| #633 | SiteOrigin CSS | 35 | 61 | 84 | 100k+ | | Not In Footer |
| #634 | Termageddon: Cookie Consent & Privacy Compliance | 35 | 28 | 13 | 7k+ | | Exception Not Escaped |
| #635 | Theme Blvd Layout Builder | 35 | 207 | 169 | 2k+ | | Output Not Escaped |
| #636 | Two Factor Authentication | 35 | 108 | 139 | 20k+ | | Output Not Escaped |
| #637 | Ultimate Post List | 35 | 186 | 84 | 2k+ | | Missing Arg Domain |
| #638 | User Photo | 35 | 112 | 68 | 3k+ | | Output Not Escaped |
| #639 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | Text Domain Mismatch |
| #640 | What The File | 35 | 9 | 12 | 40k+ | | Input Not Sanitized |
| #641 | ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce | 35 | 50 | 343 | 10k+ | | Missing Unslash |
| #642 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | Text Domain Mismatch |
| #643 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | Non Prefixed Variable Found |
| #644 | Mail logging – WP Mail Catcher | 35 | 232 | 157 | 20k+ | | Text Domain Mismatch |
| #645 | WP-Paginate | 35 | 37 | 55 | 20k+ | | Input Not Validated |
| #646 | WP-Print | 35 | 110 | 52 | 8k+ | | Unsafe Printing Function |
| #647 | WPFront User Role Editor | 35 | 333 | 578 | 30k+ | | Output Not Escaped |
| #648 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | Recommended |
| #649 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | Non Prefixed Variable Found |
| #650 | Year Make Model Search for WooCommerce | 35 | 188 | 162 | 1k+ | | Output Not Escaped |