| #751 | MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | 28 | 62 | 246 | 600k+ | | | Non-prefixed global variable |
| #752 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #753 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | | | Non-prefixed global variable |
| #754 | Store Hours for WooCommerce | 28 | 525 | 60 | 2k+ | | | Output is not escaped |
| #755 | Perfect Brands for WooCommerce | 28 | 112 | 143 | 40k+ | | | Non-prefixed constant |
| #756 | افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | 28 | 131 | 190 | 20k+ | | | Missing nonce verification |
| #757 | Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery | 28 | 146 | 259 | 5k+ | | | Post Not In exclude |
| #758 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #759 | Product Sync for WooCommerce | 28 | 158 | 375 | 400 | | | Direct Query |
| #760 | PushAlert – Web Push Notifications for WordPress and WooCommerce | 28 | 196 | 63 | 1k+ | | | curl curl setopt |
| #761 | Rating by BestWebSoft | 28 | 509 | 218 | 400 | | | Text Domain Mismatch |
| #762 | ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System | 28 | 1,013 | 239 | 800 | | | Unsafe printing function |
| #763 | Slider Pro | 28 | 583 | 527 | 4k+ | | | Unsafe printing function |
| #764 | Tab – Accordion, FAQ | 28 | 104 | 542 | 1k+ | | | Non-prefixed global variable |
| #765 | Terms descriptions | 28 | 222 | 423 | 1k+ | | | Non-prefixed function |
| #766 | Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor | 28 | 291 | 292 | 20k+ | | | Output is not escaped |
| #767 | Jetpack VaultPress | 28 | 71 | 362 | 10k+ | | | Missing nonce verification |
| #768 | VG WORT METIS | 28 | 150 | 317 | 900 | | | Nonce verification recommended |
| #769 | 10WebSocial | 28 | 584 | 185 | 10k+ | | | Unsafe printing function |
| #770 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | | | Exception output is not escaped |
| #771 | Product Gallery Slider, Additional Variation Images for WooCommerce | 28 | 552 | 316 | 20k+ | | | Output is not escaped |
| #772 | WP Booking System – Booking Calendar | 28 | 502 | 549 | 20k+ | | | Output is not escaped |
| #773 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | | Missing Translators Comment |
| #774 | WhyDonate – FREE Donate button – Crowdfunding – Fundraising | 28 | 216 | 328 | 800 | | | Non-prefixed global variable |
| #775 | WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce | 28 | 177 | 226 | 5k+ | | | Output is not escaped |
| #776 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #777 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | | | Missing Translators Comment |
| #778 | WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 | 28 | 57 | 138 | 500 | | | Request data is not unslashed |
| #779 | AL Pack | 29 | 13 | 816 | 2k+ | | | Non-prefixed global variable |
| #780 | Alt Text AI – Automatically generate image alt text for SEO and accessibility | 29 | 72 | 280 | 20k+ | | | Non-prefixed global variable |
| #781 | AppPresser – Mobile App Framework | 29 | 262 | 214 | 1k+ | | | Text Domain Mismatch |
| #782 | aThemeArt Theme Helper | 29 | 206 | 151 | 2k+ | | | Non-prefixed global variable |
| #783 | Attribute Stock for WooCommerce – Shared Stock & Variable Quantities (Lite Version) | 29 | 481 | 313 | 2k+ | | | Text Domain Mismatch |
| #784 | Better Google Analytics | 29 | 376 | 869 | 2k+ | | | Non-prefixed global variable |
| #785 | Plugin BlueX for WooCommerce | 29 | 431 | 216 | 2k+ | | | Text Domain Mismatch |
| #786 | Order Delivery Date Time & Pickup for WooCommerce | 29 | 667 | 244 | 500 | | | Output is not escaped |
| #787 | Branded Social Images – Open Graph Images with logo and extra text layer | 29 | 254 | 91 | 900 | | | Non Singular String Literal Domain |
| #788 | Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms | 29 | 236 | 369 | 2k+ | | | Non-prefixed global variable |
| #789 | Countdown, Coming Soon, Maintenance – Countdown & Clock | 29 | 1,735 | 143 | 10k+ | | | Non Singular String Literal Domain |
| #790 | WPCS – WordPress Currency Switcher Professional | 29 | 84 | 358 | 900 | | | Non-prefixed global variable |
| #791 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | | Output is not escaped |
| #792 | ECPay Ecommerce for WooCommerce | 29 | 248 | 370 | 2k+ | | | Missing nonce verification |
| #793 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #794 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | | | Non-prefixed global variable |
| #795 | Easy HTTPS Redirection (SSL) | 29 | 266 | 152 | 100k+ | | | Unsafe printing function |
| #796 | Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | 29 | 20 | 826 | 20k+ | | | Non-prefixed namespace |
| #797 | Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms | 29 | 625 | 351 | 1k+ | | | Text Domain Mismatch |
| #798 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |
| #799 | Liteweight Podcast – Host and Embed Podcast Episodes | 29 | 536 | 239 | 500 | | | Output is not escaped |
| #800 | Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | 29 | 86 | 233 | 500 | | | Nonce verification recommended |