| #801 | Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization | 29 | 80 | 163 | 200k+ | | | Nonce verification recommended |
| #802 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #803 | Pósturinn\'s Shipping with WooCommerce | 29 | 713 | 551 | 500 | | | Text Domain Mismatch |
| #804 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #805 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | | Direct Query |
| #806 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 246 | 5k+ | | | Unsafe printing function |
| #807 | BuddyPress Builder for Elementor – BuddyBuilder | 29 | 348 | 329 | 1k+ | | | Text Domain Mismatch |
| #808 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #809 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #810 | Tilda-publishing | 29 | 219 | 78 | 700 | | | Output is not escaped |
| #811 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #812 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #813 | Under Construction, Coming Soon & Maintenance Mode | 29 | 277 | 292 | 10k+ | | | Text Domain Mismatch |
| #814 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | | Output is not escaped |
| #815 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #816 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | | | Exception output is not escaped |
| #817 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #818 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | | | Output is not escaped |
| #819 | WooCommerce Stripe Payment Gateway | 29 | 184 | 592 | 700k+ | | | Exception output is not escaped |
| #820 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | | | Output is not escaped |
| #821 | WPComplete | 29 | 383 | 333 | 1k+ | | | Output is not escaped |
| #822 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #823 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 173 | 479 | 100k+ | | | Interpolated SQL is not prepared |
| #824 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #825 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #826 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #827 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #828 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #829 | Blockons – Gutenberg blocks for WordPress and WooCommerce websites | 30 | 69 | 205 | 700 | | | Non-prefixed global variable |
| #830 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #831 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #832 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 500 | | | rand rand |
| #833 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #834 | EDI – Обмен данными между WooCommerce и 1С | 30 | 284 | 101 | 600 | | | Text Domain Mismatch |
| #835 | EasyParcel Shipping– All-in-one Shipping Solution, Real-Time Shipping Rates | 30 | 37 | 608 | 600 | | | Non-prefixed global variable |
| #836 | Edwiser Bridge – WordPress Moodle Integration | 30 | 4 | 669 | 4k+ | | | Non-prefixed hook name |
| #837 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #838 | Exclusive Addons for Elementor | 30 | 3,630 | 263 | 50k+ | | | Text Domain Mismatch |
| #839 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #840 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #841 | Invisible reCaptcha for WordPress | 30 | 90 | 185 | 80k+ | | | Input is not sanitized |
| #842 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #843 | Midtrans-WooCommerce | 30 | 112 | 132 | 5k+ | | | Non-prefixed global variable |
| #844 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #845 | Operation Demo Importer – Demo Importer For WPoperation Themes | 30 | 245 | 104 | 1k+ | | | Text Domain Mismatch |
| #846 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget | 30 | 231 | 102 | 1k+ | | | Non Singular String Literal Domain |
| #847 | Pubjet | پابجت | 30 | 91 | 172 | 1k+ | | | Output is not escaped |
| #848 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | | | Non-prefixed global variable |
| #849 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #850 | Realbig For WordPress | 30 | 36 | 591 | 1k+ | | | Non-prefixed global variable |