| #851 | Realbig For WordPress | 30 | 36 | 591 | 1k+ | | | Non-prefixed global variable |
| #852 | Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | 30 | 60 | 387 | 3k+ | | | Non-prefixed global variable |
| #853 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 30 | 45 | 374 | 4m+ | | | Non-prefixed global variable |
| #854 | SmartCrawl SEO checker, analyzer & optimizer | 30 | 347 | 1,307 | 20k+ | | | Non-prefixed global variable |
| #855 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #856 | Stackable – Page Builder Gutenberg Blocks | 30 | 482 | 87 | 100k+ | | | Non Singular String Literal Domain |
| #857 | Subscriptions for WooCommerce | 30 | 1 | 1,190 | 10k+ | | | Non-prefixed global variable |
| #858 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #859 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #860 | User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress | 30 | 486 | 278 | 3k+ | | | Text Domain Mismatch |
| #861 | Waitlist Woocommerce ( Back in stock notifier ) | 30 | 272 | 311 | 4k+ | | | Output is not escaped |
| #862 | Custom Post Types and Custom Fields creator – WCK | 30 | 1,299 | 137 | 10k+ | | | Text Domain Mismatch |
| #863 | Widgetize Pages Light | 30 | 145 | 104 | 3k+ | | | Output is not escaped |
| #864 | WonderPush – Web Push Notifications – WooCommerce Abandoned Cart – GDPR | 30 | 152 | 192 | 600 | | | Missing direct file access protection |
| #865 | Mercado Pago payments for WooCommerce | 30 | 619 | 63 | 100k+ | | | Short PHP open tag found |
| #866 | WooPayments: Integrated WooCommerce Payments | 30 | 182 | 308 | 900k+ | | | Exception output is not escaped |
| #867 | WooCommerce Tax (formerly WooCommerce Shipping & Tax) | 30 | 103 | 198 | 600k+ | | | Non-prefixed class |
| #868 | WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 30 | 113 | 419 | 1k+ | | | Non-prefixed global variable |
| #869 | WP Inventory Manager | 30 | 856 | 233 | 1k+ | | | Output is not escaped |
| #870 | WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | 30 | 32 | 346 | 4m+ | | | Non-prefixed hook name |
| #871 | Photo Gallery Slideshow & Masonry Tiled Gallery | 30 | 806 | 352 | 1k+ | | | Output is not escaped |
| #872 | YayPricing – WooCommerce Dynamic Pricing & Discounts | 30 | 174 | 186 | 3k+ | | | Non-prefixed global variable |
| #873 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #874 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #875 | Advanced Category Excluder | 31 | 349 | 160 | 600 | | | Output is not escaped |
| #876 | Advanced Woo Search – Product Search for WooCommerce | 31 | 229 | 377 | 70k+ | | | Nonce verification recommended |
| #877 | AI Builder – Generate pages, blocks, images & translate with AI | 31 | 101 | 194 | 400 | | | Non-prefixed global variable |
| #878 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | | Nonce verification recommended |
| #879 | The SEO Framework – Fast, Automated, Effortless. | 31 | 363 | 609 | 200k+ | | | Non-prefixed global variable |
| #880 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #881 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 600 | | | Missing nonce verification |
| #882 | Buy Me a Coffee – Button and Widget Plugin | 31 | 138 | 140 | 6k+ | | | Output is not escaped |
| #883 | cformsII | 31 | 777 | 536 | 3k+ | | | Unsafe printing function |
| #884 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #885 | Co-marquage service-public.fr | 31 | 84 | 213 | 1k+ | | | Non-prefixed global variable |
| #886 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #887 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | | Text Domain Mismatch |
| #888 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |
| #889 | Theme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons | 31 | 393 | 329 | 6k+ | | | Missing direct file access protection |
| #890 | MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | 31 | 663 | 273 | 2k+ | | | Text Domain Mismatch |
| #891 | Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) | 31 | 113 | 233 | 2k+ | | | Non-prefixed namespace |
| #892 | Up2pay e-Transactions WooCommerce Payment Gateway | 31 | 459 | 175 | 4k+ | | | Text Domain Mismatch |
| #893 | افزونه پیامک حرفه ای فراز اس ام اس | 31 | 89 | 180 | 1k+ | | | wp function not compatible with requires wp |
| #894 | FastDup – Fastest WordPress Migration & Duplicator | 31 | 83 | 66 | 5k+ | | | wp function not compatible with requires wp |
| #895 | GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets | 31 | 402 | 156 | 1k+ | | | Text Domain Mismatch |
| #896 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 62 | 300k+ | | | Output is not escaped |
| #897 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | | | Text Domain Mismatch |
| #898 | HT Mega – Absolute Addons for WPBakery Page Builder | 31 | 2,740 | 115 | 900 | | | Text Domain Mismatch |
| #899 | ImgSEO – AI Image Alt Text Generator & Image SEO Tools | 31 | 1 | 677 | 400 | | | Direct Query |
| #900 | Interactive Image Map Builder | 31 | 160 | 381 | 1k+ | | | Non-prefixed global variable |