| #601 | Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin | 28 | 639 | 85 | 1k+ | | | Text Domain Mismatch |
| #602 | Discount Rules and Dynamic Pricing for WooCommerce | 28 | 181 | 334 | 10k+ | | | Output is not escaped |
| #603 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #604 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |
| #605 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #606 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #607 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 200k+ | | | Missing Arg Domain |
| #608 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #609 | درگاه پرداخت بانک ملت ووکامرس | 28 | 61 | 130 | 2k+ | | | Request data is not unslashed |
| #610 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | | | Non-prefixed global variable |
| #611 | Order Tracking – WordPress Status Tracking Plugin | 28 | 619 | 773 | 3k+ | | | Unsafe printing function |
| #612 | Perfect Brands for WooCommerce | 28 | 112 | 143 | 40k+ | | | Non-prefixed constant |
| #613 | ووکامرس فارسی | 28 | 157 | 215 | 90k+ | | | Output is not escaped |
| #614 | افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | 28 | 131 | 190 | 20k+ | | | Missing nonce verification |
| #615 | PushAlert – Web Push Notifications for WordPress and WooCommerce | 28 | 196 | 63 | 1k+ | | | curl curl setopt |
| #616 | Payment Plugins for PayPal WooCommerce | 28 | 232 | 246 | 80k+ | | | Non-prefixed hook name |
| #617 | Brilliant Web-to-Lead for Salesforce | 28 | 247 | 244 | 2k+ | | | Text Domain Mismatch |
| #618 | Praison AI SEO | 28 | 649 | 306 | 1k+ | | | Text Domain Mismatch |
| #619 | Ultimate FAQ Accordion Plugin | 28 | 386 | 227 | 30k+ | | | Unsafe printing function |
| #620 | Jetpack VaultPress | 28 | 71 | 362 | 10k+ | | | Missing nonce verification |
| #621 | WC Fields Factory | 28 | 194 | 369 | 7k+ | | | Nonce verification recommended |
| #622 | 10WebSocial | 28 | 584 | 185 | 10k+ | | | Unsafe printing function |
| #623 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #624 | Product Gallery Slider, Additional Variation Images for WooCommerce | 28 | 552 | 316 | 20k+ | | | Output is not escaped |
| #625 | Dynamic Product Gallery for WooCommerce | 28 | 414 | 301 | 1k+ | | | Output is not escaped |
| #626 | Email Inquiry & Cart Options for WooCommerce | 28 | 181 | 273 | 800 | | | Output is not escaped |
| #627 | Product Sort and Display for WooCommerce | 28 | 190 | 229 | 2k+ | | | Output is not escaped |
| #628 | WP ADA Compliance Check Basic | 28 | 785 | 177 | 3k+ | | | Text Domain Mismatch |
| #629 | WP Booking System – Booking Calendar | 28 | 502 | 549 | 20k+ | | | Output is not escaped |
| #630 | WP GoToWebinar | 28 | 207 | 207 | 700 | | | Non-prefixed function |
| #631 | WP Mapbox GL JS Maps | 28 | 104 | 119 | 1k+ | | | Output is not escaped |
| #632 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | | Missing Translators Comment |
| #633 | WP Travel Gutenberg Blocks | 28 | 485 | 157 | 900 | | | Output is not escaped |
| #634 | WhyDonate – FREE Donate button – Crowdfunding – Fundraising | 28 | 216 | 328 | 800 | | | Non-prefixed global variable |
| #635 | WP YouTube Lyte | 28 | 204 | 178 | 20k+ | | | Non-prefixed global variable |
| #636 | WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce | 28 | 177 | 226 | 5k+ | | | Output is not escaped |
| #637 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #638 | WPS Bidouille | 28 | 472 | 215 | 10k+ | | | Output is not escaped |
| #639 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | | | Missing Translators Comment |
| #640 | YITH WooCommerce Product Bundles | 28 | 404 | 1,480 | 3k+ | | | Non-prefixed global variable |
| #641 | Plugin BlueX for WooCommerce | 29 | 431 | 216 | 2k+ | | | Text Domain Mismatch |
| #642 | Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms | 29 | 236 | 369 | 2k+ | | | Non-prefixed global variable |
| #643 | CloudSecure WP Security | 29 | 74 | 350 | 100k+ | | | Request data is not unslashed |
| #644 | WPCS – WordPress Currency Switcher Professional | 29 | 84 | 358 | 900 | | | Non-prefixed global variable |
| #645 | Display Tweets | 29 | 135 | 135 | 900 | | | Non-prefixed global variable |
| #646 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | | Output is not escaped |
| #647 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #648 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | | | Non-prefixed global variable |
| #649 | reCaptcha by BestWebSoft | 29 | 474 | 272 | 100k+ | | | Text Domain Mismatch |
| #650 | Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms | 29 | 625 | 351 | 1k+ | | | Text Domain Mismatch |