| #651 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |
| #652 | Wishlist for WooCommerce | 29 | 610 | 296 | 600 | | | Output is not escaped |
| #653 | Laposta WooCommerce | 29 | 96 | 115 | 500 | | | Non-prefixed global variable |
| #654 | Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | 29 | 86 | 233 | 500 | | | Nonce verification recommended |
| #655 | Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization | 29 | 80 | 163 | 200k+ | | | Nonce verification recommended |
| #656 | pCloud WP Backup | 29 | 120 | 73 | 1k+ | | | Exception output is not escaped |
| #657 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #658 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | | Direct Query |
| #659 | BuddyPress Builder for Elementor – BuddyBuilder | 29 | 348 | 329 | 1k+ | | | Text Domain Mismatch |
| #660 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #661 | Themify – WooCommerce Product Filter | 29 | 643 | 145 | 20k+ | | | Output is not escaped |
| #662 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #663 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #664 | User Verification by PickPlugins | 29 | 41 | 314 | 5k+ | | | Request data is not unslashed |
| #665 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | | Output is not escaped |
| #666 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #667 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #668 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | | Text Domain Mismatch |
| #669 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | | | Output is not escaped |
| #670 | WooCommerce Stripe Payment Gateway | 29 | 184 | 592 | 700k+ | | | Exception output is not escaped |
| #671 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 500 | | | Non-prefixed class |
| #672 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #673 | WP Popular Posts | 29 | 77 | 300 | 100k+ | | | Non-prefixed global variable |
| #674 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | | | Output is not escaped |
| #675 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |
| #676 | WP-PostRatings | 29 | 425 | 384 | 30k+ | | | Output is not escaped |
| #677 | WP Subscribe | 29 | 79 | 79 | 7k+ | | | Non-prefixed class |
| #678 | WPComplete | 29 | 383 | 333 | 1k+ | | | Output is not escaped |
| #679 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #680 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #681 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #682 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #683 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #684 | Blockons – Gutenberg blocks for WordPress and WooCommerce websites | 30 | 69 | 205 | 700 | | | Non-prefixed global variable |
| #685 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #686 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #687 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #688 | EDI – Обмен данными между WooCommerce и 1С | 30 | 284 | 101 | 600 | | | Text Domain Mismatch |
| #689 | Edwiser Bridge – WordPress Moodle Integration | 30 | 4 | 669 | 4k+ | | | Non-prefixed hook name |
| #690 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #691 | Export Plugins and Templates | 30 | 143 | 33 | 1k+ | | | file system operations fread |
| #692 | PiWeb Export Customers Users & Guest customer to CSV for WooCommerce | 30 | 173 | 75 | 1k+ | | | Text Domain Mismatch |
| #693 | Formzu WP | 30 | 167 | 163 | 3k+ | | | Text Domain Mismatch |
| #694 | GlobalPayments Gateway Provider for WooCommerce | 30 | 640 | 172 | 1k+ | | | Text Domain Mismatch |
| #695 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #696 | Invisible reCaptcha for WordPress | 30 | 90 | 185 | 80k+ | | | Input is not sanitized |
| #697 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #698 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #699 | Midtrans-WooCommerce | 30 | 112 | 132 | 5k+ | | | Non-prefixed global variable |
| #700 | Operation Demo Importer – Demo Importer For WPoperation Themes | 30 | 245 | 104 | 1k+ | | | Text Domain Mismatch |