| #851 | Five Star Restaurant Reviews | 33 | 242 | 142 | 400 | | | Output is not escaped |
| #852 | Gravity Forms Eway | 33 | 519 | 45 | 500 | | | Missing Translators Comment |
| #853 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 33 | 377 | 139 | 20k+ | | | Unsafe printing function |
| #854 | WPZOOM Social Feed Widget & Block | 33 | 310 | 278 | 60k+ | | | Unsafe printing function |
| #855 | Intagrate Lite | 33 | 94 | 152 | 4k+ | | | date date |
| #856 | ITRO Popup Plugin | 33 | 591 | 135 | 6k+ | | | Output is not escaped |
| #857 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | | | Output is not escaped |
| #858 | Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid | 33 | 274 | 106 | 3k+ | | | Text Domain Mismatch |
| #859 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #860 | MailUp for WordPress – Email and Newsletter Subscription Form | 33 | 251 | 100 | 2k+ | | | Text Domain Mismatch |
| #861 | MAS Companies For WP Job Manager | 33 | 62 | 308 | 1k+ | | | Non-prefixed hook name |
| #862 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #863 | PeproDev WooCommerce Receipt Uploader | 33 | 325 | 49 | 1k+ | | | Non Singular String Literal Domain |
| #864 | Plugin Organizer | 33 | 325 | 257 | 10k+ | | | Output is not escaped |
| #865 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | | | Output is not escaped |
| #866 | Reviews Plus | 33 | 223 | 378 | 1k+ | | | Non-prefixed function |
| #867 | Save as PDF Plugin by PDFCrowd | 33 | 299 | 254 | 1k+ | | | Non-prefixed global variable |
| #868 | Schema & Structured Data for WP & AMP | 33 | 63 | 246 | 100k+ | | | Non-prefixed global variable |
| #869 | Service Box – Icon Box Showcase | 33 | 385 | 230 | 3k+ | | | Non Singular String Literal Domain |
| #870 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #871 | Social Rocket – Social Sharing Plugin | 33 | 1,016 | 255 | 1k+ | | | Unsafe printing function |
| #872 | Testimonial Slider – Free Testimonials Slider Plugin | 33 | 91 | 50 | 700 | | | Request data is not unslashed |
| #873 | Envato Toolkit | 33 | 219 | 69 | 5k+ | | | Output is not escaped |
| #874 | TrackingMore Order Tracking for WooCommerce (Free plan available) | 33 | 94 | 124 | 700 | | | Text Domain Mismatch |
| #875 | WP Twitter Auto Publish | 33 | 442 | 171 | 4k+ | | | Output is not escaped |
| #876 | Multi-Carrier EasyPost Shipping Methods & Address Validation for WooCommerce | 33 | 424 | 69 | 400 | | | Non Singular String Literal Domain |
| #877 | Multi-Carrier Shippo Shipping Rates & Address Validation for WooCommerce | 33 | 411 | 73 | 3k+ | | | Non Singular String Literal Domain |
| #878 | Rich Showcase for Google Reviews | 33 | 212 | 278 | 100k+ | | | Output is not escaped |
| #879 | Wonder Slider Lite | 33 | 273 | 187 | 8k+ | | | Output is not escaped |
| #880 | Product Addons for Woocommerce – Product Options with Custom Fields | 33 | 124 | 114 | 30k+ | | | Output is not escaped |
| #881 | Min Max Control – Min Max Quantity & Step Control for WooCommerce | 33 | 96 | 215 | 10k+ | | | Non-prefixed global variable |
| #882 | Hyyan WooCommerce Polylang Integration | 33 | 141 | 220 | 8k+ | | | Nonce verification recommended |
| #883 | CartBounty – Save and recover abandoned carts for WooCommerce | 33 | 370 | 399 | 10k+ | | | Output is not escaped |
| #884 | Pay. Payment Methods for WooCommerce | 33 | 318 | 104 | 3k+ | | | Non Singular String Literal Domain |
| #885 | PDF Invoices Italian Add-on for WooCommerce | 33 | 325 | 200 | 5k+ | | | Non Singular String Literal Domain |
| #886 | Books Gallery – Book Showcase, Library & Affiliate Plugin | 33 | 1,753 | 178 | 2k+ | | | Output is not escaped |
| #887 | WP Edit | 33 | 337 | 137 | 40k+ | | | Unsafe printing function |
| #888 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | | Missing Arg Domain |
| #889 | WP Social AutoConnect | 33 | 290 | 144 | 400 | | | Output is not escaped |
| #890 | Connector for Gravity Forms and Google Sheets | 33 | 692 | 155 | 3k+ | | | Text Domain Mismatch |
| #891 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 33 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #892 | WebToffee WP Backup and Migration | 33 | 132 | 222 | 5k+ | | | Non-prefixed global variable |
| #893 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #894 | WP MyLinks | 33 | 354 | 206 | 1k+ | | | Text Domain Mismatch |
| #895 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #896 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #897 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | | Output is not escaped |
| #898 | Editor Blocks by Download Manager | 33 | 174 | 102 | 5k+ | | | Output is not escaped |
| #899 | WPoperation Elementor Addons | 33 | 891 | 52 | 1k+ | | | Text Domain Mismatch |
| #900 | WPReplace内容字符替换插件 | 33 | 209 | 195 | 800 | | | Non Singular String Literal Domain |