| #801 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #802 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #803 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #804 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 400k+ | | | Non-prefixed global variable |
| #805 | Conditional Logic for Woo Product Add-ons | 26 | 575 | 1,352 | 500 | | | Non-prefixed global variable |
| #806 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #807 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 26 | 159 | 297 | 1k+ | | | Non-prefixed global variable |
| #808 | CP Multi View Events Calendar | 26 | 86 | 439 | 900 | | | Non-prefixed global variable |
| #809 | WP Frontend Admin – Display WP Admin Pages in the Frontend | 26 | 347 | 337 | 400 | | | Non Singular String Literal Domain |
| #810 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | | Output is not escaped |
| #811 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #812 | ELEX WooCommerce Google Shopping (Google Product Feed) | 26 | 226 | 242 | 1k+ | | | Text Domain Mismatch |
| #813 | RSS Redirect & Feedburner Alternative | 26 | 277 | 272 | 1k+ | | | Output is not escaped |
| #814 | FG Drupal to WordPress | 26 | 275 | 100 | 700 | | | Unsafe printing function |
| #815 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |
| #816 | FlagShip WooCommerce Shipping | 26 | 495 | 188 | 400 | | | Non Singular String Literal Domain |
| #817 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #818 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #819 | FV Antispam | 26 | 332 | 239 | 900 | | | Output is not escaped |
| #820 | Translate WordPress – Google Language Translator | 26 | 200 | 317 | 100k+ | | | Non-prefixed global variable |
| #821 | Ibtana – WordPress Website Builder | 26 | 173 | 409 | 10k+ | | | Non-prefixed global variable |
| #822 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 26 | 423 | 292 | 2k+ | | | Output is not escaped |
| #823 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #824 | Kirki – Freeform Page Builder, Website Builder & Customizer | 26 | 191 | 803 | 500k+ | | | Nonce verification recommended |
| #825 | Landing Page Cat – Coming Soon & Maintenance Pages | 26 | 91 | 180 | 600 | | | Non-prefixed class |
| #826 | Login Widget With Shortcode | 26 | 335 | 198 | 6k+ | | | wp function not compatible with requires wp |
| #827 | MakeStories (for Google Web Stories) | 26 | 117 | 416 | 600 | | | Nonce verification recommended |
| #828 | MaxGalleria | 26 | 278 | 560 | 2k+ | | | Non-prefixed global variable |
| #829 | Media File Renamer: Rename for better SEO (AI-Powered) | 26 | 154 | 170 | 40k+ | | | Direct Query |
| #830 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |
| #831 | Omise Payments | 26 | 358 | 256 | 2k+ | | | Output is not escaped |
| #832 | Online Contact Widget-多合一在线客服插件 | 26 | 708 | 80 | 800 | | | Non Singular String Literal Domain |
| #833 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 599 | 6k+ | | | Request data is not unslashed |
| #834 | Organic Builder Widgets – Simple WordPress Page Builder | 26 | 1,034 | 125 | 3k+ | | | Output is not escaped |
| #835 | PDF for WPForms + Drag and Drop Template Builder | 26 | 674 | 113 | 1k+ | | | wp function not compatible with requires wp |
| #836 | Polylang | 26 | 36 | 564 | 800k+ | | | Non-prefixed hook name |
| #837 | Post List Designer – Category Post, Recent Post, Post List | 26 | 542 | 1,320 | 1k+ | | | Non-prefixed global variable |
| #838 | Premmerce User Roles | 26 | 597 | 1,357 | 600 | | | Non-prefixed global variable |
| #839 | Product Table For WooCommerce | 26 | 191 | 858 | 600 | | | Non-prefixed global variable |
| #840 | RestaurantPress | 26 | 265 | 518 | 600 | | | Output is not escaped |
| #841 | Role Based Pricing for Woo by Meow Crew | 26 | 548 | 1,354 | 2k+ | | | Non-prefixed global variable |
| #842 | Video Gallery – Vimeo and YouTube Gallery | 26 | 561 | 794 | 6k+ | | | Non-prefixed global variable |
| #843 | SV Proven Expert | 26 | 747 | 380 | 900 | | | Output is not escaped |
| #844 | Theater for WordPress | 26 | 348 | 344 | 600 | | | Output is not escaped |
| #845 | Ultimate Reviews | 26 | 515 | 345 | 500 | | | Output is not escaped |
| #846 | UpdraftCentral Dashboard | 26 | 267 | 180 | 5k+ | | | Missing Translators Comment |
| #847 | User Avatar | 26 | 104 | 173 | 4k+ | | | Non-prefixed constant |
| #848 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | | | Text Domain Mismatch |
| #849 | VikWidgetsLoader – Collection of Widgets | 26 | 1,182 | 538 | 1k+ | | | Output is not escaped |
| #850 | Virtue/Ascend/Pinnacle Toolkit | 26 | 605 | 300 | 30k+ | | | Output is not escaped |