| #7201 | Constant Contact Forms | 35 | 41 | 89 | 20k+ | | | Missing nonce verification |
| #7202 | Content Mask | 35 | 50 | 350 | 1k+ | | | Non-prefixed global variable |
| #7203 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #7204 | EasyTest – Simplify A/B Testing | 35 | 9 | 76 | 10k+ | | | Non-prefixed global variable |
| #7205 | GDPR Cookie Consent Notice Box | 35 | 46 | 17 | 1k+ | | | Output is not escaped |
| #7206 | Cookie Information – Cookie Banner with Consent Mode v2 | 35 | 185 | 28 | 2k+ | | | Output is not escaped |
| #7207 | Cookie-Script.com | 35 | 6 | 7 | 10k+ | | | Non-prefixed class |
| #7208 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | | Output is not escaped |
| #7209 | Core Framework | 35 | 70 | 62 | 10k+ | | | Text Domain Mismatch |
| #7210 | Cost of Goods: Product Cost & Profit Calculator for WooCommerce | 35 | 21 | 29 | 9k+ | | | Missing Translators Comment |
| #7211 | Counter live visitors for WooCommerce | 35 | 189 | 39 | 7k+ | | | Short PHP open tag found |
| #7212 | Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | 35 | 30 | 168 | 1k+ | | | Non-prefixed global variable |
| #7213 | Create Block Theme | 35 | 43 | 5 | 20k+ | | | unlink unlink |
| #7214 | CrowdSec | 35 | 130 | 119 | 2k+ | | | Output is not escaped |
| #7215 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |
| #7216 | CubeWP Framework | 35 | 114 | 71 | 4k+ | | | wp function not compatible with requires wp |
| #7217 | Cue by AudioTheme.com | 35 | 28 | 150 | 6k+ | | | Non-prefixed hook name |
| #7218 | Currency Converter | 35 | 104 | 4 | 400 | | | Output is not escaped |
| #7219 | Currency per Product for WooCommerce | 35 | 46 | 24 | 2k+ | | | Text Domain Mismatch |
| #7220 | Currency Switcher for WooCommerce | 35 | 166 | 61 | 800 | | | Text Domain Mismatch |
| #7221 | Custom 404 Pro | 35 | 50 | 27 | 7k+ | | | wp function not compatible with requires wp |
| #7222 | Custom CSS and JavaScript | 35 | 38 | 91 | 10k+ | | | Input is not sanitized |
| #7223 | Additional Custom Emails & Recipients for WooCommerce | 35 | 1 | 0 | 2k+ | | | Hidden files included |
| #7224 | Wbcom Designs – Custom Font Uploader | 35 | 340 | 123 | 3k+ | | | Text Domain Mismatch |
| #7225 | Custom JavaScript Editor | 35 | 8 | 23 | 400 | | | Missing Version |
| #7226 | Custom links in Elementor Image Carousel | 35 | 8 | 2 | 5k+ | | | Text Domain Mismatch |
| #7227 | Custom Order Numbers for WooCommerce | 35 | 6 | 32 | 20k+ | | | Non-prefixed hook name |
| #7228 | Custom Order Status for WooCommerce | 35 | 41 | 55 | 10k+ | | | Non-prefixed hook name |
| #7229 | Custom Post Type Maker | 35 | 240 | 86 | 6k+ | | | Unsafe printing function |
| #7230 | Custom Post Type Permalinks | 35 | 8 | 4 | 200k+ | | | Setting is missing a sanitization callback |
| #7231 | Custom Price for WooCommerce | 35 | 3 | 9 | 3k+ | | | Non-prefixed global variable |
| #7232 | Customize My Account Page | 35 | 4 | 11 | 400 | | | Dynamic hook name |
| #7233 | Customizer Backup & Reset | 35 | 8 | 10 | 7k+ | | | Output is not escaped |
| #7234 | Dadevarzan WordPress Common | 35 | 56 | 71 | 700 | | | Text Domain Mismatch |
| #7235 | DarkLooks – Dark Mode Switcher For WordPress | 35 | 195 | 21 | 900 | | | Text Domain Mismatch |
| #7236 | Datafeedr Product Sets | 35 | 602 | 206 | 5k+ | | | Output is not escaped |
| #7237 | Deposits & Partial Payments for WooCommerce | 35 | 174 | 144 | 5k+ | | | Text Domain Mismatch |
| #7238 | DesignSetGo | 35 | 7 | 0 | 5k+ | | | Hidden files included |
| #7239 | Desktop Mode | 35 | 18 | 596 | 2k+ | | | Direct Query |
| #7240 | Nexi Checkout | 35 | 45 | 308 | 3k+ | | | Dynamic hook name |
| #7241 | Dintero Checkout for WooCommerce Payment Methods | 35 | 58 | 48 | 600 | | | Text Domain Mismatch |
| #7242 | PiWeb Disable payment method / Partial payment for WooCommerce | 35 | 55 | 221 | 4k+ | | | Non-prefixed class |
| #7243 | Disable and Remove Google Fonts | GDPR & DSGVO friendly | 35 | 21 | 11 | 100k+ | | | Missing Translators Comment |
| #7244 | Disable XML-RPC-API | 35 | 444 | 52 | 100k+ | | | Text Domain Mismatch |
| #7245 | Disk Usage Sunburst | 35 | 30 | 34 | 9k+ | | | Output is not escaped |
| #7246 | Dokan Invoice | 35 | 9 | 3 | 500 | | | Missing Translators Comment |
| #7247 | Potent Donations for WooCommerce | 35 | 14 | 25 | 2k+ | | | Missing nonce verification |
| #7248 | DOOFINDER Search and Discovery for WP & WooCommerce | 35 | 151 | 120 | 2k+ | | | Text Domain Mismatch |
| #7249 | Dropshipping XML for WooCommerce | 35 | 9 | 27 | 800 | | | Non-prefixed global variable |
| #7250 | Duplica – Duplicate Posts, Pages, Custom Posts or Users | 35 | 14 | 31 | 2k+ | | | Non-prefixed global variable |