| #7701 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #7702 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | | Non-prefixed global variable |
| #7703 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | | | trademarked term |
| #7704 | Writesonic | 35 | 14 | 16 | 1k+ | | | Non-prefixed global variable |
| #7705 | WSB HUB3 | 35 | 36 | 109 | 1k+ | | | Missing nonce verification |
| #7706 | xili-tidy-tags | 35 | 224 | 157 | 1k+ | | | Output is not escaped |
| #7707 | XServer Migrator | 35 | 39 | 53 | 10k+ | | | Interpolated SQL is not prepared |
| #7708 | TypeSquare Webfonts for エックスサーバー | 35 | 183 | 98 | 100k+ | | | Missing Arg Domain |
| #7709 | XT Event Widget for Social Events | 35 | 3 | 55 | 900 | | | Non-prefixed global variable |
| #7710 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 35 | 48 | 114 | 5k+ | | | Non-prefixed hook name |
| #7711 | Yes/No Chart | 35 | 136 | 139 | 2k+ | | | Unsafe printing function |
| #7712 | Year Make Model Search for WooCommerce | 35 | 188 | 162 | 1k+ | | | Output is not escaped |
| #7713 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | | | Text Domain Mismatch |
| #7714 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #7715 | Yotpo: Product & Photo Reviews for WooCommerce | 35 | 24 | 189 | 2k+ | | | Non-prefixed function |
| #7716 | Embeds for YouTube | 35 | 255 | 307 | 10k+ | | | Non-prefixed global variable |
| #7717 | ZI Hide Featured Image | 35 | 8 | 3 | 700 | | | Hidden files included |
| #7718 | Ziina | 35 | 10 | 25 | 2k+ | | | Input is not sanitized |
| #7719 | AFS Analytics | 34 | 194 | 98 | 600 | | | Text Domain Mismatch |
| #7720 | Advanced Coupons for WooCommerce Coupons & Store Credit | 34 | 74 | 214 | 20k+ | | | Non-prefixed global variable |
| #7721 | Advanced Custom Fields: reCAPTCHA Field | 34 | 104 | 53 | 800 | | | Text Domain Mismatch |
| #7722 | Advanced Shipping Validation for WooCommerce | 34 | 331 | 127 | 400 | | | Text Domain Mismatch |
| #7723 | Advanced Twenty Seventeen | 34 | 247 | 98 | 3k+ | | | Text Domain Mismatch |
| #7724 | affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display | 34 | 326 | 75 | 2k+ | | | Output is not escaped |
| #7725 | AGCA – Custom Dashboard & Login Page | 34 | 350 | 44 | 20k+ | | | Unsafe printing function |
| #7726 | AI WP Writer – SEO content generator, chatGPT, Gemini | 34 | 581 | 509 | 3k+ | | | Text Domain Mismatch |
| #7727 | All In One Favicon | 34 | 214 | 62 | 60k+ | | | Output is not escaped |
| #7728 | All-in-One WP Migration and Backup | 34 | 47 | 69 | 5m+ | | | Missing nonce verification |
| #7729 | Arconix Shortcodes | 34 | 129 | 108 | 4k+ | | | Output is not escaped |
| #7730 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | | | Exception output is not escaped |
| #7731 | Audit Trail | 34 | 90 | 107 | 10k+ | | | Unsafe printing function |
| #7732 | AyeCode Connect | 34 | 178 | 253 | 10k+ | | | Nonce verification recommended |
| #7733 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 600 | | | SQL query is not prepared |
| #7734 | Blog-in-Blog | 34 | 64 | 93 | 800 | | | Non-prefixed function |
| #7735 | BoldGrid Easy SEO – Simple and Effective SEO | 34 | 149 | 104 | 40k+ | | | Text Domain Mismatch |
| #7736 | Buckets | 34 | 68 | 76 | 500 | | | Output is not escaped |
| #7737 | BuddyPress & BuddyBoss Member Profile Forms | 34 | 154 | 121 | 400 | | | Text Domain Mismatch |
| #7738 | Cache Master | 34 | 371 | 27 | 400 | | | Output is not escaped |
| #7739 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #7740 | SMS Abandoned Cart Recovery ✦ CartBoss | 34 | 67 | 72 | 400 | | | SQL query is not prepared |
| #7741 | Checkout Field Editor for WooCommerce – Checkout Manager | 34 | 122 | 65 | 20k+ | | | Text Domain Mismatch |
| #7742 | Clean Testimonials | 34 | 127 | 87 | 400 | | | Output is not escaped |
| #7743 | CM Search And Replace – Optimize content edits with a powerful search and replace tool | 34 | 286 | 111 | 2k+ | | | Output is not escaped |
| #7744 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #7745 | Cornerstone | 34 | 161 | 174 | 30k+ | | | Nonce verification recommended |
| #7746 | CSS JS Manager, Async JavaScript, Defer Render Blocking CSS | 34 | 76 | 106 | 1k+ | | | Input is not validated |
| #7747 | Custom Login Page by SeedProd | 34 | 330 | 125 | 500 | | | Output is not escaped |
| #7748 | Custom Post Type Attachment | 34 | 153 | 49 | 800 | | | wp function not compatible with requires wp |
| #7749 | Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager | 34 | 32 | 307 | 100k+ | | | Non-prefixed global variable |
| #7750 | Datafeedr API | 34 | 307 | 48 | 6k+ | | | Output is not escaped |