| #7801 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | | Non-prefixed global variable |
| #7802 | Lenix Leads Collector | 34 | 414 | 242 | 10k+ | | | Text Domain Mismatch |
| #7803 | Login with Vipps and MobilePay | 34 | 263 | 174 | 900 | | | Output is not escaped |
| #7804 | MailChimp Forms by MailMunch | 34 | 120 | 55 | 10k+ | | | Output is not escaped |
| #7805 | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 34 | 36 | 459 | 3k+ | | | Input is not sanitized |
| #7806 | MantraBrain Starter Sites | MantraBrain Theme Demo Importer | 34 | 117 | 61 | 1k+ | | | Output is not escaped |
| #7807 | Mass Ping Tool for SEO – WordPress ping list to get indexed faster on Google, Yandex, … | 34 | 77 | 96 | 500 | | | Output is not escaped |
| #7808 | Media Vault | 34 | 115 | 150 | 800 | | | Output is not escaped |
| #7809 | Melhor Envio | 34 | 24 | 276 | 10k+ | | | Nonce verification recommended |
| #7810 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | | | Output is not escaped |
| #7811 | Meow Lightbox | 34 | 77 | 52 | 10k+ | | | Non Singular String Literal Domain |
| #7812 | Meta Tag Manager | 34 | 142 | 321 | 80k+ | | | Nonce verification recommended |
| #7813 | OTP Login & Register Woocommerce | 34 | 148 | 202 | 1k+ | | | Missing nonce verification |
| #7814 | Montonio for WooCommerce | 34 | 44 | 257 | 10k+ | | | Non-prefixed global variable |
| #7815 | mowomo Social Share | 34 | 202 | 156 | 1k+ | | | Output is not escaped |
| #7816 | MPL-Publisher — Ebook & Audiobook Creator | 34 | 489 | 76 | 800 | | | Text Domain Mismatch |
| #7817 | Multi Step Form | 34 | 277 | 136 | 9k+ | | | Output is not escaped |
| #7818 | My Tickets – Accessible Event Ticketing | 34 | 314 | 566 | 700 | | | Nonce verification recommended |
| #7819 | NextGEN Gallery Optimizer | 34 | 128 | 92 | 2k+ | | | Output is not escaped |
| #7820 | Ni WooCommerce Custom Order Status | 34 | 256 | 139 | 2k+ | | | Text Domain Mismatch |
| #7821 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | | | Non-prefixed global variable |
| #7822 | Openpay SPEI Plugin | 34 | 112 | 14 | 1k+ | | | Exception output is not escaped |
| #7823 | Optima Express IDX | 34 | 71 | 237 | 10k+ | | | Non-prefixed class |
| #7824 | Child Theme Creator by Orbisius | 34 | 86 | 39 | 10k+ | | | Output is not escaped |
| #7825 | Team Members Profile – Employee Directory & Staff Showcase | 34 | 339 | 90 | 600 | | | Output is not escaped |
| #7826 | OwnerRez | 34 | 79 | 56 | 700 | | | Unsafe printing function |
| #7827 | MW Font Changer | 34 | 463 | 75 | 7k+ | | | Text Domain Mismatch |
| #7828 | Payoneer Checkout | 34 | 168 | 41 | 5k+ | | | Exception output is not escaped |
| #7829 | PDF Invoices and Packing Slips For WooCommerce | 34 | 108 | 284 | 1k+ | | | Non-prefixed global variable |
| #7830 | المنتور فارسی | 34 | 52 | 50 | 40k+ | | | curl curl setopt |
| #7831 | PhonePe Payment Solutions | 34 | 77 | 106 | 10k+ | | | Missing direct file access protection |
| #7832 | Podigee WordPress Quick Publish – now with Gutenberg support! | 34 | 108 | 95 | 700 | | | Text Domain Mismatch |
| #7833 | Progress Bar & Skill Bar | 34 | 175 | 179 | 1k+ | | | Non Singular String Literal Domain |
| #7834 | PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget | 34 | 46 | 298 | 9k+ | | | Missing nonce verification |
| #7835 | PW WooCommerce Bulk Edit | 34 | 219 | 149 | 20k+ | | | Unsafe printing function |
| #7836 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | | | Text Domain Mismatch |
| #7837 | Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | 34 | 261 | 863 | 20k+ | | | Non-prefixed global variable |
| #7838 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | | | Output is not escaped |
| #7839 | Redirection | 34 | 32 | 294 | 2m+ | | | Non-prefixed class |
| #7840 | Responsive Menu – Create Mobile-Friendly Menu | 34 | 68 | 40 | 70k+ | | | Nonce verification recommended |
| #7841 | Event Timeline – Vertical Timeline | 34 | 26 | 684 | 1k+ | | | Non-prefixed global variable |
| #7842 | RTMKit | 34 | 10 | 380 | 50k+ | | | Non-prefixed global variable |
| #7843 | RTMForm Builder | 34 | 188 | 209 | 30k+ | | | Text Domain Mismatch |
| #7844 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #7845 | Saphali Woocommerce Lite | 34 | 376 | 313 | 10k+ | | | Non-prefixed global variable |
| #7846 | Search Engine Insights for Google Search Console | 34 | 174 | 113 | 2k+ | | | Output is not escaped |
| #7847 | Search Meter | 34 | 191 | 94 | 20k+ | | | Output is not escaped |
| #7848 | Security Safe | 34 | 193 | 164 | 700 | | | Missing Translators Comment |
| #7849 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | | Output is not escaped |
| #7850 | Shift8 CDN | 34 | 81 | 25 | 600 | | | Output is not escaped |