| #8101 | Wonder Slider Lite | 33 | 273 | 187 | 8k+ | | | Output is not escaped |
| #8102 | Product Addons for Woocommerce – Product Options with Custom Fields | 33 | 124 | 114 | 30k+ | | | Output is not escaped |
| #8103 | Min Max Control – Min Max Quantity & Step Control for WooCommerce | 33 | 96 | 215 | 10k+ | | | Non-prefixed global variable |
| #8104 | Hyyan WooCommerce Polylang Integration | 33 | 141 | 220 | 8k+ | | | Nonce verification recommended |
| #8105 | CartBounty – Save and recover abandoned carts for WooCommerce | 33 | 370 | 399 | 10k+ | | | Output is not escaped |
| #8106 | Pay. Payment Methods for WooCommerce | 33 | 318 | 104 | 3k+ | | | Non Singular String Literal Domain |
| #8107 | PDF Invoices Italian Add-on for WooCommerce | 33 | 325 | 200 | 5k+ | | | Non Singular String Literal Domain |
| #8108 | WOW Slider | 33 | 176 | 101 | 3k+ | | | Output is not escaped |
| #8109 | Books Gallery – Book Showcase, Library & Affiliate Plugin | 33 | 1,753 | 178 | 2k+ | | | Output is not escaped |
| #8110 | WP Edit | 33 | 337 | 137 | 40k+ | | | Unsafe printing function |
| #8111 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | | Missing Arg Domain |
| #8112 | WP Social AutoConnect | 33 | 290 | 144 | 400 | | | Output is not escaped |
| #8113 | Connector for Gravity Forms and Google Sheets | 33 | 692 | 155 | 3k+ | | | Text Domain Mismatch |
| #8114 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 33 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #8115 | WebToffee WP Backup and Migration | 33 | 132 | 222 | 5k+ | | | Non-prefixed global variable |
| #8116 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #8117 | WP MyLinks | 33 | 354 | 206 | 1k+ | | | Text Domain Mismatch |
| #8118 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #8119 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #8120 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | | Output is not escaped |
| #8121 | Editor Blocks by Download Manager | 33 | 174 | 102 | 5k+ | | | Output is not escaped |
| #8122 | WPoperation Elementor Addons | 33 | 891 | 52 | 1k+ | | | Text Domain Mismatch |
| #8123 | WPReplace内容字符替换插件 | 33 | 209 | 195 | 800 | | | Non Singular String Literal Domain |
| #8124 | XML Sitemaps | 33 | 65 | 62 | 2k+ | | | Output is not escaped |
| #8125 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #8126 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | | | Text Domain Mismatch |
| #8127 | ACME Divi Modules | 32 | 573 | 35 | 400 | | | Text Domain Mismatch |
| #8128 | ActiveDEMAND | 32 | 157 | 161 | 1k+ | | | Output is not escaped |
| #8129 | Admin Menu Editor | 32 | 159 | 233 | 300k+ | | | Non-prefixed global variable |
| #8130 | Advanced Access Manager – Access Governance for WordPress | 32 | 849 | 62 | 100k+ | | | Output is not escaped |
| #8131 | Affiliate Coupons – Coupon Display Manager – Excellent Tool for Affiliate Marketers | 32 | 183 | 61 | 1k+ | | | Output is not escaped |
| #8132 | AI Alt Text Generator | 32 | 76 | 24 | 1k+ | | | Missing Translators Comment |
| #8133 | All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier | 32 | 325 | 102 | 600 | | | Missing Arg Domain |
| #8134 | annasta Filters for WooCommerce | 32 | 1,073 | 441 | 2k+ | | | Text Domain Mismatch |
| #8135 | Aqua Page Builder | 32 | 320 | 114 | 3k+ | | | Output is not escaped |
| #8136 | Arile Super | 32 | 328 | 351 | 3k+ | | | Non-prefixed global variable |
| #8137 | aThemes Blocks | 32 | 192 | 1,034 | 6k+ | | | Non-prefixed global variable |
| #8138 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | | | Non-prefixed hook name |
| #8139 | Auto YouTube Importer | 32 | 338 | 173 | 1k+ | | | Text Domain Mismatch |
| #8140 | Avadanta Companion | 32 | 1,318 | 54 | 2k+ | | | Text Domain Mismatch |
| #8141 | Speed Kit | 32 | 296 | 73 | 2k+ | | | Output is not escaped |
| #8142 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #8143 | Better Robots.txt – AI-Ready Crawl Control & Bot Governance | 32 | 55 | 83 | 5k+ | | | error log error log |
| #8144 | Blog2Social: Social Media Auto Post & Scheduler | 32 | 7 | 957 | 50k+ | | | Direct Query |
| #8145 | Bosa Elementor Addons and Templates for WooCommerce | 32 | 40 | 165 | 20k+ | | | slow db query tax query |
| #8146 | BP Classic | 32 | 664 | 216 | 6k+ | | | Unsafe printing function |
| #8147 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | | | Output is not escaped |
| #8148 | Quantity Discounts, Breaks & Product Bundles for Woocommerce By Bundler | 32 | 147 | 319 | 400 | | | Direct Query |
| #8149 | Child Theme Configurator | 32 | 442 | 267 | 300k+ | | | Unsafe printing function |
| #8150 | Code Manager | 32 | 217 | 261 | 500 | | | Nonce verification recommended |