| #8201 | TS Poll – Survey, Versus Poll, Image Poll, Video Poll | 32 | 570 | 171 | 4k+ | | | Text Domain Mismatch |
| #8202 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 32 | 348 | 258 | 50k+ | | | Output is not escaped |
| #8203 | Posti Shipping | 32 | 664 | 157 | 1k+ | | | Text Domain Mismatch |
| #8204 | Volunteer Sign Up Sheets | 32 | 967 | 401 | 1k+ | | | Output is not escaped |
| #8205 | Quick Featured Images | 32 | 436 | 323 | 50k+ | | | Non-prefixed global variable |
| #8206 | Relevanssi – A Better Search | 32 | 86 | 266 | 100k+ | | | Missing direct file access protection |
| #8207 | Responsive Filterable Portfolio Gallery – Media Grid & Video Portfolio | 32 | 436 | 163 | 1k+ | | | Output is not escaped |
| #8208 | Restrict Usernames Emails Characters | 32 | 327 | 367 | 1k+ | | | Output is not escaped |
| #8209 | WowRevenue – Product Bundles & Bulk Discounts | 32 | 13 | 2,027 | 1k+ | | | Non-prefixed global variable |
| #8210 | Revolut Gateway for WooCommerce | 32 | 85 | 157 | 6k+ | | | Input is not sanitized |
| #8211 | RSS for Yandex Turbo | 32 | 687 | 307 | 20k+ | | | Unsafe printing function |
| #8212 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #8213 | Showcase IDX Real Estate Search & Lead Capture | 32 | 123 | 52 | 2k+ | | | Output is not escaped |
| #8214 | Simple Ajax Chat – Add a Fast, Secure Chat Box | 32 | 108 | 266 | 2k+ | | | Output is not escaped |
| #8215 | Site Search 360 | 32 | 202 | 213 | 400 | | | Output is not escaped |
| #8216 | Sky Addons for Elementor | 32 | 85 | 351 | 2k+ | | | Non-prefixed namespace |
| #8217 | Split Test For Elementor | 32 | 98 | 132 | 3k+ | | | Non-prefixed global variable |
| #8218 | Spoki – Chat Buttons and WooCommerce Notifications | 32 | 1,074 | 260 | 700 | | | Unsafe printing function |
| #8219 | Stock Locations for WooCommerce | 32 | 549 | 360 | 1k+ | | | Output is not escaped |
| #8220 | Stock Sync for WooCommerce | 32 | 362 | 232 | 1k+ | | | Text Domain Mismatch |
| #8221 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |
| #8222 | System Dashboard | 32 | 91 | 205 | 900 | | | Request data is not unslashed |
| #8223 | Tainacan Support for Blocksy | 32 | 244 | 526 | 500 | | | Non-prefixed global variable |
| #8224 | Theme My Login | 32 | 251 | 549 | 60k+ | | | Non-prefixed function |
| #8225 | Thrive Automator | 32 | 84 | 84 | 10k+ | | | SQL query is not prepared |
| #8226 | TK Google Fonts GDPR Compliant | 32 | 582 | 34 | 1k+ | | | Output is not escaped |
| #8227 | Tumult Hype Animations | 32 | 56 | 117 | 1k+ | | | Output is not escaped |
| #8228 | UiCore Blocks – Free WordPress Gutenberg Blocks | 32 | 59 | 394 | 500 | | | Non-prefixed global variable |
| #8229 | Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | 32 | 57 | 293 | 4k+ | | | Post Not In exclude |
| #8230 | Unbounce Landing Pages | 32 | 169 | 86 | 10k+ | | | Output is not escaped |
| #8231 | Secure Client Portal and Private File Sharing Plugin – User Private Files | 32 | 183 | 525 | 1k+ | | | Non-prefixed global variable |
| #8232 | User Registration Using Contact Form 7 | 32 | 103 | 15 | 500 | | | wp function not compatible with requires wp |
| #8233 | Multi Currency For WooCommerce | 32 | 87 | 70 | 1k+ | | | Non-prefixed global variable |
| #8234 | Webdzier Companion | 32 | 539 | 89 | 800 | | | Text Domain Mismatch |
| #8235 | WebwinkelKeur: Webshop keurmerk & reviews for WordPress | 32 | 200 | 47 | 4k+ | | | Short PHP open tag found |
| #8236 | Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring | 32 | 196 | 160 | 900 | | | Text Domain Mismatch |
| #8237 | Easy 3D Viewer | 32 | 399 | 241 | 1k+ | | | Text Domain Mismatch |
| #8238 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net | 32 | 5 | 933 | 40k+ | | | Non-prefixed global variable |
| #8239 | Payment Gateway for Redsys & WooCommerce Lite | 32 | 125 | 75 | 20k+ | | | Text Domain Mismatch |
| #8240 | WooMS | 32 | 199 | 58 | 500 | | | Output is not escaped |
| #8241 | WP 2-step verification | 32 | 154 | 65 | 1k+ | | | Output is not escaped |
| #8242 | WP Bannerize Pro | 32 | 281 | 216 | 800 | | | Text Domain Mismatch |
| #8243 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | | Dynamic hook name |
| #8244 | wp-jalali | 32 | 219 | 66 | 10k+ | | | Text Domain Mismatch |
| #8245 | WP Popup | 32 | 539 | 65 | 1k+ | | | Text Domain Mismatch |
| #8246 | SEOPress – AI SEO Plugin & On-site SEO | 32 | 138 | 429 | 300k+ | | | Non-prefixed global variable |
| #8247 | WP-Stats | 32 | 237 | 126 | 2k+ | | | Output is not escaped |
| #8248 | WP Weixin | 32 | 60 | 152 | 400 | | | Non-prefixed constant |
| #8249 | WPCasa – Real Estate for WordPress | 32 | 85 | 429 | 1k+ | | | Non-prefixed global variable |
| #8250 | wpDirAuth | 32 | 250 | 135 | 500 | | | wp function not compatible with requires wp |