| #8251 | WP Popup | 32 | 539 | 65 | 1k+ | | | Text Domain Mismatch |
| #8252 | SEOPress – AI SEO Plugin & On-site SEO | 32 | 138 | 429 | 300k+ | | | Non-prefixed global variable |
| #8253 | WP-Stats | 32 | 237 | 126 | 2k+ | | | Output is not escaped |
| #8254 | WP Weixin | 32 | 60 | 152 | 400 | | | Non-prefixed constant |
| #8255 | WPCasa – Real Estate for WordPress | 32 | 85 | 429 | 1k+ | | | Non-prefixed global variable |
| #8256 | wpDirAuth | 32 | 250 | 135 | 500 | | | wp function not compatible with requires wp |
| #8257 | Privacy Policy Generator – WPLP Legal Pages | 32 | 26 | 409 | 10k+ | | | Non-prefixed global variable |
| #8258 | WT GeoTargeting | 32 | 89 | 43 | 1k+ | | | Output is not escaped |
| #8259 | YITH Infinite Scrolling | 32 | 387 | 1,417 | 10k+ | | | Non-prefixed global variable |
| #8260 | YITH WooCommerce Badge Management | 32 | 413 | 1,446 | 10k+ | | | Non-prefixed global variable |
| #8261 | YITH WooCommerce Compare | 32 | 422 | 1,508 | 100k+ | | | Non-prefixed global variable |
| #8262 | YITH WooCommerce Quick View | 32 | 388 | 1,420 | 90k+ | | | Non-prefixed global variable |
| #8263 | Yoo Slider – Image Slider & Video Slider | 32 | 744 | 209 | 600 | | | Output is not escaped |
| #8264 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #8265 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #8266 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #8267 | Extra Product Options Builder for WooCommerce | 31 | 113 | 194 | 2k+ | | | Non-prefixed global variable |
| #8268 | Advanced Category Excluder | 31 | 349 | 160 | 600 | | | Output is not escaped |
| #8269 | Advanced Woo Search – Product Search for WooCommerce | 31 | 229 | 377 | 70k+ | | | Nonce verification recommended |
| #8270 | AI Builder – Generate pages, blocks, images & translate with AI | 31 | 101 | 194 | 400 | | | Non-prefixed global variable |
| #8271 | AI Copilot – Content Generator | 31 | 159 | 163 | 1k+ | | | wp function not compatible with requires wp |
| #8272 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 4k+ | | | Non-prefixed global variable |
| #8273 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | | Nonce verification recommended |
| #8274 | Apaczka.pl WooCommerce | 31 | 99 | 276 | 1k+ | | | Non-prefixed global variable |
| #8275 | APCu Manager | 31 | 153 | 136 | 10k+ | | | Output is not escaped |
| #8276 | Asgaros Forum | 31 | 167 | 412 | 10k+ | | | Output is not escaped |
| #8277 | The SEO Framework – Fast, Automated, Effortless. | 31 | 363 | 609 | 200k+ | | | Non-prefixed global variable |
| #8278 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #8279 | SEO合集(支持百度/Google/Bing/头条推送) | 31 | 13 | 1,407 | 800 | | | Direct Query |
| #8280 | Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam | 31 | 598 | 70 | 700 | | | Text Domain Mismatch |
| #8281 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 600 | | | Missing nonce verification |
| #8282 | Buy Me a Coffee – Button and Widget Plugin | 31 | 138 | 140 | 6k+ | | | Output is not escaped |
| #8283 | CashBill.pl – Płatności WooCommerce | 31 | 181 | 101 | 900 | | | Output is not escaped |
| #8284 | České služby pro WordPress | 31 | 95 | 139 | 1k+ | | | Output is not escaped |
| #8285 | cformsII | 31 | 777 | 536 | 3k+ | | | Unsafe printing function |
| #8286 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #8287 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #8288 | Co-marquage service-public.fr | 31 | 84 | 213 | 1k+ | | | Non-prefixed global variable |
| #8289 | Codeless Page Builder | 31 | 415 | 258 | 900 | | | Text Domain Mismatch |
| #8290 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #8291 | Cookie Dough Compliance and Consent for GDPR | 31 | 539 | 452 | 500 | | | Non Singular String Literal Domain |
| #8292 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | | Text Domain Mismatch |
| #8293 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |
| #8294 | Theme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons | 31 | 393 | 329 | 6k+ | | | Missing direct file access protection |
| #8295 | Crowdfundly | 31 | 594 | 402 | 500 | | | Output is not escaped |
| #8296 | MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | 31 | 663 | 273 | 2k+ | | | Text Domain Mismatch |
| #8297 | DirectoryPress Frontend | 31 | 402 | 563 | 800 | | | Non-prefixed global variable |
| #8298 | Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) | 31 | 113 | 233 | 2k+ | | | Non-prefixed namespace |
| #8299 | Download Plugin | 31 | 78 | 102 | 60k+ | | | Output is not escaped |
| #8300 | Up2pay e-Transactions WooCommerce Payment Gateway | 31 | 459 | 175 | 4k+ | | | Text Domain Mismatch |