| #8401 | AI Builder – Generate pages, blocks, images & translate with AI | 31 | 101 | 194 | 400 | | | Non-prefixed global variable |
| #8402 | ImgSEO – AI Image Alt Text Generator & Image SEO Tools | 31 | 1 | 677 | 400 | | | Direct Query |
| #8403 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 30 | 45 | 374 | 4m+ | | | Non-prefixed global variable |
| #8404 | WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | 30 | 32 | 346 | 4m+ | | | Non-prefixed hook name |
| #8405 | WooPayments: Integrated WooCommerce Payments | 30 | 182 | 308 | 900k+ | | | Exception output is not escaped |
| #8406 | WooCommerce Tax (formerly WooCommerce Shipping & Tax) | 30 | 103 | 198 | 600k+ | | | Non-prefixed class |
| #8407 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 26 | 722 | 200k+ | | | Non-prefixed global variable |
| #8408 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #8409 | Mercado Pago payments for WooCommerce | 30 | 619 | 63 | 100k+ | | | Short PHP open tag found |
| #8410 | Stackable – Page Builder Gutenberg Blocks | 30 | 482 | 87 | 100k+ | | | Non Singular String Literal Domain |
| #8411 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 173 | 479 | 100k+ | | | Interpolated SQL is not prepared |
| #8412 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #8413 | Invisible reCaptcha for WordPress | 30 | 90 | 185 | 80k+ | | | Input is not sanitized |
| #8414 | FOX – Currency Switcher Professional for WooCommerce | 30 | 211 | 1,022 | 50k+ | | | Non-prefixed global variable |
| #8415 | Exclusive Addons for Elementor | 30 | 3,630 | 263 | 50k+ | | | Text Domain Mismatch |
| #8416 | OoohBoi Steroids for Elementor | 30 | 2,059 | 100 | 40k+ | | | Text Domain Mismatch |
| #8417 | Sina Extension for Elementor | 30 | 3,691 | 160 | 40k+ | | | Text Domain Mismatch |
| #8418 | Themify Portfolio Post | 30 | 214 | 102 | 30k+ | | | Text Domain Mismatch |
| #8419 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #8420 | WP Admin UI Customize | 30 | 629 | 390 | 30k+ | | | Non-prefixed global variable |
| #8421 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #8422 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #8423 | SmartCrawl SEO checker, analyzer & optimizer | 30 | 347 | 1,307 | 20k+ | | | Non-prefixed global variable |
| #8424 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #8425 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #8426 | گرویتی فرم فارسی | 30 | 205 | 157 | 20k+ | | | Text Domain Mismatch |
| #8427 | WPS Cleaner | 30 | 430 | 491 | 20k+ | | | Output is not escaped |
| #8428 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #8429 | User Access Manager | 30 | 393 | 171 | 10k+ | | | Output is not escaped |
| #8430 | Arile Extra | 30 | 537 | 570 | 10k+ | | | Non-prefixed global variable |
| #8431 | Custom Post Types and Custom Fields creator – WCK | 30 | 1,299 | 137 | 10k+ | | | Text Domain Mismatch |
| #8432 | Subscriptions for WooCommerce | 30 | 1 | 1,190 | 10k+ | | | Non-prefixed global variable |
| #8433 | Analytics Insights – Google Analytics Dashboard for WordPress | 30 | 241 | 170 | 10k+ | | | Unsafe printing function |
| #8434 | Easy Affiliate Links | 30 | 186 | 198 | 7k+ | | | Missing direct file access protection |
| #8435 | Popularis Extra | 30 | 237 | 141 | 7k+ | | | Output is not escaped |
| #8436 | Pre-Orders for WooCommerce | 30 | 568 | 261 | 7k+ | | | Output is not escaped |
| #8437 | YITH Pre-Order for WooCommerce | 30 | 397 | 1,464 | 6k+ | | | Non-prefixed global variable |
| #8438 | Easy Custom Auto Excerpt | 30 | 84 | 166 | 6k+ | | | Non-prefixed global variable |
| #8439 | Delivery & Pickup Date Time for WooCommerce | 30 | 439 | 435 | 5k+ | | | Non-prefixed global variable |
| #8440 | Midtrans-WooCommerce | 30 | 112 | 132 | 5k+ | | | Non-prefixed global variable |
| #8441 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #8442 | YITH WooCommerce Product Slider Carousel | 30 | 389 | 1,479 | 4k+ | | | Non-prefixed global variable |
| #8443 | Edwiser Bridge – WordPress Moodle Integration | 30 | 4 | 669 | 4k+ | | | Non-prefixed hook name |
| #8444 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #8445 | Waitlist Woocommerce ( Back in stock notifier ) | 30 | 272 | 311 | 4k+ | | | Output is not escaped |
| #8446 | WPZOOM Addons for Beaver Builder | 30 | 2,168 | 177 | 4k+ | | | Text Domain Mismatch |
| #8447 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | | | Non-prefixed global variable |
| #8448 | Widgetize Pages Light | 30 | 145 | 104 | 3k+ | | | Output is not escaped |
| #8449 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #8450 | User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress | 30 | 486 | 278 | 3k+ | | | Text Domain Mismatch |