| #8451 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #8452 | Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | 30 | 60 | 387 | 3k+ | | | Non-prefixed global variable |
| #8453 | Urvanov Syntax Highlighter | 30 | 221 | 87 | 3k+ | | | Output is not escaped |
| #8454 | Element Invader – Template Kits for Elementor | 30 | 274 | 130 | 3k+ | | | Output is not escaped |
| #8455 | YayPricing – WooCommerce Dynamic Pricing & Discounts | 30 | 174 | 186 | 3k+ | | | Non-prefixed global variable |
| #8456 | Formzu WP | 30 | 167 | 163 | 3k+ | | | Text Domain Mismatch |
| #8457 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | | Non-prefixed global variable |
| #8458 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #8459 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #8460 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #8461 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #8462 | Checkout with Cash App on WooCommerce | 30 | 122 | 308 | 2k+ | | | Non-prefixed global variable |
| #8463 | Kargo Takip, Kargo SMS, İlçe Mahalle Sözleşme by Hezarfen | 30 | 70 | 297 | 2k+ | | | Non-prefixed global variable |
| #8464 | Move Addons for Elementor | 30 | 3,919 | 91 | 2k+ | | | Text Domain Mismatch |
| #8465 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | | | Non-prefixed global variable |
| #8466 | Yaad Sarig Payment Gateway For WC | 30 | 158 | 271 | 2k+ | | | Nonce verification recommended |
| #8467 | Dropify | 30 | 132 | 254 | 2k+ | | | Nonce verification recommended |
| #8468 | PiWeb Export Customers Users & Guest customer to CSV for WooCommerce | 30 | 173 | 75 | 1k+ | | | Text Domain Mismatch |
| #8469 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #8470 | WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 30 | 113 | 419 | 1k+ | | | Non-prefixed global variable |
| #8471 | WP Inventory Manager | 30 | 856 | 233 | 1k+ | | | Output is not escaped |
| #8472 | Operation Demo Importer – Demo Importer For WPoperation Themes | 30 | 245 | 104 | 1k+ | | | Text Domain Mismatch |
| #8473 | Photo Gallery Slideshow & Masonry Tiled Gallery | 30 | 806 | 352 | 1k+ | | | Output is not escaped |
| #8474 | WP Docs | 30 | 268 | 271 | 1k+ | | | Output is not escaped |
| #8475 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget | 30 | 231 | 102 | 1k+ | | | Non Singular String Literal Domain |
| #8476 | Taboola | 30 | 89 | 147 | 1k+ | | | Output is not escaped |
| #8477 | GlobalPayments Gateway Provider for WooCommerce | 30 | 640 | 172 | 1k+ | | | Text Domain Mismatch |
| #8478 | Realbig For WordPress | 30 | 36 | 591 | 1k+ | | | Non-prefixed global variable |
| #8479 | Aitasi Coming Soon | 30 | 516 | 186 | 1k+ | | | Output is not escaped |
| #8480 | Travelers' Map | 30 | 311 | 155 | 1k+ | | | Output is not escaped |
| #8481 | Export Plugins and Templates | 30 | 143 | 33 | 1k+ | | | file system operations fread |
| #8482 | Mailrelay | 30 | 318 | 170 | 1k+ | | | Text Domain Mismatch |
| #8483 | Novelist | 30 | 475 | 158 | 1k+ | | | Output is not escaped |
| #8484 | UX Flat | 30 | 539 | 203 | 1k+ | | | Missing Arg Domain |
| #8485 | Tutor LMS Divi Modules | 30 | 420 | 722 | 1k+ | | | Non-prefixed global variable |
| #8486 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #8487 | Pubjet | پابجت | 30 | 91 | 172 | 1k+ | | | Output is not escaped |
| #8488 | Laposta Signup Embed | 30 | 88 | 19 | 1k+ | | | Exception output is not escaped |
| #8489 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #8490 | Star Addons for Elementor | 30 | 236 | 255 | 1k+ | | | Non-prefixed global variable |
| #8491 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #8492 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #8493 | Eway Payment Gateway | 30 | 509 | 92 | 800 | | | Missing Translators Comment |
| #8494 | Blockons – Gutenberg blocks for WordPress and WooCommerce websites | 30 | 69 | 205 | 700 | | | Non-prefixed global variable |
| #8495 | Widget Manager Light | 30 | 233 | 83 | 600 | | | Text Domain Mismatch |
| #8496 | remarketable | 30 | 281 | 93 | 600 | | | Output is not escaped |
| #8497 | WonderPush – Web Push Notifications – WooCommerce Abandoned Cart – GDPR | 30 | 152 | 192 | 600 | | | Missing direct file access protection |
| #8498 | EasyParcel Shipping– All-in-one Shipping Solution, Real-Time Shipping Rates | 30 | 37 | 608 | 600 | | | Non-prefixed global variable |
| #8499 | Colete-Online | 30 | 776 | 346 | 600 | | | Text Domain Mismatch |
| #8500 | BrightEdge Autopilot | 30 | 108 | 31 | 600 | | | curl curl setopt |