| #8501 | StoreBuild – Online Store Builder for WooCommerce | 30 | 120 | 211 | 600 | | | Non-prefixed global variable |
| #8502 | EDI – Обмен данными между WooCommerce и 1С | 30 | 284 | 101 | 600 | | | Text Domain Mismatch |
| #8503 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | 30 | 334 | 284 | 500 | | | Output is not escaped |
| #8504 | Epeken All Kurir for Woocommerce | 30 | 590 | 1,246 | 500 | | | Missing nonce verification |
| #8505 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #8506 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 500 | | | rand rand |
| #8507 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #8508 | AI Product Tools – Bulk Product Content Generator & AI Toolkit for WooCommerce | 30 | 508 | 562 | 500 | | | SQL query is not prepared |
| #8509 | Webling | 30 | 147 | 313 | 500 | | | Input is not validated |
| #8510 | WP Restaurant Price List | 30 | 295 | 95 | 500 | | | Text Domain Mismatch |
| #8511 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #8512 | PitchPrint | 30 | 76 | 163 | 400 | | | Input is not sanitized |
| #8513 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #8514 | Sync Master Sheet – Product Sync with Google Sheet for WooCommerce | 30 | 136 | 300 | 400 | | | Non-prefixed global variable |
| #8515 | WooCommerce Stripe Payment Gateway | 29 | 184 | 592 | 700k+ | | | Exception output is not escaped |
| #8516 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #8517 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #8518 | Page Builder by SiteOrigin | 29 | 266 | 215 | 400k+ | | | Output is not escaped |
| #8519 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |
| #8520 | Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization | 29 | 80 | 163 | 200k+ | | | Nonce verification recommended |
| #8521 | Post Views Counter | 29 | 179 | 398 | 200k+ | | | Non-prefixed hook name |
| #8522 | Adminimize | 29 | 296 | 691 | 200k+ | | | Non-prefixed global variable |
| #8523 | WP Popular Posts | 29 | 77 | 300 | 100k+ | | | Non-prefixed global variable |
| #8524 | reCaptcha by BestWebSoft | 29 | 474 | 272 | 100k+ | | | Text Domain Mismatch |
| #8525 | Easy HTTPS Redirection (SSL) | 29 | 266 | 152 | 100k+ | | | Unsafe printing function |
| #8526 | CloudSecure WP Security | 29 | 74 | 350 | 100k+ | | | Request data is not unslashed |
| #8527 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | | | Non-prefixed global variable |
| #8528 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #8529 | aThemes Starter Sites | 29 | 268 | 214 | 40k+ | | | Text Domain Mismatch |
| #8530 | WP-PostRatings | 29 | 425 | 384 | 30k+ | | | Output is not escaped |
| #8531 | Custom Field Template | 29 | 568 | 530 | 30k+ | | | wp function not compatible with requires wp |
| #8532 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #8533 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | | Output is not escaped |
| #8534 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | | Output is not escaped |
| #8535 | Alt Text AI – Automatically generate image alt text for SEO and accessibility | 29 | 72 | 280 | 20k+ | | | Non-prefixed global variable |
| #8536 | Themify – WooCommerce Product Filter | 29 | 643 | 145 | 20k+ | | | Output is not escaped |
| #8537 | Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | 29 | 20 | 826 | 20k+ | | | Non-prefixed namespace |
| #8538 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #8539 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) | 29 | 92 | 898 | 10k+ | | | Request data is not unslashed |
| #8540 | Countdown, Coming Soon, Maintenance – Countdown & Clock | 29 | 1,735 | 143 | 10k+ | | | Non Singular String Literal Domain |
| #8541 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #8542 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #8543 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #8544 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #8545 | Meow Gallery | 29 | 113 | 182 | 10k+ | | | Direct Query |
| #8546 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #8547 | Icyclub | 29 | 557 | 139 | 10k+ | | | Output is not escaped |
| #8548 | Under Construction, Coming Soon & Maintenance Mode | 29 | 277 | 292 | 10k+ | | | Text Domain Mismatch |
| #8549 | Xagio SEO – AI Powered SEO | 29 | 2 | 1,273 | 10k+ | | | Direct Query |
| #8550 | Shiptastic for WooCommerce | 29 | 154 | 662 | 10k+ | | | Non-prefixed global variable |
