| #8701 | Query Wrangler | 28 | 628 | 229 | 700 | | | Output is not escaped |
| #8702 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #8703 | PHP Browser Detection | 28 | 68 | 49 | 600 | | | Non-prefixed function |
| #8704 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #8705 | Secure Downloads | 28 | 616 | 406 | 600 | | | Output is not escaped |
| #8706 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #8707 | My auctions allegro | 28 | 483 | 235 | 500 | | | Non Singular String Literal Domain |
| #8708 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #8709 | WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 | 28 | 57 | 138 | 500 | | | Request data is not unslashed |
| #8710 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #8711 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | | | Exception output is not escaped |
| #8712 | PDF for Contact Form 7 + Drag and Drop Template Builder | 28 | 674 | 101 | 500 | | | wp function not compatible with requires wp |
| #8713 | ST Elementor Addons | 28 | 224 | 374 | 500 | | | Non-prefixed global variable |
| #8714 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms | 28 | 659 | 359 | 400 | | | Text Domain Mismatch |
| #8715 | Rating by BestWebSoft | 28 | 509 | 218 | 400 | | | Text Domain Mismatch |
| #8716 | Vertex Addons for Elementor | 28 | 232 | 413 | 400 | | | Output is not escaped |
| #8717 | Product Sync for WooCommerce | 28 | 158 | 375 | 400 | | | Direct Query |
| #8718 | Loco Translate | 27 | 451 | 225 | 1m+ | | | Output is not escaped |
| #8719 | WP Activity Log | 27 | 96 | 230 | 300k+ | | | Nonce verification recommended |
| #8720 | Duplicate Post | 27 | 447 | 274 | 300k+ | | | Unsafe printing function |
| #8721 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | | | Output is not escaped |
| #8722 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | | Non-prefixed global variable |
| #8723 | MW WP Form | 27 | 334 | 219 | 200k+ | | | Output is not escaped |
| #8724 | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | 27 | 165 | 430 | 100k+ | | | Non-prefixed global variable |
| #8725 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | | | Non-prefixed global variable |
| #8726 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #8727 | BackUpWordPress | 27 | 245 | 271 | 90k+ | | | Non-prefixed global variable |
| #8728 | Addon Elements for Elementor (formerly Elementor Addon Elements) | 27 | 4,065 | 103 | 90k+ | | | Text Domain Mismatch |
| #8729 | WP Job Manager | 27 | 93 | 582 | 80k+ | | | Non-prefixed hook name |
| #8730 | Side Cart Woocommerce | Woocommerce Cart | 27 | 490 | 439 | 80k+ | | | Output is not escaped |
| #8731 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #8732 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | | | Input is not sanitized |
| #8733 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 146 | 274 | 50k+ | | | Non-prefixed global variable |
| #8734 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #8735 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | | Text Domain Mismatch |
| #8736 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #8737 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #8738 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #8739 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #8740 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #8741 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #8742 | Packlink PRO for WooCommerce | 27 | 132 | 160 | 20k+ | | | Non-prefixed global variable |
| #8743 | VOD Infomaniak | 27 | 797 | 385 | 20k+ | | | Output is not escaped |
| #8744 | Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 27 | 289 | 751 | 10k+ | | | Output is not escaped |
| #8745 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | | | Missing Translators Comment |
| #8746 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 27 | 34 | 518 | 10k+ | | | Non-prefixed global variable |
| #8747 | Login for Google Apps | 27 | 139 | 85 | 10k+ | | | Exception output is not escaped |
| #8748 | My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam | 27 | 713 | 321 | 10k+ | | | Text Domain Mismatch |
| #8749 | Transbank Webpay | 27 | 198 | 211 | 10k+ | | | Non-prefixed global variable |
| #8750 | Hester Core | 27 | 253 | 103 | 10k+ | | | Output is not escaped |