| #8801 | Restrict for Elementor | 27 | 530 | 1,223 | 900 | | | Non-prefixed global variable |
| #8802 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #8803 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 800 | | | Output is not escaped |
| #8804 | Contact Form Generator : Creative form builder for WordPress | 27 | 1,076 | 1,510 | 800 | | | Output is not escaped |
| #8805 | WC Booster | 27 | 191 | 282 | 800 | | | Non-prefixed global variable |
| #8806 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #8807 | Wiremo – Product Reviews for WooCommerce | 27 | 445 | 212 | 700 | | | Output is not escaped |
| #8808 | Divi Collage | 27 | 516 | 1,183 | 700 | | | Non-prefixed global variable |
| #8809 | Stream Video Player | 27 | 220 | 135 | 600 | | | Output is not escaped |
| #8810 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #8811 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #8812 | StylePress for Elementor | 27 | 767 | 283 | 600 | | | Text Domain Mismatch |
| #8813 | Extra Product Options for WooCommerce | 27 | 548 | 1,342 | 600 | | | Non-prefixed global variable |
| #8814 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | | | Text Domain Mismatch |
| #8815 | Social Web Suite – Social Media Auto Post, Social Media Auto Publish | 27 | 74 | 164 | 500 | | | Non-prefixed global variable |
| #8816 | Theme One Click Demo Importer | 27 | 210 | 157 | 500 | | | Text Domain Mismatch |
| #8817 | Online Lesson Booking | 27 | 978 | 281 | 500 | | | Non Singular String Literal Domain |
| #8818 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | | | Output is not escaped |
| #8819 | RS Elements Elementor Addon | 27 | 2,026 | 321 | 500 | | | Text Domain Mismatch |
| #8820 | Mihdan: Ajax Edit Comments | 27 | 1,300 | 523 | 400 | | | Text Domain Mismatch |
| #8821 | Shipit | 27 | 371 | 209 | 400 | | | Text Domain Mismatch |
| #8822 | Polls CP | 27 | 399 | 500 | 400 | | | Output is not escaped |
| #8823 | Verge3D Publishing and E-Commerce | 27 | 245 | 298 | 400 | | | Nonce verification recommended |
| #8824 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #8825 | Polylang | 26 | 36 | 564 | 800k+ | | | Non-prefixed hook name |
| #8826 | Kirki – Freeform Page Builder, Website Builder & Customizer | 26 | 191 | 803 | 500k+ | | | Nonce verification recommended |
| #8827 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 400k+ | | | Non-prefixed global variable |
| #8828 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | | Direct Query |
| #8829 | Crowdsignal Dashboard – Polls, Surveys & more | 26 | 481 | 491 | 200k+ | | | Unsafe printing function |
| #8830 | Translate WordPress – Google Language Translator | 26 | 200 | 317 | 100k+ | | | Non-prefixed global variable |
| #8831 | LoginWP (Formerly Peter's Login Redirect) | 26 | 401 | 278 | 90k+ | | | Output is not escaped |
| #8832 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #8833 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #8834 | Media File Renamer: Rename for better SEO (AI-Powered) | 26 | 154 | 170 | 40k+ | | | Direct Query |
| #8835 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | | Output is not escaped |
| #8836 | Klarna for WooCommerce | 26 | 284 | 507 | 30k+ | | | Dynamic hook name |
| #8837 | Virtue/Ascend/Pinnacle Toolkit | 26 | 605 | 300 | 30k+ | | | Output is not escaped |
| #8838 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #8839 | HireZoot – Job Listings, Career Page & Recruitment Tool | 26 | 80 | 620 | 30k+ | | | Non-prefixed global variable |
| #8840 | Hide Admin Bar Based on User Roles | 26 | 549 | 1,345 | 20k+ | | | Non-prefixed global variable |
| #8841 | Live Composer – Free WordPress Website Builder | 26 | 1,211 | 427 | 10k+ | | | Output is not escaped |
| #8842 | Ibtana – WordPress Website Builder | 26 | 173 | 409 | 10k+ | | | Non-prefixed global variable |
| #8843 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | | | Text Domain Mismatch |
| #8844 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #8845 | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | 26 | 2,653 | 2,097 | 10k+ | | | Text Domain Mismatch |
| #8846 | Cyclone Demo Importer | 26 | 1,778 | 448 | 10k+ | | | Text Domain Mismatch |
| #8847 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #8848 | Open User Map – Interactive Leaflet Maps | 26 | 895 | 988 | 10k+ | | | Non-prefixed global variable |
| #8849 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #8850 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |