| #8851 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #8852 | Open User Map – Interactive Leaflet Maps | 26 | 895 | 988 | 10k+ | | | Non-prefixed global variable |
| #8853 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #8854 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |
| #8855 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #8856 | Blog Floating Button | 26 | 705 | 240 | 9k+ | | | Output is not escaped |
| #8857 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #8858 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 7k+ | | | Text Domain Mismatch |
| #8859 | Login Widget With Shortcode | 26 | 335 | 198 | 6k+ | | | wp function not compatible with requires wp |
| #8860 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 599 | 6k+ | | | Request data is not unslashed |
| #8861 | A WP Life Companion | 26 | 1,703 | 458 | 6k+ | | | Text Domain Mismatch |
| #8862 | SP Move Login | 26 | 881 | 215 | 6k+ | | | Text Domain Mismatch |
| #8863 | Video Gallery – Vimeo and YouTube Gallery | 26 | 561 | 794 | 6k+ | | | Non-prefixed global variable |
| #8864 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 5k+ | | | Exception output is not escaped |
| #8865 | UpdraftCentral Dashboard | 26 | 267 | 180 | 5k+ | | | Missing Translators Comment |
| #8866 | Sliced Invoices – WordPress Invoice Plugin | 26 | 684 | 455 | 5k+ | | | Output is not escaped |
| #8867 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #8868 | Send Users Email – Email Subscribers, Email Marketing Newsletter | 26 | 188 | 415 | 5k+ | | | Non-prefixed global variable |
| #8869 | User Avatar | 26 | 104 | 173 | 4k+ | | | Non-prefixed constant |
| #8870 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |
| #8871 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 26 | 351 | 232 | 3k+ | | | Unsafe printing function |
| #8872 | Organic Builder Widgets – Simple WordPress Page Builder | 26 | 1,034 | 125 | 3k+ | | | Output is not escaped |
| #8873 | Paytium: Mollie payment forms & donations | 26 | 506 | 551 | 3k+ | | | Unsafe printing function |
| #8874 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 26 | 423 | 292 | 2k+ | | | Output is not escaped |
| #8875 | MaxGalleria | 26 | 278 | 560 | 2k+ | | | Non-prefixed global variable |
| #8876 | Omise Payments | 26 | 358 | 256 | 2k+ | | | Output is not escaped |
| #8877 | FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) | 26 | 594 | 417 | 2k+ | | | Exception output is not escaped |
| #8878 | Shipping Method Display Style for WooCommerce | 26 | 529 | 1,308 | 2k+ | | | Non-prefixed global variable |
| #8879 | Profile Extra Fields by BestWebSoft | 26 | 514 | 532 | 2k+ | | | Text Domain Mismatch |
| #8880 | Role Based Pricing for Woo by Meow Crew | 26 | 548 | 1,354 | 2k+ | | | Non-prefixed global variable |
| #8881 | Easy Post Views Count | 26 | 534 | 1,180 | 2k+ | | | Non-prefixed global variable |
| #8882 | WP Flashy Marketing Automation | 26 | 432 | 186 | 2k+ | | | Text Domain Mismatch |
| #8883 | StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart | 26 | 125 | 420 | 2k+ | | | Non-prefixed global variable |
| #8884 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 26 | 159 | 297 | 1k+ | | | Non-prefixed global variable |
| #8885 | SEO Booster | 26 | 403 | 1,331 | 1k+ | | | Non-prefixed global variable |
| #8886 | Faktur Pro for WooCommerce | 26 | 416 | 218 | 1k+ | | | Text Domain Mismatch |
| #8887 | Premmerce SEO for WooCommerce | 26 | 550 | 1,285 | 1k+ | | | Non-prefixed global variable |
| #8888 | Visitors Online by BestWebSoft | 26 | 512 | 269 | 1k+ | | | Text Domain Mismatch |
| #8889 | RSS Redirect & Feedburner Alternative | 26 | 277 | 272 | 1k+ | | | Output is not escaped |
| #8890 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #8891 | WPFrank Companion | 26 | 2,356 | 865 | 1k+ | | | Text Domain Mismatch |
| #8892 | WPCOM Member | 26 | 432 | 638 | 1k+ | | | Non Singular String Literal Domain |
| #8893 | ELEX WooCommerce Google Shopping (Google Product Feed) | 26 | 226 | 242 | 1k+ | | | Text Domain Mismatch |
| #8894 | Post List Designer – Category Post, Recent Post, Post List | 26 | 542 | 1,320 | 1k+ | | | Non-prefixed global variable |
| #8895 | XL NMI Gateway for WooCommerce | 26 | 695 | 436 | 1k+ | | | Text Domain Mismatch |
| #8896 | PDF for WPForms + Drag and Drop Template Builder | 26 | 674 | 113 | 1k+ | | | wp function not compatible with requires wp |
| #8897 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #8898 | VikWidgetsLoader – Collection of Widgets | 26 | 1,182 | 538 | 1k+ | | | Output is not escaped |
| #8899 | CP Multi View Events Calendar | 26 | 86 | 439 | 900 | | | Non-prefixed global variable |
| #8900 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |