| #2351 | Woo Product Remover | 62 | 23 | 14 | 1k+ | | | SQL query is not prepared |
| #2352 | Satispay for WooCommerce | 62 | 19 | 12 | 7k+ | | | Exception output is not escaped |
| #2353 | WooCommerce Product Fees | 62 | 6 | 25 | 2k+ | | | Missing nonce verification |
| #2354 | WP Downloader | 62 | 11 | 15 | 2k+ | | | Output is not escaped |
| #2355 | Wp Theme plugin Download | 62 | 11 | 16 | 2k+ | | | Output is not escaped |
| #2356 | XPoster – Share to Bluesky and Mastodon | 62 | 26 | 36 | 10k+ | | | Missing nonce verification |
| #2357 | Migrate to WordPress.com | 62 | 15 | 28 | 2k+ | | | Output is not escaped |
| #2358 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | | Output is not escaped |
| #2359 | Ads.txt Manager | 61 | 33 | 16 | 4k+ | | | Text Domain Mismatch |
| #2360 | Custom Buttons for WooCommerce – Add To Cart Button for Product Types | 61 | 58 | 4 | 2k+ | | | Text Domain Mismatch |
| #2361 | Compact WP Audio Player | 61 | 12 | 21 | 20k+ | | | Non-prefixed function |
| #2362 | Disable Right Click For WP | 61 | 15 | 12 | 10k+ | | | Missing nonce verification |
| #2363 | ELEX WooCommerce Catalog Mode | 61 | 97 | 49 | 10k+ | | | Text Domain Mismatch |
| #2364 | Equal Height Columns | 61 | 24 | 5 | 10k+ | | | Output is not escaped |
| #2365 | GetPaid Stripe Payments | 61 | 206 | 44 | 2k+ | | | Text Domain Mismatch |
| #2366 | GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | 61 | 9 | 119 | 70k+ | | | Non-prefixed global variable |
| #2367 | Hotjar | 61 | 16 | 4 | 70k+ | | | Output is not escaped |
| #2368 | Marker.io – Visual Website Feedback | 61 | 6 | 31 | 4k+ | | | Request data is not unslashed |
| #2369 | Media Library Helper — Bulk edit image ALT, caption & description | 61 | 16 | 70 | 10k+ | | | Non-prefixed global variable |
| #2370 | Reorder Posts – Quick Post Type and Page Ordering | 61 | 10 | 23 | 10k+ | | | Request data is not unslashed |
| #2371 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | | | Output is not escaped |
| #2372 | Powerkit – Supercharge your WordPress Site | 61 | 67 | 115 | 10k+ | | | Non-prefixed global variable |
| #2373 | PRyC WP: Add custom content to post and page (top/bottom) | 61 | 63 | 7 | 1k+ | | | Text Domain Mismatch |
| #2374 | PW WooCommerce Copy Coupon | 61 | 15 | 17 | 1k+ | | | Text Domain Mismatch |
| #2375 | Qikink Print On Demand and DropShipping | 61 | 14 | 23 | 1k+ | | | Input is not validated |
| #2376 | Remove Featured Image | 61 | 21 | 12 | 1k+ | | | Missing Arg Domain |
| #2377 | SHK Hide Title | 61 | 19 | 4 | 3k+ | | | Output is not escaped |
| #2378 | Slide everything for Elementor | 61 | 93 | 1 | 6k+ | | | Text Domain Mismatch |
| #2379 | Slider Factory | 61 | 3 | 414 | 2k+ | | | Non-prefixed global variable |
| #2380 | HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz | 61 | 17 | 194 | 10k+ | | | Non-prefixed function |
| #2381 | Team Showcase | 61 | 1 | 125 | 1k+ | | | slow db query meta key |
| #2382 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 61 | 16 | 1,167 | 3k+ | | | Non-prefixed global variable |
| #2383 | Two Factor (2FA) Authentication via Email | 61 | 12 | 27 | 9k+ | | | Request data is not unslashed |
| #2384 | Wistia WordPress Plugin | 61 | 42 | 12 | 2k+ | | | Output is not escaped |
| #2385 | More Sorting Options for WooCommerce | 61 | 27 | 17 | 3k+ | | | Output is not escaped |
| #2386 | WP-CORS | 61 | 7 | 23 | 1k+ | | | error log error log |
| #2387 | WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce | 61 | 22 | 74 | 1k+ | | | Non-prefixed global variable |
| #2388 | RSS Feed Retriever | 61 | 23 | 8 | 7k+ | | | wp function not compatible with requires wp |
| #2389 | Bandsintown Events | 60 | 79 | 28 | 4k+ | | | wp function not compatible with requires wp |
| #2390 | Contact Form 7 – Phone mask field | 60 | 21 | 7 | 20k+ | | | Unsafe printing function |
| #2391 | Contact Form 7 Modules | 60 | 47 | 15 | 5k+ | | | Text Domain Mismatch |
| #2392 | Disable Emails | 60 | 25 | 16 | 30k+ | | | Short PHP open tag found |
| #2393 | Discount Rules for WooCommerce – Disco | Dynamic Pricing, Conditions, Bulk, Bundle, BOGO | 60 | | 58 | 1k+ | | | Request data is not unslashed |
| #2394 | FancyBox for WordPress | 60 | 175 | 33 | 30k+ | | | Text Domain Mismatch |
| #2395 | Freshchat | 60 | 16 | 10 | 1k+ | | | Output is not escaped |
| #2396 | Genesis Featured Widget Amplified | 60 | 126 | 12 | 2k+ | | | Text Domain Mismatch |
| #2397 | HelloAsso | 60 | 132 | 89 | 4k+ | | | Short PHP open tag found |
| #2398 | iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more | 60 | 405 | 271 | 200k+ | | | Text Domain Mismatch |
| #2399 | Kubio AI Page Builder | 60 | 281 | 77 | 90k+ | | | Missing direct file access protection |
| #2400 | Mailster AmazonSES Integration | 60 | 52 | 25 | 2k+ | | | Missing Arg Domain |