| #801 | Timber | 24 | 85 | 128 | 20k+ | | | Non-prefixed hook name |
| #802 | WP Bulk Delete | 42 | 7 | 130 | 100k+ | | | Direct Query |
| #803 | Options Framework | 75 | 8 | 56 | 10k+ | | | Non-prefixed function |
| #804 | Coming soon and Maintenance mode | 44 | 14 | 43 | 9k+ | | | Request data is not unslashed |
| #805 | Protect Uploads | 99 | 2 | 1 | 30k+ | | | Missing direct file access protection |
| #806 | Headers Security Advanced & HSTS WP | 76 | 19 | 10 | 90k+ | | | Missing Translators Comment |
| #807 | TypeSquare Webfonts for エックスサーバー | 35 | 183 | 98 | 100k+ | | | Missing Arg Domain |
| #808 | Easy Google Maps | 24 | 1,764 | 389 | 20k+ | | | Non Singular String Literal Domain |
| #809 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | | | Input is not sanitized |
| #810 | Internal Link Juicer: SEO Auto Linker for WordPress | 57 | 12 | 61 | 90k+ | | | Database parameter is not escaped |
| #811 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,934 | 1,966 | 10k+ | | | Non-prefixed global variable |
| #812 | Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management | 25 | 367 | 923 | 10k+ | | | SQL query is not prepared |
| #813 | Iptanus File Upload | 24 | 509 | 1,325 | 10k+ | | | Non-prefixed function |
| #814 | SMTP Mailer | 42 | 51 | 49 | 70k+ | | | Unsafe printing function |
| #815 | Easy Theme and Plugin Upgrades | 94 | 29 | 20 | 70k+ | | | Discouraged PHP function |
| #816 | YayMail – WooCommerce Email Customizer | 51 | 163 | 788 | 50k+ | | | Non-prefixed global variable |
| #817 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #818 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #819 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #820 | Template Kit – Import | 77 | 41 | 60 | 400k+ | | | Non-prefixed global variable |
| #821 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,478 | 3,337 | 10k+ | | | Non-prefixed global variable |
| #822 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #823 | Schema | 23 | 1,173 | 245 | 40k+ | | | Text Domain Mismatch |
| #824 | Login No Captcha reCAPTCHA | 42 | 45 | 24 | 60k+ | | | Unsafe printing function |
| #825 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #826 | Custom Login | 42 | 36 | 116 | 10k+ | | | Non-prefixed global variable |
| #827 | Print Invoice & Delivery Notes for WooCommerce | 95 | 5 | 58 | 30k+ | | | Non-prefixed global variable |
| #828 | String locator | 35 | 52 | 319 | 100k+ | | | Non-prefixed global variable |
| #829 | Ultimate Product Catalog | 24 | 554 | 525 | 5k+ | | | Unsafe printing function |
| #830 | AddQuicktag | 41 | 86 | 10 | 100k+ | | | Output is not escaped |
| #831 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | | | Non-prefixed global variable |
| #832 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | | Unsafe printing function |
| #833 | Native PHP Sessions | 38 | 30 | 92 | 10k+ | | | Direct Query |
| #834 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | | | Output is not escaped |
| #835 | Gutenverse – WordPress Blocks, Page Builder & Site Editor | 51 | 17 | 47 | 20k+ | | | Non-prefixed hook name |
| #836 | Gravity Forms Zero Spam | 94 | 4 | 9 | 100k+ | | | trademarked term |
| #837 | WP Maintenance | 34 | 40 | 217 | 60k+ | | | Non-prefixed global variable |
| #838 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | | | Output is not escaped |
| #839 | Age Gate | 69 | 61 | 139 | 40k+ | | | Missing direct file access protection |
| #840 | پارسی دیت – Parsi Date | 24 | 106 | 291 | 100k+ | | | Non-prefixed hook name |
| #841 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | | | Output is not escaped |
| #842 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | | | Output is not escaped |
| #843 | SmartCrawl SEO checker, analyzer & optimizer | 30 | 347 | 1,307 | 20k+ | | | Non-prefixed global variable |
| #844 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. | 23 | 750 | 1,359 | 60k+ | | | Non-prefixed global variable |
| #845 | Advanced Sidebar Menu | 94 | 5 | 117 | 10k+ | | | Non-prefixed hook name |
| #846 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 21 | 190 | 660 | 30k+ | | | Non-prefixed global variable |
| #847 | Stop User Enumeration | 99 | 1 | 1 | 50k+ | | | Dynamic hook name |
| #848 | RSS Importer | 70 | 14 | 2 | 30k+ | | | Output is not escaped |
| #849 | Accordions | 55 | 1 | 101 | 20k+ | | | slow db query meta query |
| #850 | Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials | 94 | | 293 | 40k+ | | | Non-prefixed global variable |