| #8451 | VARGAL – Additional Variation Gallery for WooCommerce | 97 | 3 | 26 | 1k+ | | | Non-prefixed hook name |
| #8452 | TopList.cz | 38 | 138 | 7 | 400 | | | Output is not escaped |
| #8453 | Loan Comparison | 40 | 27 | 192 | 400 | | | Request data is not unslashed |
| #8454 | Super Cool Ad Inserter Plugin | 35 | 22 | 5 | 600 | | | Text Domain Mismatch |
| #8455 | Canvas Image Resize | 75 | 19 | 1 | 1k+ | | | Output is not escaped |
| #8456 | Image Quality Control | Still BE | 74 | 71 | 28 | 400 | | | Missing Translators Comment |
| #8457 | Carousel for Divi | 97 | 4 | 0 | 1k+ | | | Missing direct file access protection |
| #8458 | MakeITeasy Back To Top | 98 | 3 | 1 | 2k+ | | | Missing direct file access protection |
| #8459 | Disable Gravity Forms Fields | 99 | 1 | 2 | 600 | | | Missing Version |
| #8460 | AWEOS WP Lock | 39 | 24 | 53 | 400 | | | Output is not escaped |
| #8461 | Dynamic Front-End Heartbeat Control | 36 | 217 | 111 | 1k+ | | | Text Domain Mismatch |
| #8462 | Animate In View | 35 | 12 | 0 | 1k+ | | | Hidden files included |
| #8463 | Online Contact Widget-多合一在线客服插件 | 26 | 708 | 80 | 800 | | | Non Singular String Literal Domain |
| #8464 | Widget Instance | 94 | 7 | 11 | 500 | | | Non-prefixed global variable |
| #8465 | Blocks Kit – Gutenberg Blocks for Freelancers | 92 | 1 | 9 | 500 | | | Non-prefixed constant |
| #8466 | WP GIF Uploader | 33 | 117 | 44 | 1k+ | | | Text Domain Mismatch |
| #8467 | Contact Form 7 to Mailjet | 40 | 70 | 39 | 600 | | | Output is not escaped |
| #8468 | PayJustNow for WooCommerce | 89 | 1 | 18 | 900 | | | Nonce verification recommended |
| #8469 | country-redirect | 38 | 58 | 19 | 400 | | | Text Domain Mismatch |
| #8470 | Insert Blocks Before or After Posts Content | 43 | 42 | 15 | 1k+ | | | Output is not escaped |
| #8471 | Antom Payments | 37 | 62 | 73 | 800 | | | badly named files |
| #8472 | WPC Additional Variation Images for WooCommerce | 93 | | 20 | 800 | | | Non-prefixed class |
| #8473 | Real Accessability | 60 | 21 | 9 | 1k+ | | | Output is not escaped |
| #8474 | SEOPress for MainWP | 61 | 240 | 106 | 900 | | | Text Domain Mismatch |
| #8475 | Product Bundles – Variation Bundles | 52 | 23 | 13 | 600 | | | Output is not escaped |
| #8476 | URL ShortCodes | 97 | 4 | 1 | 2k+ | | | Missing direct file access protection |
| #8477 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #8478 | Save and Share Cart for WooCommerce | 35 | 125 | 51 | 600 | | | Text Domain Mismatch |
| #8479 | Backend Designer | 41 | 50 | 11 | 1k+ | | | Output is not escaped |
| #8480 | Wompi Portal de Pagos | 86 | 23 | 10 | 5k+ | | | wp function not compatible with requires wp |
| #8481 | Dynamic AJAX Product Filters for WooCommerce | 100 | | 0 | 900 | | | No open findings |
| #8482 | Equalweb Accessibility | 62 | 21 | 5 | 4k+ | | | Output is not escaped |
| #8483 | Tab Ultimate | 34 | 107 | 138 | 1k+ | | | Output is not escaped |
| #8484 | Column Separator for Beaver Builder | 62 | 61 | 17 | 400 | | | Output is not escaped |
| #8485 | Ni WooCommerce Admin Order Columns | 79 | 15 | 4 | 600 | | | Output is not escaped |
| #8486 | Sortable Word Count Reloaded | 68 | 18 | 6 | 2k+ | | | Output is not escaped |
| #8487 | WUPO Group Attributes for WooCommerce | 22 | 592 | 1,391 | 400 | | | Non-prefixed global variable |
| #8488 | Sidebars for Hello Elementor Theme | 98 | 2 | 2 | 1k+ | | | outdated tested upto header |
| #8489 | Cachebuster | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #8490 | Media Cloud Sync | 25 | 1,095 | 274 | 1k+ | | | Exception output is not escaped |
| #8491 | Quick Child Theme Generator | 40 | 22 | 74 | 900 | | | Request data is not unslashed |
| #8492 | Leartes TRY Exchange Rates | 36 | 250 | 27 | 500 | | | Text Domain Mismatch |
| #8493 | Responsive video embed | 98 | 6 | 3 | 900 | | | Text Domain Mismatch |
| #8494 | Country and State Selection Addon for Gravity Forms | 61 | 14 | 26 | 1k+ | | | Non-prefixed constant |
| #8495 | WC Disable Zoom / Lightbox features | 25 | 529 | 1,297 | 700 | | | Non-prefixed global variable |
| #8496 | Ergonet Cache | 90 | 3 | 2 | 2k+ | | | Output is not escaped |
| #8497 | Risk Free Cash On Delivery (COD) – WooCommerce | 40 | 106 | 31 | 400 | | | Text Domain Mismatch |
| #8498 | Iknow Extra | 82 | 6 | 5 | 400 | | | Missing direct file access protection |
| #8499 | Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance | 95 | 22 | 3 | 700 | | | Text Domain Mismatch |
| #8500 | Super Light Cache Buster | 91 | 6 | 4 | 700 | | | Non-prefixed function |