| #9251 | VikAppointments Services Booking Calendar | 25 | 9,753 | 5,207 | 500 | | | Output is not escaped |
| #9252 | Virtuaria Correios – Frete, Etiqueta, Rastreio e Declaração | 39 | 18 | 81 | 500 | | | Nonce verification recommended |
| #9253 | Visual Admin Customizer | 38 | 20 | 51 | 500 | | | Input is not sanitized |
| #9254 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | | | Output is not escaped |
| #9255 | Visual Hook Guide for Kadence | 90 | 8 | 1 | 500 | | | Text Domain Mismatch |
| #9256 | VWE – Voorheen Autodealers.nl | 69 | 23 | 10 | 500 | | | curl curl setopt |
| #9257 | Wanderlust OCA para WooCommerce | 36 | 157 | 55 | 500 | | | Text Domain Mismatch |
| #9258 | WooBooster Partial COD for WooCommerce | 40 | 90 | 51 | 500 | | | Text Domain Mismatch |
| #9259 | PAY by square pre WooCommerce | 97 | 4 | 4 | 500 | | | trademarked term |
| #9260 | WC Duplicate Order | 54 | 12 | 15 | 500 | | | Nonce verification recommended |
| #9261 | WC Korkmaz Contract – Contracts for WooCommerce | 59 | 7 | 38 | 500 | | | Non-prefixed global variable |
| #9262 | Pix Automático com Pagarme para WooCommerce | 34 | 68 | 66 | 500 | | | Non-prefixed global variable |
| #9263 | Product Author for WooCommerce | 93 | 3 | 6 | 500 | | | Missing direct file access protection |
| #9264 | WebConnex Form Management | 97 | 3 | 13 | 500 | | | Missing Version |
| #9265 | WebHotelier for WordPress | 39 | 451 | 40 | 500 | | | Text Domain Mismatch |
| #9266 | Webling | 30 | 147 | 313 | 500 | | | Input is not validated |
| #9267 | Website Open/Closed Toggle | 44 | 14 | 33 | 500 | | | Output is not escaped |
| #9268 | Webyx for Elementor – Fullpage Fullscreen Scrolling Websites | 67 | 684 | 10 | 500 | | | Non Singular String Literal Domain |
| #9269 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | | | Exception output is not escaped |
| #9270 | Wetterwarner | 90 | 5 | 12 | 500 | | | Non-prefixed function |
| #9271 | When Last Login – Export User Records | 61 | 18 | 13 | 500 | | | Output is not escaped |
| #9272 | MediaMan – Where is this Image Used? | 92 | 2 | 12 | 500 | | | Direct Query |
| #9273 | Which Elementor Addon | 35 | 26 | 3 | 500 | | | Text Domain Mismatch |
| #9274 | Whitelist IP For Limit Login Attempts | 48 | 18 | 12 | 500 | | | Output is not escaped |
| #9275 | Widget Builder | 40 | 40 | 52 | 500 | | | Non-prefixed global variable |
| #9276 | Widget Contact Now | 42 | 69 | 6 | 500 | | | Output is not escaped |
| #9277 | Widget Indicadores Económicos (Chile) | 36 | 53 | 20 | 500 | | | Output is not escaped |
| #9278 | Widget Instance | 94 | 7 | 11 | 500 | | | Non-prefixed global variable |
| #9279 | Widgets for Ebay Reviews | 96 | | 346 | 500 | | | Non-prefixed global variable |
| #9280 | Widget Click to Chat | 61 | 22 | 4 | 500 | | | Setting is missing a sanitization callback |
| #9281 | Wisepops Popups & Notifications | 78 | | 15 | 500 | | | Nonce verification recommended |
| #9282 | Conditional Fees for WooCommerce Lite | 26 | 566 | 1,303 | 500 | | | Non-prefixed global variable |
| #9283 | SharkDropship & Affiliate for AliExpress, eBay, Amazon, Etsy and Temu | 93 | 105 | 23 | 500 | | | Text Domain Mismatch |
| #9284 | Woo Button Text | 39 | 53 | 21 | 500 | | | Output is not escaped |
| #9285 | Clover Payment Gateway by Zaytech for WooCommerce | 99 | 1 | 1 | 500 | | | outdated tested upto header |
| #9286 | Bulk Edit Coupons for WooCommerce – WP Sheet Editor | 25 | 1,022 | 982 | 500 | | | Text Domain Mismatch |
| #9287 | Show Variations as Single Products for WooCommerce | 61 | 12 | 27 | 500 | | | Unsafe printing function |
| #9288 | Ukrposhta | 75 | 24 | 226 | 500 | | | Non-prefixed global variable |
| #9289 | AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia | 23 | 1,285 | 1,107 | 500 | | | Text Domain Mismatch |
| #9290 | Quaderno: Global Tax & Invoicing Automation for WooCommerce | 35 | 4 | 70 | 500 | | | Missing nonce verification |
| #9291 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 500 | | | Non-prefixed class |
| #9292 | WooMS | 32 | 199 | 58 | 500 | | | Output is not escaped |
| #9293 | Worldline Global Online Pay for WooCommerce | 31 | 160 | 86 | 500 | | | Missing direct file access protection |
| #9294 | WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL | 90 | 26 | 19 | 500 | | | Text Domain Mismatch |
| #9295 | WP About Author | 98 | 3 | 3 | 500 | | | trademarked term |
| #9296 | WP Author Security | 42 | 40 | 13 | 500 | | | Output is not escaped |
| #9297 | WP Category Sort | 62 | 15 | 22 | 500 | | | Text Domain Mismatch |
| #9298 | Comments Extra Fields For Post,Pages and CPT | 25 | 577 | 418 | 500 | | | Text Domain Mismatch |
| #9299 | Content Filter – Censor All Offensive Content From Your Site | 96 | 17 | 6 | 500 | | | Text Domain Mismatch |
| #9300 | WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses | 23 | 590 | 876 | 500 | | | Non-prefixed function |
