| #651 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #652 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #653 | YITH WooCommerce Brands Add-On | 31 | 393 | 1,425 | 9k+ | | | Non-prefixed global variable |
| #654 | YITH WooCommerce Featured Video | 31 | 383 | 1,434 | 3k+ | | | Non-prefixed global variable |
| #655 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | 24 | 91 | 1,725 | 7k+ | | | Non-prefixed hook name |
| #656 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #657 | WP Photo Album Plus | 25 | 4 | 1,809 | 10k+ | | | Direct Query |
| #658 | YITH WooCommerce Quick View | 32 | 388 | 1,420 | 90k+ | | | Non-prefixed global variable |
| #659 | Verified Reviews (Avis Vérifiés) | 19 | 671 | 1,136 | 700 | | | Non-prefixed global variable |
| #660 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | | Short PHP open tag found |
| #661 | WPAdverts – Classifieds Plugin | 24 | 1,308 | 496 | 4k+ | | | Output is not escaped |
| #662 | YITH Infinite Scrolling | 32 | 387 | 1,417 | 10k+ | | | Non-prefixed global variable |
| #663 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #664 | YITH WooCommerce Order & Shipment Tracking | 31 | 380 | 1,420 | 7k+ | | | Non-prefixed global variable |
| #665 | YITH WooCommerce Catalog Mode | 31 | 380 | 1,418 | 60k+ | | | Non-prefixed global variable |
| #666 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | | | Text Domain Mismatch |
| #667 | SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent | 25 | 432 | 1,357 | 10k+ | | | Direct Query |
| #668 | WP Super Cache | 25 | 800 | 989 | 1m+ | | | Output is not escaped |
| #669 | Download Monitor | 20 | 423 | 1,362 | 80k+ | | | Non-prefixed hook name |
| #670 | WP Mega Menu | 23 | 992 | 792 | 8k+ | | | Non-prefixed global variable |
| #671 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | | | Non-prefixed global variable |
| #672 | Pie Register – User Registration, Profiles & Content Restriction | 27 | | 1,779 | 1k+ | | | Non-prefixed global variable |
| #673 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | | Non-prefixed global variable |
| #674 | RealPress – Real Estate Plugin | 22 | 604 | 1,167 | 500 | | | Non-prefixed global variable |
| #675 | Secure Copy Content Protection and Content Locking | 25 | 965 | 803 | 20k+ | | | Output is not escaped |
| #676 | Event Genius – Event Management, Events Calendar, Registration, and RSVP | 25 | 181 | 1,579 | 500 | | | Non-prefixed global variable |
| #677 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | | Text Domain Mismatch |
| #678 | Ebook Store | 21 | 666 | 1,087 | 700 | | | Non-prefixed global variable |
| #679 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #680 | Restrict for Elementor | 27 | 530 | 1,223 | 900 | | | Non-prefixed global variable |
| #681 | Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers | 24 | 480 | 1,272 | 7k+ | | | Non-prefixed function |
| #682 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | 25 | 449 | 1,300 | 1m+ | | | Interpolated SQL is not prepared |
| #683 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #684 | Pagopar – WooCommerce Gateway | 18 | 530 | 1,215 | 400 | | | Non-prefixed global variable |
| #685 | YMC Filter | 24 | 12 | 1,729 | 4k+ | | | Non-prefixed global variable |
| #686 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #687 | The Pack Elementor addon | 23 | 556 | 1,180 | 2k+ | | | Non-prefixed global variable |
| #688 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | | Non-prefixed global variable |
| #689 | SEO Booster | 26 | 403 | 1,331 | 1k+ | | | Non-prefixed global variable |
| #690 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #691 | HootKit | 28 | 429 | 1,295 | 8k+ | | | Non-prefixed global variable |
| #692 | IMPress for IDX Broker | 22 | 1,085 | 636 | 6k+ | | | Text Domain Mismatch |
| #693 | VikWidgetsLoader – Collection of Widgets | 26 | 1,182 | 538 | 1k+ | | | Output is not escaped |
| #694 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #695 | PDF for Gravity Forms + Drag And Drop Template Builder | 24 | 1,457 | 260 | 400 | | | wp function not compatible with requires wp |
| #696 | Products Compare for WooCommerce | 24 | 1,022 | 695 | 1k+ | | | Output is not escaped |
| #697 | WP Import Export Lite | 19 | 737 | 979 | 40k+ | | | Non-prefixed global variable |
| #698 | Easy Post Views Count | 26 | 534 | 1,180 | 2k+ | | | Non-prefixed global variable |
| #699 | Admin Tweaks | 24 | 1,507 | 206 | 900 | | | Text Domain Mismatch |
| #700 | JetBackup – Backup, Restore & Migrate | 10 | 1,563 | 149 | 200k+ | | | Exception output is not escaped |