| #751 | Fastcache by Host.it | 23 | 1,327 | 203 | 800 | | | Text Domain Mismatch |
| #752 | Shipping for Nova Poshta | 20 | 598 | 923 | 500 | | | Output is not escaped |
| #753 | TotalPoll for Polls and Contests | 21 | 1,366 | 155 | 1k+ | | | Text Domain Mismatch |
| #754 | Germanized for WooCommerce | 23 | 224 | 1,296 | 70k+ | | | Non-prefixed function |
| #755 | WP-Stateless – Google Cloud Storage | 24 | 1,036 | 482 | 4k+ | | | Non Singular String Literal Domain |
| #756 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 241 | 1,276 | 8k+ | | | Non-prefixed global variable |
| #757 | Appointment Hour Booking – Booking Calendar | 25 | 262 | 1,253 | 10k+ | | | Non-prefixed global variable |
| #758 | annasta Filters for WooCommerce | 32 | 1,073 | 441 | 2k+ | | | Text Domain Mismatch |
| #759 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #760 | Anti-Malware Security and Brute-Force Firewall | 23 | 543 | 965 | 100k+ | | | Output is not escaped |
| #761 | Pixelgrade Assistant | 28 | 1,348 | 160 | 2k+ | | | Text Domain Mismatch |
| #762 | PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board | 21 | 603 | 890 | 6k+ | | | Output is not escaped |
| #763 | Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | 24 | 363 | 1,130 | 6k+ | | | Direct Query |
| #764 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #765 | MediaPress | 23 | 904 | 583 | 4k+ | | | Output is not escaped |
| #766 | Payment Plugins Braintree For WooCommerce | 24 | 731 | 755 | 2k+ | | | Output is not escaped |
| #767 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | | Output is not escaped |
| #768 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #769 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | | Output is not escaped |
| #770 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #771 | Envo Extra | 21 | 878 | 600 | 20k+ | | | Text Domain Mismatch |
| #772 | Mega Addons For WPBakery Page Builder | 39 | 1,320 | 154 | 20k+ | | | Text Domain Mismatch |
| #773 | Gmedia Photo Gallery | 23 | 350 | 1,121 | 7k+ | | | Non-prefixed global variable |
| #774 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | | | Text Domain Mismatch |
| #775 | WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses | 23 | 590 | 876 | 500 | | | Non-prefixed function |
| #776 | Awesome Support – WordPress HelpDesk & Support Plugin | 24 | 225 | 1,239 | 6k+ | | | Non-prefixed global variable |
| #777 | Slider Carousel – Image Slider | 31 | 224 | 1,233 | 3k+ | | | Request data is not unslashed |
| #778 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #779 | PickPlugins Question Answer | 24 | 32 | 1,413 | 400 | | | Non-prefixed global variable |
| #780 | Dynamic Widgets | 24 | 631 | 812 | 10k+ | | | Non-prefixed global variable |
| #781 | Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform | 24 | 431 | 1,010 | 10k+ | | | Output is not escaped |
| #782 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | | | Text Domain Mismatch |
| #783 | Efí Bank | 17 | 886 | 553 | 400 | | | Exception output is not escaped |
| #784 | Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | 22 | 669 | 769 | 1k+ | | | Output is not escaped |
| #785 | Custom Post Types and Custom Fields creator – WCK | 30 | 1,299 | 137 | 10k+ | | | Text Domain Mismatch |
| #786 | WP Recipe Maker | 24 | 494 | 942 | 50k+ | | | Non-prefixed global variable |
| #787 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #788 | SEO合集(支持百度/Google/Bing/头条推送) | 31 | 13 | 1,407 | 800 | | | Direct Query |
| #789 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | | | Missing Translators Comment |
| #790 | Schema | 23 | 1,173 | 245 | 40k+ | | | Text Domain Mismatch |
| #791 | Team Showcase – Responsive Team Members Grid, Slider & Carousel Plugin | 35 | 1,000 | 410 | 2k+ | | | Text Domain Mismatch |
| #792 | Ultimate Maps by Supsystic | 24 | 1,034 | 374 | 10k+ | | | Non Singular String Literal Domain |
| #793 | Events Maker by dFactory | 22 | 588 | 819 | 1k+ | | | Output is not escaped |
| #794 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #795 | Visitor Traffic Real Time Statistics | 24 | 472 | 927 | 30k+ | | | Non-prefixed global variable |
| #796 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #797 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #798 | Order Tracking – WordPress Status Tracking Plugin | 28 | 619 | 773 | 3k+ | | | Unsafe printing function |
| #799 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | | Unsafe printing function |
| #800 | WP-CRM System – Manage Clients and Projects | 23 | 297 | 1,094 | 800 | | | Non-prefixed global variable |