| #801 | POS Entegratör – Gurmehub Ödeme Eklentisi | 68 | 1,321 | 69 | 1k+ | | | Text Domain Mismatch |
| #802 | UpStream: a Project Management Plugin for WordPress | 22 | 683 | 703 | 600 | | | Non-prefixed global variable |
| #803 | Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light | 23 | 386 | 999 | 400 | | | Non-prefixed global variable |
| #804 | Appointment Booking Calendar | 25 | 327 | 1,055 | 1k+ | | | Non-prefixed global variable |
| #805 | MStore API – Create Native Android & iOS Apps On The Cloud | 23 | 618 | 764 | 3k+ | | | SQL query is not prepared |
| #806 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | | | Output is not escaped |
| #807 | Avadanta Companion | 32 | 1,318 | 54 | 2k+ | | | Text Domain Mismatch |
| #808 | Media Cloud Sync | 25 | 1,095 | 274 | 1k+ | | | Exception output is not escaped |
| #809 | Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 24 | 446 | 922 | 100k+ | | | Output is not escaped |
| #810 | Volunteer Sign Up Sheets | 32 | 967 | 401 | 1k+ | | | Output is not escaped |
| #811 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #812 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | | Output is not escaped |
| #813 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #814 | Pay with Vipps and MobilePay for WooCommerce | 25 | 846 | 514 | 5k+ | | | Output is not escaped |
| #815 | TrackShip for WooCommerce | 25 | 405 | 954 | 6k+ | | | Non-prefixed global variable |
| #816 | Video Gallery – Vimeo and YouTube Gallery | 26 | 561 | 794 | 6k+ | | | Non-prefixed global variable |
| #817 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #818 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #819 | Jetpack Search | 45 | 925 | 426 | 5k+ | | | Text Domain Mismatch |
| #820 | Diverse Solutions IDX Real Estate Listings & MLS Search | 22 | 745 | 605 | 1k+ | | | Heredoc Output Not Escaped |
| #821 | Oasis Workflow | 21 | 775 | 575 | 700 | | | Text Domain Mismatch |
| #822 | Smart Forms – when you need more than just a contact form | 21 | 776 | 574 | 5k+ | | | Output is not escaped |
| #823 | Registrations for the Events Calendar – Event Registration Plugin | 24 | 404 | 944 | 7k+ | | | Non-prefixed global variable |
| #824 | Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments | 23 | 121 | 1,227 | 2k+ | | | Non-prefixed global variable |
| #825 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 27 | 25 | 1,320 | 3k+ | | | Non-prefixed global variable |
| #826 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,066 | 2k+ | | | Non-prefixed hook name |
| #827 | Request a Quote – Quote Forms for Any WordPress Site | 23 | 240 | 1,099 | 900 | | | Non-prefixed hook name |
| #828 | Pronamic Pay | 22 | 258 | 1,077 | 2k+ | | | Non-prefixed global variable |
| #829 | Spoki – Chat Buttons and WooCommerce Notifications | 32 | 1,074 | 260 | 700 | | | Unsafe printing function |
| #830 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #831 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #832 | Frontend Dashboard | 21 | 384 | 945 | 500 | | | Non-prefixed function |
| #833 | Broken Link Checker | 25 | 727 | 600 | 500k+ | | | Output is not escaped |
| #834 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #835 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #836 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #837 | Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | 23 | 1,118 | 202 | 30k+ | | | Missing Translators Comment |
| #838 | Loginizer | 25 | 814 | 504 | 1m+ | | | Output is not escaped |
| #839 | cformsII | 31 | 777 | 536 | 3k+ | | | Unsafe printing function |
| #840 | Brizy – Page Builder | 20 | 590 | 721 | 70k+ | | | Output is not escaped |
| #841 | Slideshow Gallery LITE | 24 | 896 | 414 | 5k+ | | | Output is not escaped |
| #842 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | | | Direct Query |
| #843 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #844 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #845 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #846 | Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management | 25 | 367 | 923 | 10k+ | | | SQL query is not prepared |
| #847 | AliExpress Dropshipping Plugin for WooCommerce Stores | 25 | 555 | 734 | 4k+ | | | Text Domain Mismatch |
| #848 | WPCal.io – Easy Meeting Scheduler | 23 | 694 | 595 | 900 | | | Direct Query |
| #849 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 21 | 426 | 862 | 1m+ | | | Non-prefixed global variable |
| #850 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |