| #851 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #852 | JCH Optimize | 22 | 1,145 | 136 | 4k+ | | | Output is not escaped |
| #853 | Advanced Ads – Ad Manager & AdSense | 23 | 559 | 719 | 100k+ | | | Non-prefixed global variable |
| #854 | Call Now Button – The #1 Click to Call Button for WordPress | 37 | 1,273 | 5 | 200k+ | | | Exception output is not escaped |
| #855 | MakeCommerce for WooCommerce | 27 | 826 | 452 | 3k+ | | | Text Domain Mismatch |
| #856 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #857 | Xagio SEO – AI Powered SEO | 29 | 2 | 1,273 | 10k+ | | | Direct Query |
| #858 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | | | Non-prefixed function |
| #859 | Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms | 23 | 405 | 869 | 50k+ | | | Nonce verification recommended |
| #860 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #861 | morkva UA Shipping | 83 | 1,261 | 10 | 1k+ | | | Text Domain Mismatch |
| #862 | Social Rocket – Social Sharing Plugin | 33 | 1,016 | 255 | 1k+ | | | Unsafe printing function |
| #863 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | 22 | 233 | 1,036 | 700k+ | | | Non-prefixed hook name |
| #864 | MBE eShip | 20 | 527 | 740 | 1k+ | | | Non-prefixed global variable |
| #865 | Seraphinite Post .DOCX Source | 23 | 1,156 | 110 | 900 | | | Output is not escaped |
| #866 | Pósturinn\'s Shipping with WooCommerce | 29 | 713 | 551 | 500 | | | Text Domain Mismatch |
| #867 | PagBank / PagSeguro Connect para WooCommerce | 22 | 505 | 757 | 4k+ | | | Non-prefixed global variable |
| #868 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #869 | Online Lesson Booking | 27 | 978 | 281 | 500 | | | Non Singular String Literal Domain |
| #870 | Moloni | 23 | 901 | 356 | 2k+ | | | Missing Arg Domain |
| #871 | Accept Stripe Payments | 21 | 373 | 884 | 20k+ | | | Missing nonce verification |
| #872 | WP-Polls | 25 | 618 | 639 | 40k+ | | | Unsafe printing function |
| #873 | Backuply – Backup, Restore, Migrate and Clone | 24 | 704 | 551 | 700k+ | | | Non-prefixed global variable |
| #874 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #875 | RS WP Book Showcase – A Complete Book Catalogue & Library System | 24 | 910 | 343 | 1k+ | | | Text Domain Mismatch |
| #876 | ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System | 28 | 1,013 | 239 | 800 | | | Unsafe printing function |
| #877 | Desert Companion | 68 | 412 | 837 | 20k+ | | | Non-prefixed global variable |
| #878 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | | Output is not escaped |
| #879 | Pagination Styler for WooCommerce | 24 | 799 | 448 | 1k+ | | | Output is not escaped |
| #880 | Testerwp ecommerce companion | 21 | 811 | 436 | 1k+ | | | Text Domain Mismatch |
| #881 | WP BackItUp Community Edition | 23 | 257 | 989 | 6k+ | | | Non-prefixed global variable |
| #882 | Better Google Analytics | 29 | 376 | 869 | 2k+ | | | Non-prefixed global variable |
| #883 | Restaurant Menu and Food Ordering | 23 | 385 | 853 | 2k+ | | | Non-prefixed global variable |
| #884 | Ajax Load More – Infinite Scroll, Load More, & Lazy Load | 22 | 641 | 595 | 40k+ | | | Unsafe printing function |
| #885 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #886 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #887 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #888 | Nested Pages | 25 | 674 | 560 | 90k+ | | | Non-prefixed global variable |
| #889 | FOX – Currency Switcher Professional for WooCommerce | 30 | 211 | 1,022 | 50k+ | | | Non-prefixed global variable |
| #890 | WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce | 24 | 733 | 499 | 5k+ | | | Output is not escaped |
| #891 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | | | Unsafe printing function |
| #892 | SureDash – Community, Courses & Member Dashboard | 25 | 422 | 808 | 1k+ | | | Non-prefixed global variable |
| #893 | WordLift – AI powered SEO – Schema | 24 | 278 | 949 | 400 | | | Non-prefixed hook name |
| #894 | aThemes Blocks | 32 | 192 | 1,034 | 6k+ | | | Non-prefixed global variable |
| #895 | ELEX WooCommerce Dynamic Pricing and Discounts | 25 | 478 | 748 | 800 | | | Text Domain Mismatch |
| #896 | PDF Invoice for WooCommerce + Drag and Drop Template Builder | 25 | 1,008 | 216 | 400 | | | wp function not compatible with requires wp |
| #897 | MyRewards | 89 | 1,213 | 5 | 2k+ | | | Text Domain Mismatch |
| #898 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #899 | Newsletter Subscription Form – User Subscriptions Form, Capture Email | 24 | 385 | 829 | 1k+ | | | Non-prefixed global variable |
| #900 | Products Suggestions for WooCommerce | 23 | 707 | 505 | 700 | | | Output is not escaped |