| #1651 | Image Slider Slideshow | 32 | 409 | 171 | 2k+ | | | Text Domain Mismatch |
| #1652 | Shipit | 27 | 371 | 209 | 400 | | | Text Domain Mismatch |
| #1653 | Asgaros Forum | 31 | 167 | 412 | 10k+ | | | Output is not escaped |
| #1654 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #1655 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | | | Request data is not unslashed |
| #1656 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #1657 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 7k+ | | | Text Domain Mismatch |
| #1658 | Post Views Counter | 29 | 179 | 398 | 200k+ | | | Non-prefixed hook name |
| #1659 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #1660 | UpdraftPlus: WP Backup & Migration Plugin | 24 | 277 | 299 | 3m+ | | | Non-prefixed global variable |
| #1661 | Ultimate Before After Image Slider & Gallery – BEAF | 33 | 488 | 87 | 30k+ | | | Text Domain Mismatch |
| #1662 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 36 | 1 | 574 | 4k+ | | | Request data is not unslashed |
| #1663 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #1664 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #1665 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #1666 | WP Team – WordPress Team Member Plugin | 38 | 537 | 36 | 500 | | | Text Domain Mismatch |
| #1667 | FV Antispam | 26 | 332 | 239 | 900 | | | Output is not escaped |
| #1668 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | | | Non-prefixed global variable |
| #1669 | Stackable – Page Builder Gutenberg Blocks | 30 | 482 | 87 | 100k+ | | | Non Singular String Literal Domain |
| #1670 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #1671 | Under Construction, Coming Soon & Maintenance Mode | 29 | 277 | 292 | 10k+ | | | Text Domain Mismatch |
| #1672 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | | | Text Domain Mismatch |
| #1673 | Slivery Extender | 91 | 557 | 11 | 1k+ | | | Text Domain Mismatch |
| #1674 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #1675 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #1676 | Location Weather – WordPress Weather Forecast, Air Quality & Weather Widget | 79 | | 567 | 10k+ | | | Non-prefixed global variable |
| #1677 | SEOPress – AI SEO Plugin & On-site SEO | 32 | 138 | 429 | 300k+ | | | Non-prefixed global variable |
| #1678 | Goal Tracker – Custom Event Tracking for GA4 | 38 | 541 | 25 | 2k+ | | | Output is not escaped |
| #1679 | Logo Carousel – Display Brand or Client Logos in Slider | 38 | 524 | 42 | 800 | | | Output is not escaped |
| #1680 | Guaranteed Reviews Company (Société des Avis Garantis) | 36 | 369 | 197 | 1k+ | | | Output is not escaped |
| #1681 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #1682 | MPL-Publisher — Ebook & Audiobook Creator | 34 | 489 | 76 | 800 | | | Text Domain Mismatch |
| #1683 | Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes | 24 | 235 | 330 | 600 | | | Non-prefixed global variable |
| #1684 | Eway Payments for Woo | 36 | 525 | 40 | 3k+ | | | Text Domain Mismatch |
| #1685 | Gravity Forms Eway | 33 | 519 | 45 | 500 | | | Missing Translators Comment |
| #1686 | User Access Manager | 30 | 393 | 171 | 10k+ | | | Output is not escaped |
| #1687 | Tooltips for WordPress | 31 | 312 | 252 | 5k+ | | | Output is not escaped |
| #1688 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #1689 | WC Fields Factory | 28 | 194 | 369 | 7k+ | | | Nonce verification recommended |
| #1690 | Wholesale for WooCommerce – B2B Ecommerce | 38 | 541 | 22 | 1k+ | | | Output is not escaped |
| #1691 | ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) | 69 | 511 | 51 | 4k+ | | | Text Domain Mismatch |
| #1692 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #1693 | گیتلند | درگاه پرداخت هوشمند گیتلند | 28 | 327 | 235 | 3k+ | | | Output is not escaped |
| #1694 | Embeds for YouTube | 35 | 255 | 307 | 10k+ | | | Non-prefixed global variable |
| #1695 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 166 | 395 | 60k+ | | | Short PHP open tag found |
| #1696 | Piotnet Forms | 25 | 187 | 374 | 3k+ | | | Alternative PHP tag found |
| #1697 | Revive.so – Bulk Rewrite and Republish Blog Posts | 23 | 332 | 228 | 700 | | | Text Domain Mismatch |
| #1698 | WP MyLinks | 33 | 354 | 206 | 1k+ | | | Text Domain Mismatch |
| #1699 | WebinarPress – Webinar System for WordPress | 54 | 61 | 499 | 900 | | | Non-prefixed global variable |
| #1700 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |