| #1851 | TP Education | 33 | 186 | 303 | 800 | | | Unsafe printing function |
| #1852 | Charity Addon for Elementor | 40 | 480 | 8 | 1k+ | | | Text Domain Mismatch |
| #1853 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #1854 | Mailrelay | 30 | 318 | 170 | 1k+ | | | Text Domain Mismatch |
| #1855 | News Kit Addons For Elementor | 23 | 69 | 419 | 4k+ | | | Post Not In exclude |
| #1856 | Object Sync for Salesforce | 25 | 192 | 296 | 500 | | | Non-prefixed global variable |
| #1857 | Chartify – WordPress Chart Plugin | 33 | 76 | 411 | 3k+ | | | Non-prefixed global variable |
| #1858 | Textmetrics | 33 | 324 | 163 | 400 | | | Output is not escaped |
| #1859 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | | | Missing Translators Comment |
| #1860 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | | | Text Domain Mismatch |
| #1861 | video carousel slider with lightbox | 35 | 350 | 136 | 1k+ | | | Output is not escaped |
| #1862 | Multi-Carrier Shippo Shipping Rates & Address Validation for WooCommerce | 33 | 411 | 73 | 3k+ | | | Non Singular String Literal Domain |
| #1863 | Bosta WooCommerce | 33 | 303 | 180 | 700 | | | Text Domain Mismatch |
| #1864 | Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program | 34 | 131 | 352 | 600 | | | Missing nonce verification |
| #1865 | Custom Add to Cart Button Label and Link for WooCommerce | 36 | 371 | 112 | 3k+ | | | Text Domain Mismatch |
| #1866 | YayExtra – WooCommerce Extra Product Options | 36 | 11 | 472 | 1k+ | | | Non-prefixed global variable |
| #1867 | aThemes Starter Sites | 29 | 268 | 214 | 40k+ | | | Text Domain Mismatch |
| #1868 | Page Builder by SiteOrigin | 29 | 266 | 215 | 400k+ | | | Output is not escaped |
| #1869 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 93 | 10k+ | | | Unsafe printing function |
| #1870 | Aquila Admin Theme | 35 | 151 | 329 | 3k+ | | | Non-prefixed global variable |
| #1871 | Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations | 35 | 255 | 225 | 10k+ | | | Output is not escaped |
| #1872 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | | | Direct Query |
| #1873 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #1874 | Enhanced Media Library | 36 | 361 | 117 | 60k+ | | | Unsafe printing function |
| #1875 | Payment Plugins for PayPal WooCommerce | 28 | 232 | 246 | 80k+ | | | Non-prefixed hook name |
| #1876 | WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | 69 | 452 | 25 | 1k+ | | | Text Domain Mismatch |
| #1877 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #1878 | Peach Payments Gateway | 22 | 334 | 143 | 1k+ | | | Non Singular String Literal Domain |
| #1879 | AppPresser – Mobile App Framework | 29 | 262 | 214 | 1k+ | | | Text Domain Mismatch |
| #1880 | Conditional Payments for WooCommerce | 36 | 292 | 184 | 10k+ | | | Text Domain Mismatch |
| #1881 | Subscriptions for WooCommerce with Stripe Recurring Payments | 56 | 9 | 467 | 900 | | | Non-prefixed global variable |
| #1882 | ShipStation Live Rates for WooCommerce | 35 | 402 | 73 | 900 | | | Non Singular String Literal Domain |
| #1883 | Advanced Order Export For WooCommerce | 91 | | 475 | 100k+ | | | Non-prefixed hook name |
| #1884 | Boostify Header Footer Builder for Elementor | 54 | 419 | 55 | 7k+ | | | Text Domain Mismatch |
| #1885 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | | | Output is not escaped |
| #1886 | CM E-Mail Blacklist – Simple email filtering for safer registration | 35 | 269 | 205 | 800 | | | Output is not escaped |
| #1887 | WP Edit | 33 | 337 | 137 | 40k+ | | | Unsafe printing function |
| #1888 | Sparkle Demo Importer | 28 | 307 | 166 | 5k+ | | | Text Domain Mismatch |
| #1889 | WC Booster | 27 | 191 | 282 | 800 | | | Non-prefixed global variable |
| #1890 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #1891 | WP Remote Users Sync | 48 | 355 | 117 | 6k+ | | | Text Domain Mismatch |
| #1892 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #1893 | Kits, Templates and Patterns | 29 | 380 | 91 | 5k+ | | | Text Domain Mismatch |
| #1894 | Simple Sticky Add To Cart For WooCommerce | 33 | 401 | 70 | 900 | | | Text Domain Mismatch |
| #1895 | Elementor Website Builder – more than just a page builder | 39 | 44 | 426 | 10m+ | | | Non-prefixed global variable |
| #1896 | WPAvatar | 36 | 425 | 45 | 700 | | | Unsafe printing function |
| #1897 | Essential Classy Addons for Elementor – 150+ Widgets, Templates & Performance Tools | 34 | 283 | 186 | 500 | | | Output is not escaped |
| #1898 | Off-Canvas Sidebars & Menus (Slidebars) | 37 | 457 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #1899 | ELEX WooCommerce Google Shopping (Google Product Feed) | 26 | 226 | 242 | 1k+ | | | Text Domain Mismatch |
| #1900 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | | | Output is not escaped |