| #2101 | CartBounty – Save and recover abandoned carts for WooCommerce | 33 | 370 | 399 | 10k+ | | | Output is not escaped |
| #2102 | Store Vacation Lite for WooCommerce | 100 | | 2 | 10k+ | | | Discouraged text-domain loading |
| #2103 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | | Non-prefixed global variable |
| #2104 | Vietnam Checkout for WooCommerce | 38 | 93 | 137 | 10k+ | | | Nonce verification recommended |
| #2105 | Extended Coupon Features for WooCommerce FREE | 36 | 219 | 63 | 10k+ | | | Text Domain Mismatch |
| #2106 | WooCommerce Colors | 41 | 63 | 28 | 10k+ | | | Output is not escaped |
| #2107 | Table Rate Shipping for WooCommerce | 98 | | 12 | 10k+ | | | Non-prefixed function |
| #2108 | Extra Product Sorting Options for WooCommerce | 75 | 10 | 16 | 10k+ | | | Text Domain Mismatch |
| #2109 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | | | Non-prefixed class |
| #2110 | Amazon Pay for WooCommerce | 37 | 29 | 117 | 10k+ | | | Non-prefixed class |
| #2111 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #2112 | WooCommerce Grid / List toggle | 79 | 10 | 12 | 10k+ | | | Output is not escaped |
| #2113 | Claudio Sanches – PagSeguro for WooCommerce | 39 | 87 | 37 | 10k+ | | | Unsafe printing function |
| #2114 | Pay for Payment for WooCommerce | 41 | 29 | 67 | 10k+ | | | Missing nonce verification |
| #2115 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #2116 | Product Tabs for WooCommerce | 35 | 196 | 100 | 10k+ | | | Text Domain Mismatch |
| #2117 | Products Per Page for WooCommerce | 52 | 22 | 28 | 10k+ | | | Output is not escaped |
| #2118 | Product Slider, Product Grid, Product Masonry | 49 | 55 | 144 | 10k+ | | | wp function not compatible with requires wp |
| #2119 | Sequential Order Numbers for WooCommerce | 57 | 9 | 24 | 10k+ | | | Interpolated SQL is not prepared |
| #2120 | Word Balloon | 40 | 20 | 125 | 10k+ | | | Request data is not unslashed |
| #2121 | Database Reset | 98 | 14 | 3 | 10k+ | | | Missing direct file access protection |
| #2122 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #2123 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #2124 | WP All Export – Export Add-On for ACF | 98 | 1 | 5 | 10k+ | | | trademarked term |
| #2125 | WP Author, Date and Meta Remover | 97 | 4 | 3 | 10k+ | | | trademarked term |
| #2126 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | | | Non-prefixed global variable |
| #2127 | Bootstrap Blocks | 91 | 8 | 30 | 10k+ | | | Non-prefixed global variable |
| #2128 | WP Change Default From Email | 65 | 51 | 7 | 10k+ | | | Non Singular String Literal Domain |
| #2129 | WP Change Email Sender | 35 | 5 | 13 | 10k+ | | | Non-prefixed namespace |
| #2130 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #2131 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #2132 | Spam Protect for Contact Form 7 | 41 | 16 | 61 | 10k+ | | | Request data is not unslashed |
| #2133 | WP Content Copy Protection | 35 | 76 | 11 | 10k+ | | | Text Domain Mismatch |
| #2134 | Custom Body Class | 35 | 39 | 101 | 10k+ | | | Non-prefixed global variable |
| #2135 | WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards | 97 | 5 | 10 | 10k+ | | | Non-prefixed class |
| #2136 | WP Date and Time Shortcode | 40 | 90 | 12 | 10k+ | | | Output is not escaped |
| #2137 | WP Debugging | 99 | 1 | 5 | 10k+ | | | trademarked term |
| #2138 | Featherweight | 99 | | 3 | 10k+ | | | Non-prefixed class |
| #2139 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |
| #2140 | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | 26 | 2,652 | 2,093 | 10k+ | | | Text Domain Mismatch |
| #2141 | Custom Product Tabs for WooCommerce & WordPress Tabs Builder – Smart Tabs | 91 | | 412 | 10k+ | | | Non-prefixed global variable |
| #2142 | WP Favicon Remover | 97 | 3 | 4 | 10k+ | | | trademarked term |
| #2143 | Iptanus File Upload | 24 | 509 | 1,325 | 10k+ | | | Non-prefixed function |
| #2144 | WP Font Awesome | 98 | 2 | 4 | 10k+ | | | trademarked term |
| #2145 | Auto Publish for Google My Business | 35 | 216 | 192 | 10k+ | | | Input is not validated |
| #2146 | WP Help | 40 | 49 | 54 | 10k+ | | | Unsafe printing function |
| #2147 | WP Image Zoom | 67 | 30 | 46 | 10k+ | | | Non-prefixed global variable |
| #2148 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #2149 | wp-jalali | 32 | 219 | 66 | 10k+ | | | Text Domain Mismatch |
| #2150 | WP Last Login | 98 | 2 | 4 | 10k+ | | | trademarked term |