| #801 | Dynamic Product Gallery for WooCommerce | 28 | 414 | 301 | 1k+ | | | Output is not escaped |
| #802 | Product Sort and Display for WooCommerce | 28 | 190 | 229 | 2k+ | | | Output is not escaped |
| #803 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #804 | Bulk Edit Coupons for WooCommerce – WP Sheet Editor | 25 | 1,022 | 982 | 500 | | | Text Domain Mismatch |
| #805 | Conditional Add to Cart for WooCommerce | 88 | 2 | 104 | 600 | | | Non-prefixed global variable |
| #806 | Newspack Newsletters | 61 | 53 | 47 | 1k+ | | | Request data is not unslashed |
| #807 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #808 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #809 | Bulk Edit Posts and Products in Spreadsheet | 25 | 934 | 944 | 8k+ | | | Text Domain Mismatch |
| #810 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 334 | 471 | 10k+ | | | Non-prefixed global variable |
| #811 | Bulk Edit Products for WooCommerce – WP Sheet Editor | 25 | 957 | 968 | 10k+ | | | Text Domain Mismatch |
| #812 | User Switching | 63 | 2 | 47 | 200k+ | | | Nonce verification recommended |
| #813 | WPvivid — Backup, Migration & Staging | 25 | 900 | 1,461 | 900k+ | | | Non-prefixed namespace |
| #814 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 20 | 440 | 750 | 400 | | | Missing direct file access protection |
| #815 | FACTO – Facturación Electrónica | 22 | 242 | 432 | 400 | | | Request data is not unslashed |
| #816 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #817 | Extra Product Options Builder for WooCommerce | 31 | 113 | 194 | 2k+ | | | Non-prefixed global variable |
| #818 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #819 | PayU CommercePro Plugin | 37 | | 218 | 7k+ | | | error log error log |
| #820 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 421 | 583 | 10k+ | | | Missing Translators Comment |
| #821 | Order Tracking – WordPress Status Tracking Plugin | 28 | 619 | 773 | 3k+ | | | Unsafe printing function |
| #822 | Ultimate FAQ Accordion Plugin | 28 | 386 | 227 | 30k+ | | | Unsafe printing function |
| #823 | The Events Calendar | 23 | 3,509 | 3,850 | 700k+ | | | Text Domain Mismatch |
| #824 | Greenshift – animation and page builder blocks | 34 | 33 | 272 | 70k+ | | | Non-prefixed global variable |
| #825 | JetBackup – Backup, Restore & Migrate | 10 | 1,563 | 149 | 200k+ | | | Exception output is not escaped |
| #826 | Members – Membership & User Role Editor Plugin | 32 | 233 | 259 | 300k+ | | | Output is not escaped |
| #827 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | | Exception output is not escaped |
| #828 | ST Elementor Addons | 28 | 224 | 374 | 500 | | | Non-prefixed global variable |
| #829 | Bazz CallBack widget | 42 | 55 | 28 | 3k+ | | | Unsafe printing function |
| #830 | Post Export Import with Media | 90 | 34 | 41 | 1k+ | | | Missing Translators Comment |
| #831 | Product Configurator for WooCommerce | 31 | 41 | 562 | 3k+ | | | Non-prefixed hook name |
| #832 | FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses | 59 | 41 | 14 | 8k+ | | | Exception output is not escaped |
| #833 | Postie | 23 | 408 | 259 | 10k+ | | | Output is not escaped |
| #834 | FluentPlayer – Video Player With Forms & Lead Capture | 75 | 10 | 40 | 1k+ | | | Database parameter is not escaped |
| #835 | Plugin Groups | 73 | 16 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #836 | MyBookTable Bookstore by Stormhill Media | 82 | 16 | 34 | 1k+ | | | Direct Query |
| #837 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #838 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #839 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 389 | 1,266 | 5k+ | | | Non-prefixed global variable |
| #840 | DoLogin Security | 100 | | 0 | 7k+ | | | No open findings |
| #841 | Order on Mobile for WooCommerce | 84 | 14 | 1 | 7k+ | | | Output is not escaped |
| #842 | QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly | 35 | 225 | 110 | 8k+ | | | Non Singular String Literal Domain |
| #843 | All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) | 97 | 20 | 4 | 3m+ | | | wp function not compatible with requires wp |
| #844 | Search and Replace for Block Editor | 91 | 2 | 1 | 600 | | | Output is not escaped |
| #845 | Image Converter for WebP | 90 | 5 | 1 | 800 | | | wp function not compatible with requires wp |
| #846 | AidWP – Donation & Payment Forms (Stripe Powered) | 39 | | 193 | 800 | | | Non-prefixed global variable |
| #847 | BT iPay Payments | 98 | 2 | 13 | 900 | | | Non-prefixed global variable |
| #848 | Shipment Tracker for Woocommerce | 23 | 477 | 576 | 2k+ | | | Missing Arg Domain |
| #849 | Simple File List | 93 | 1 | 525 | 3k+ | | | Non-prefixed global variable |
| #850 | WPZOOM Addons for Beaver Builder | 30 | 2,168 | 177 | 4k+ | | | Text Domain Mismatch |