| #1601 | Anti-Malware Security and Brute-Force Firewall | 23 | 543 | 965 | 100k+ | | | Output is not escaped |
| #1602 | Ocean Extra | 23 | 1,494 | 2,107 | 500k+ | | | Non-prefixed global variable |
| #1603 | Auto SEO META keywords (META tags keywords) optimization + WooCommerce | 38 | 63 | 34 | 700 | | | Output is not escaped |
| #1604 | WPC Composite Products for WooCommerce | 41 | 11 | 73 | 9k+ | | | Missing nonce verification |
| #1605 | Simple SEO | 36 | 164 | 113 | 10k+ | | | Non Singular String Literal Domain |
| #1606 | WPC Product Bundles for WooCommerce | 41 | 21 | 93 | 30k+ | | | Missing nonce verification |
| #1607 | WP Table Builder – Drag & Drop Table Builder | 57 | 63 | 39 | 50k+ | | | Not Allowed |
| #1608 | Better Search Replace | 97 | | 1 | 1m+ | | | Database parameter is not escaped |
| #1609 | Cache control by Cacholong | 41 | 87 | 30 | 500 | | | Non Singular String Literal Domain |
| #1610 | GoPay for WooCommerce | 37 | 66 | 103 | 1k+ | | | Non-prefixed global variable |
| #1611 | Kybernaut IČO DIČ | 35 | 79 | 68 | 2k+ | | | Missing nonce verification |
| #1612 | WF Cookie Consent | 100 | | 0 | 10k+ | | | No open findings |
| #1613 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | | | Non-prefixed global variable |
| #1614 | RealHomes Stripe Payments | 32 | 201 | 33 | 500 | | | Exception output is not escaped |
| #1615 | Customer Email Verification for WooCommerce | 37 | 165 | 164 | 2k+ | | | Nonce verification recommended |
| #1616 | Kustom Checkout for WooCommerce | 35 | 101 | 505 | 10k+ | | | Dynamic hook name |
| #1617 | Checkout Field Manager (Checkout Manager) for WooCommerce | 43 | 161 | 154 | 80k+ | | | Non-prefixed global variable |
| #1618 | UddoktaPay | 99 | | 5 | 1k+ | | | Non-prefixed hook name |
| #1619 | Image Gallery Block | 84 | 9 | 22 | 2k+ | | | Non-prefixed global variable |
| #1620 | RSVP and Event Management | 24 | 345 | 624 | 3k+ | | | Direct Query |
| #1621 | RD Station | 74 | | 65 | 20k+ | | | Non-prefixed global variable |
| #1622 | WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments | 24 | 587 | 1,430 | 20k+ | | | Non-prefixed global variable |
| #1623 | Print Invoice & Delivery Notes for WooCommerce | 95 | 5 | 58 | 30k+ | | | Non-prefixed global variable |
| #1624 | WooCommerce Payfast Gateway | 86 | 90 | 47 | 30k+ | | | Text Domain Mismatch |
| #1625 | Meta pixel for WordPress | 35 | 90 | 40 | 400k+ | | | Exception output is not escaped |
| #1626 | Membership For WooCommerce | 33 | 40 | 659 | 900 | | | Non-prefixed global variable |
| #1627 | PiWeb Advanced Flat rate / Conditional shipping for WooCommerce | 37 | 84 | 192 | 2k+ | | | wp function not compatible with requires wp |
| #1628 | Add to Cart Redirect for WooCommerce | 37 | 215 | 141 | 8k+ | | | Text Domain Mismatch |
| #1629 | Keon Toolset | 74 | 4 | 28 | 30k+ | | | Non-prefixed function |
| #1630 | Record of Consent Extension for Complianz | 100 | | 2 | 500 | | | Schema Change |
| #1631 | Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code | 100 | | 2 | 500 | | | Non-prefixed constant |
| #1632 | Continuous Image Carousel With Lightbox | 36 | 255 | 129 | 1k+ | | | Output is not escaped |
| #1633 | Coming Soon Maintenance Mode | 92 | | 65 | 7k+ | | | Non-prefixed global variable |
| #1634 | WP Booking System – Booking Calendar | 28 | 502 | 549 | 20k+ | | | Output is not escaped |
| #1635 | WP Simple Booking Calendar | 31 | 337 | 380 | 20k+ | | | Output is not escaped |
| #1636 | Bold Page Builder | 91 | 12 | 38 | 40k+ | | | Not In Footer |
| #1637 | WP GIF Player – Play & Pause | 81 | 6 | 4 | 400 | | | Output is not escaped |
| #1638 | Super Easy Maintenance Mode – Coming Soon & Under Construction | 99 | 2 | 1 | 400 | | | mismatched plugin name |
| #1639 | NextGenThemes jsDelivr CDN | 96 | 27 | 0 | 400 | | | wp function not compatible with requires wp |
| #1640 | ESTO payment methods | 98 | 15 | 4 | 400 | | | wp function not compatible with requires wp |
| #1641 | StoreBuild – Online Store Builder for WooCommerce | 30 | 120 | 211 | 600 | | | Non-prefixed global variable |
| #1642 | SideMenu | 100 | | 1 | 1k+ | | | Dynamic hook name |
| #1643 | Manago AI & Leadoo AI | 23 | 644 | 429 | 1k+ | | | Unsafe printing function |
| #1644 | RealHomes Currency Switcher | 80 | 71 | 42 | 1k+ | | | Non Singular String Literal Domain |
| #1645 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #1646 | GTM Kit – Google Tag Manager & GA4 integration | 87 | 5 | 17 | 30k+ | | | Missing direct file access protection |
| #1647 | 3CX Free Live Chat, Calls & Messaging | 47 | 24 | 16 | 100k+ | | | Output is not escaped |
| #1648 | Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC | 77 | 23 | 113 | 1k+ | | | Direct Query |
| #1649 | ActivityPub | 81 | 67 | 305 | 6k+ | | | Non-prefixed global variable |
| #1650 | Ailo – AI Slug Translator | 80 | 8 | 14 | 1k+ | | | wp function not compatible with requires wp |