| #1501 | Wishlist for WooCommerce | 29 | 610 | 296 | 600 | | | Output is not escaped |
| #1502 | Kits, Templates and Patterns | 29 | 380 | 91 | 5k+ | | | Text Domain Mismatch |
| #1503 | Laposta WooCommerce | 29 | 96 | 115 | 500 | | | Non-prefixed global variable |
| #1504 | Liteweight Podcast – Host and Embed Podcast Episodes | 29 | 536 | 239 | 500 | | | Output is not escaped |
| #1505 | Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | 29 | 86 | 233 | 500 | | | Nonce verification recommended |
| #1506 | Meow Gallery | 29 | 113 | 182 | 10k+ | | | Direct Query |
| #1507 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) | 29 | 92 | 898 | 10k+ | | | Request data is not unslashed |
| #1508 | Music Player for WooCommerce | 29 | 107 | 156 | 1k+ | | | Non-prefixed global variable |
| #1509 | MyWorks Sync for WooCommerce & Xero | 29 | 1 | 1,080 | 800 | | | Non-prefixed global variable |
| #1510 | Offload Media – Cloud Storage | 29 | 126 | 80 | 1k+ | | | unlink unlink |
| #1511 | Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization | 29 | 80 | 163 | 200k+ | | | Nonce verification recommended |
| #1512 | Page Restrict for WooCommerce | 29 | 579 | 374 | 700 | | | Text Domain Mismatch |
| #1513 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #1514 | pCloud WP Backup | 29 | 120 | 73 | 1k+ | | | Exception output is not escaped |
| #1515 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #1516 | Pixelgrade Assistant | 29 | 1,351 | 160 | 2k+ | | | Text Domain Mismatch |
| #1517 | PlatiOnline Payments | 29 | 304 | 110 | 700 | | | Output is not escaped |
| #1518 | Post Timeline | 29 | 91 | 200 | 800 | | | Missing nonce verification |
| #1519 | Post Views Counter | 29 | 179 | 398 | 200k+ | | | Non-prefixed hook name |
| #1520 | Pósturinn\'s Shipping with WooCommerce | 29 | 713 | 551 | 500 | | | Text Domain Mismatch |
| #1521 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #1522 | Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft | 29 | 487 | 262 | 800 | | | Text Domain Mismatch |
| #1523 | Responder | 29 | 77 | 185 | 3k+ | | | Non-prefixed global variable |
| #1524 | SamedayCourier Shipping | 29 | 336 | 269 | 4k+ | | | Non Singular String Literal Domain |
| #1525 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | | Direct Query |
| #1526 | Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | 29 | 148 | 245 | 5k+ | | | Unsafe printing function |
| #1527 | Shiptastic for WooCommerce | 29 | 154 | 662 | 10k+ | | | Non-prefixed global variable |
| #1528 | Page Builder by SiteOrigin | 29 | 266 | 215 | 400k+ | | | Output is not escaped |
| #1529 | Slider by BestWebSoft | 29 | 478 | 336 | 400 | | | Text Domain Mismatch |
| #1530 | Social Engine | 29 | 133 | 90 | 600 | | | Exception output is not escaped |
| #1531 | SQLite Database Integration | 29 | 161 | 89 | 3k+ | | | Exception output is not escaped |
| #1532 | BuddyPress Builder for Elementor – BuddyBuilder | 29 | 348 | 329 | 1k+ | | | Text Domain Mismatch |
| #1533 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 337 | 198 | 500k+ | | | Text Domain Mismatch |
| #1534 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #1535 | Themify Popup | 29 | 232 | 108 | 8k+ | | | Text Domain Mismatch |
| #1536 | Themify – WooCommerce Product Filter | 29 | 643 | 145 | 20k+ | | | Output is not escaped |
| #1537 | Tilda-publishing | 29 | 219 | 78 | 700 | | | Output is not escaped |
| #1538 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #1539 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #1540 | Under Construction, Coming Soon & Maintenance Mode | 29 | 277 | 292 | 10k+ | | | Text Domain Mismatch |
| #1541 | User Verification by PickPlugins | 29 | 41 | 314 | 5k+ | | | Request data is not unslashed |
| #1542 | Visualizer – Tables & Charts Manager with Built-in AI Generator | 29 | 348 | 331 | 20k+ | | | Output is not escaped |
| #1543 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #1544 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | | | Exception output is not escaped |
| #1545 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #1546 | Widget for Yelp Reviews | 29 | 147 | 158 | 2k+ | | | Output is not escaped |
| #1547 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | | Text Domain Mismatch |
| #1548 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | | | Output is not escaped |
| #1549 | WooCommerce Stripe Payment Gateway | 29 | 184 | 592 | 700k+ | | | Exception output is not escaped |
| #1550 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 500 | | | Non-prefixed class |