| #1601 | Mailrelay | 30 | 318 | 170 | 1k+ | | | Text Domain Mismatch |
| #1602 | Midtrans-WooCommerce | 30 | 112 | 132 | 5k+ | | | Non-prefixed global variable |
| #1603 | Move Addons for Elementor | 30 | 3,919 | 91 | 2k+ | | | Text Domain Mismatch |
| #1604 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #1605 | Novelist | 30 | 475 | 158 | 1k+ | | | Output is not escaped |
| #1606 | OoohBoi Steroids for Elementor | 30 | 2,059 | 100 | 40k+ | | | Text Domain Mismatch |
| #1607 | Operation Demo Importer – Demo Importer For WPoperation Themes | 30 | 245 | 104 | 1k+ | | | Text Domain Mismatch |
| #1608 | گرویتی فرم فارسی | 30 | 205 | 157 | 20k+ | | | Text Domain Mismatch |
| #1609 | PitchPrint | 30 | 76 | 163 | 400 | | | Input is not sanitized |
| #1610 | Popularis Extra | 30 | 237 | 141 | 7k+ | | | Output is not escaped |
| #1611 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 28 | 722 | 200k+ | | | Non-prefixed global variable |
| #1612 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget | 30 | 231 | 102 | 1k+ | | | Non Singular String Literal Domain |
| #1613 | Pre-Orders for WooCommerce | 30 | 568 | 261 | 7k+ | | | Output is not escaped |
| #1614 | Sync Master Sheet – Product Sync with Google Sheet for WooCommerce | 30 | 136 | 300 | 400 | | | Non-prefixed global variable |
| #1615 | Pubjet | پابجت | 30 | 91 | 172 | 1k+ | | | Output is not escaped |
| #1616 | QA Assistants – Driven by data | 30 | 4 | 867 | 2k+ | | | Non-prefixed global variable |
| #1617 | Real Cookie Banner: GDPR & ePrivacy Cookie Consent | 30 | 9 | 496 | 100k+ | | | Database parameter is not escaped |
| #1618 | Realbig For WordPress | 30 | 36 | 591 | 1k+ | | | Non-prefixed global variable |
| #1619 | Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | 30 | 60 | 387 | 3k+ | | | Non-prefixed global variable |
| #1620 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #1621 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 30 | 45 | 374 | 4m+ | | | Non-prefixed global variable |
| #1622 | StoreBuild – Online Store Builder for WooCommerce | 30 | 120 | 211 | 600 | | | Non-prefixed global variable |
| #1623 | Sina Extension for Elementor | 30 | 3,691 | 160 | 40k+ | | | Text Domain Mismatch |
| #1624 | SmartCrawl SEO checker, analyzer & optimizer | 30 | 347 | 1,307 | 20k+ | | | Non-prefixed global variable |
| #1625 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #1626 | Stackable – Page Builder Gutenberg Blocks | 30 | 482 | 87 | 100k+ | | | Non Singular String Literal Domain |
| #1627 | Star Addons for Elementor | 30 | 236 | 255 | 1k+ | | | Non-prefixed global variable |
| #1628 | Subscriptions for WooCommerce | 30 | 1 | 1,190 | 10k+ | | | Non-prefixed global variable |
| #1629 | Taboola | 30 | 89 | 147 | 1k+ | | | Output is not escaped |
| #1630 | Tabs Responsive – With WooCommerce Product Tabs Extension | 30 | 575 | 255 | 20k+ | | | Non Singular String Literal Domain |
| #1631 | Themify Portfolio Post | 30 | 214 | 102 | 30k+ | | | Text Domain Mismatch |
| #1632 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #1633 | Travelers' Map | 30 | 311 | 155 | 1k+ | | | Output is not escaped |
| #1634 | Tutor LMS Divi Modules | 30 | 420 | 722 | 1k+ | | | Non-prefixed global variable |
| #1635 | Urvanov Syntax Highlighter | 30 | 221 | 87 | 3k+ | | | Output is not escaped |
| #1636 | User Access Manager | 30 | 393 | 171 | 10k+ | | | Output is not escaped |
| #1637 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #1638 | User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress | 30 | 486 | 278 | 3k+ | | | Text Domain Mismatch |
| #1639 | UX Flat | 30 | 539 | 203 | 1k+ | | | Missing Arg Domain |
| #1640 | Waitlist Woocommerce ( Back in stock notifier ) | 30 | 272 | 311 | 4k+ | | | Output is not escaped |
| #1641 | Checkout with Cash App on WooCommerce | 30 | 122 | 308 | 2k+ | | | Non-prefixed global variable |
| #1642 | Dropify | 30 | 132 | 254 | 2k+ | | | Nonce verification recommended |
| #1643 | Custom Post Types and Custom Fields creator – WCK | 30 | 1,299 | 137 | 10k+ | | | Text Domain Mismatch |
| #1644 | Webling | 30 | 147 | 313 | 500 | | | Input is not validated |
| #1645 | Widget Manager Light | 30 | 233 | 83 | 600 | | | Text Domain Mismatch |
| #1646 | Widgetize Pages Light | 30 | 145 | 104 | 3k+ | | | Output is not escaped |
| #1647 | WonderPush – Web Push Notifications – WooCommerce Abandoned Cart – GDPR | 30 | 152 | 192 | 600 | | | Missing direct file access protection |
| #1648 | Delivery & Pickup Date Time for WooCommerce | 30 | 440 | 435 | 5k+ | | | Non-prefixed global variable |
| #1649 | FOX – Currency Switcher Professional for WooCommerce | 30 | 211 | 1,022 | 50k+ | | | Non-prefixed global variable |
| #1650 | Mercado Pago payments for WooCommerce | 30 | 619 | 63 | 100k+ | | | Short PHP open tag found |