| #1651 | WooPayments: Integrated WooCommerce Payments | 30 | 182 | 308 | 900k+ | | | Exception output is not escaped |
| #1652 | WooCommerce Tax (formerly WooCommerce Shipping & Tax) | 30 | 103 | 198 | 600k+ | | | Non-prefixed class |
| #1653 | WP Admin UI Customize | 30 | 629 | 390 | 30k+ | | | Non-prefixed global variable |
| #1654 | WP Docs | 30 | 268 | 271 | 1k+ | | | Output is not escaped |
| #1655 | WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 30 | 113 | 419 | 1k+ | | | Non-prefixed global variable |
| #1656 | remarketable | 30 | 281 | 93 | 600 | | | Output is not escaped |
| #1657 | WP Inventory Manager | 30 | 856 | 233 | 1k+ | | | Output is not escaped |
| #1658 | WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | 30 | 32 | 346 | 4m+ | | | Non-prefixed hook name |
| #1659 | Photo Gallery Slideshow & Masonry Tiled Gallery | 30 | 806 | 352 | 1k+ | | | Output is not escaped |
| #1660 | WP Restaurant Price List | 30 | 295 | 95 | 500 | | | Text Domain Mismatch |
| #1661 | WPS Cleaner | 30 | 430 | 491 | 20k+ | | | Output is not escaped |
| #1662 | WPZOOM Addons for Beaver Builder | 30 | 2,168 | 177 | 4k+ | | | Text Domain Mismatch |
| #1663 | Yaad Sarig Payment Gateway For WC | 30 | 158 | 271 | 2k+ | | | Nonce verification recommended |
| #1664 | YayPricing – WooCommerce Dynamic Pricing & Discounts | 30 | 174 | 186 | 3k+ | | | Non-prefixed global variable |
| #1665 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #1666 | YITH Pre-Order for WooCommerce | 30 | 397 | 1,464 | 6k+ | | | Non-prefixed global variable |
| #1667 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #1668 | YITH WooCommerce Product Slider Carousel | 30 | 389 | 1,479 | 4k+ | | | Non-prefixed global variable |
| #1669 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | | Non-prefixed global variable |
| #1670 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #1671 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #1672 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #1673 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #1674 | Extra Product Options Builder for WooCommerce | 31 | 113 | 194 | 2k+ | | | Non-prefixed global variable |
| #1675 | Advanced Category Excluder | 31 | 349 | 160 | 600 | | | Output is not escaped |
| #1676 | Advanced Woo Search – Product Search for WooCommerce | 31 | 229 | 377 | 70k+ | | | Nonce verification recommended |
| #1677 | AI Builder – Generate pages, blocks, images & translate with AI | 31 | 101 | 194 | 500 | | | Non-prefixed global variable |
| #1678 | AI Copilot – Content Generator | 31 | 159 | 163 | 1k+ | | | wp function not compatible with requires wp |
| #1679 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 4k+ | | | Non-prefixed global variable |
| #1680 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | | Nonce verification recommended |
| #1681 | Apaczka.pl WooCommerce | 31 | 99 | 276 | 1k+ | | | Non-prefixed global variable |
| #1682 | APCu Manager | 31 | 153 | 136 | 10k+ | | | Output is not escaped |
| #1683 | Asgaros Forum | 31 | 167 | 412 | 10k+ | | | Output is not escaped |
| #1684 | The SEO Framework – Fast, Automated, Effortless. | 31 | 363 | 609 | 200k+ | | | Non-prefixed global variable |
| #1685 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #1686 | SEO合集(支持百度/Google/Bing/头条推送) | 31 | 13 | 1,407 | 800 | | | Direct Query |
| #1687 | Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam | 31 | 598 | 70 | 700 | | | Text Domain Mismatch |
| #1688 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 500 | | | Missing nonce verification |
| #1689 | Buy Me a Coffee – Button and Widget Plugin | 31 | 138 | 140 | 6k+ | | | Output is not escaped |
| #1690 | CashBill.pl – Płatności WooCommerce | 31 | 181 | 101 | 900 | | | Output is not escaped |
| #1691 | České služby pro WordPress | 31 | 95 | 139 | 1k+ | | | Output is not escaped |
| #1692 | cformsII | 31 | 777 | 536 | 3k+ | | | Unsafe printing function |
| #1693 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #1694 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #1695 | Co-marquage service-public.fr | 31 | 84 | 213 | 1k+ | | | Non-prefixed global variable |
| #1696 | Codeless Page Builder | 31 | 415 | 258 | 900 | | | Text Domain Mismatch |
| #1697 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #1698 | Cookie Dough Compliance and Consent for GDPR | 31 | 539 | 452 | 500 | | | Non Singular String Literal Domain |
| #1699 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | | Text Domain Mismatch |
| #1700 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |