| #2851 | Deliver via Shipos for WooCommerce | 35 | 11 | 78 | 600 | | | Nonce verification recommended |
| #2852 | ShipStation Live Rates for WooCommerce | 35 | 402 | 73 | 900 | | | Non Singular String Literal Domain |
| #2853 | Spreadconnect | 35 | 128 | 126 | 700 | | | Output is not escaped |
| #2854 | WC Ukraine Shipping – Integration of Nova Poshta and Ukrposhta for WooCommerce | 35 | 504 | 164 | 7k+ | | | Text Domain Mismatch |
| #2855 | Product Attributes Shortcode | 35 | 3 | 4 | 700 | | | Nonce verification recommended |
| #2856 | Webflow Pages | 35 | 36 | 63 | 2k+ | | | Non Singular String Literal Domain |
| #2857 | Converter for Media – Optimize images | Convert WebP & AVIF | 35 | 131 | 53 | 500k+ | | | curl curl setopt |
| #2858 | WEDOS OnLine monitoring | 35 | 36 | 15 | 700 | | | Output is not escaped |
| #2859 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 2k+ | | | Output is not escaped |
| #2860 | What The File | 35 | 9 | 12 | 40k+ | | | Input is not sanitized |
| #2861 | Which Elementor Addon | 35 | 26 | 3 | 500 | | | Text Domain Mismatch |
| #2862 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | | | Non-prefixed global variable |
| #2863 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #2864 | Wired Impact Volunteer Management | 35 | 253 | 175 | 1k+ | | | Output is not escaped |
| #2865 | Open Graph and Twitter Card Tags | 35 | 15 | 27 | 50k+ | | | error log error log |
| #2866 | ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce | 35 | 51 | 344 | 10k+ | | | Request data is not unslashed |
| #2867 | Asaas Gateway for WooCommerce | 35 | 12 | 109 | 8k+ | | | Non-prefixed global variable |
| #2868 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #2869 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | | | Missing Translators Comment |
| #2870 | WP Courseware for WooCommerce | 35 | 55 | 49 | 1k+ | | | Text Domain Mismatch |
| #2871 | Custom Payment Gateways for WooCommerce | 35 | 202 | 31 | 3k+ | | | Non Singular String Literal Domain |
| #2872 | Require Login for WooCommerce | 35 | 10 | 6 | 2k+ | | | wp function not compatible with requires wp |
| #2873 | Backend Payments for WooCommerce | 35 | 63 | 42 | 900 | | | Exception output is not escaped |
| #2874 | Save and Share Cart for WooCommerce | 35 | 125 | 51 | 600 | | | Text Domain Mismatch |
| #2875 | DPD Baltic Shipping | 35 | 91 | 202 | 2k+ | | | Text Domain Mismatch |
| #2876 | Title Limit for WooCommerce | 35 | 41 | 12 | 4k+ | | | Output is not escaped |
| #2877 | Abandoned Cart Lite for WooCommerce | 35 | 84 | 161 | 20k+ | | | Non-prefixed global variable |
| #2878 | Data Exchange for WooCommerce and 1C:Enterprise/1С:Предприятие | 35 | 1 | 2 | 1k+ | | | Hidden files included |
| #2879 | Call for Price for WooCommerce | 35 | 3 | 31 | 8k+ | | | Non-prefixed hook name |
| #2880 | Checkout Terms Conditions Popup for WooCommerce | 35 | 76 | 30 | 1k+ | | | Output is not escaped |
| #2881 | Conversion Tracking for WooCommerce | 35 | 74 | 61 | 20k+ | | | Output is not escaped |
| #2882 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | | | Non-prefixed class |
| #2883 | WooCommerce Gateway Affirm | 35 | 2 | 58 | 6k+ | | | Nonce verification recommended |
| #2884 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 50 | 236 | 50k+ | | | Non-prefixed hook name |
| #2885 | Custom Payment Gateway for WooCommerce | 35 | 11 | 12 | 8k+ | | | Missing nonce verification |
| #2886 | Payment Gateway for PayPal Pro & PayPal Checkout for WooCommerce | 35 | 67 | 147 | 1k+ | | | Request data is not unslashed |
| #2887 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #2888 | PDF Invoices & Packing Slips for WooCommerce | 35 | 35 | 966 | 300k+ | | | Non-prefixed hook name |
| #2889 | Product Tabs for WooCommerce | 35 | 196 | 100 | 10k+ | | | Text Domain Mismatch |
| #2890 | Quaderno: Global Tax & Invoicing Automation for WooCommerce | 35 | 4 | 70 | 500 | | | Missing nonce verification |
| #2891 | Brevo for WooCommerce | 35 | 116 | 67 | 30k+ | | | Output is not escaped |
| #2892 | Stock Manager for WooCommerce | 35 | 5 | 45 | 20k+ | | | Non-prefixed global variable |
| #2893 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #2894 | Kybernaut IČO DIČ | 35 | 79 | 68 | 2k+ | | | Missing nonce verification |
| #2895 | Wooplatnica | 35 | 27 | 24 | 400 | | | Non-prefixed class |
| #2896 | BulkGate SMS Plugin for WooCommerce | 35 | 33 | 32 | 1k+ | | | Output is not escaped |
| #2897 | Easy Accept Payments via PayPal | 35 | 322 | 128 | 7k+ | | | Text Domain Mismatch |
| #2898 | Access Areas for WordPress | 35 | 17 | 95 | 400 | | | Direct Query |
| #2899 | WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel | 35 | 41 | 10 | 100k+ | | | wp function not compatible with requires wp |
| #2900 | WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets | 35 | 35 | 22 | 100k+ | | | Missing direct file access protection |