| #2201 | SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) | 69 | 17 | 952 | 7k+ | | | Non-prefixed global variable |
| #2202 | VWE – Voorheen Autodealers.nl | 69 | 23 | 10 | 500 | | | curl curl setopt |
| #2203 | WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics) | 69 | 9 | 24 | 700 | | | Non-prefixed constant |
| #2204 | Zapper Payments | 69 | 11 | 11 | 600 | | | Output is not escaped |
| #2205 | In-feed ads for Google AdSense | 70 | 20 | 20 | 6k+ | | | Non-prefixed global variable |
| #2206 | Animentor – Lottie & Bodymovin for Elementor | 70 | 18 | 8 | 4k+ | | | Output is not escaped |
| #2207 | AppScenic – Smart AI Dropshipping | 70 | 16 | 41 | 3k+ | | | Dynamic hook name |
| #2208 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | | | Text Domain Mismatch |
| #2209 | ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators | 70 | 9 | 12 | 800 | | | Output is not escaped |
| #2210 | Custom Currency for WooCommerce | 70 | 63 | 5 | 2k+ | | | Missing direct file access protection |
| #2211 | Gutenberg Blocks Templates – 50+ Free Gutenberg Block Designs | 70 | 2 | 23 | 700 | | | Request data is not unslashed |
| #2212 | Easy Hotel – Powerful Hotel Booking | 70 | 4 | 1,900 | 800 | | | Non-prefixed global variable |
| #2213 | fitness calculators | 70 | 94 | 25 | 600 | | | Missing Arg Domain |
| #2214 | Free Gift Product For WooCommerce | 70 | 9 | 77 | 800 | | | Non-prefixed global variable |
| #2215 | Shipping Notices and No shipping options found info for WooCommerce | 70 | 9 | 18 | 400 | | | Non-prefixed global variable |
| #2216 | Purchased Items Column for WooCommerce Orders | 70 | 10 | 8 | 800 | | | Output is not escaped |
| #2217 | Show-Hide / Collapse-Expand | 70 | 18 | 15 | 10k+ | | | Missing direct file access protection |
| #2218 | TP Product Image Flipper for WooCommerce | 70 | 17 | 15 | 9k+ | | | Non-prefixed function |
| #2219 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #2220 | Export Users With Meta | 70 | 13 | 13 | 2k+ | | | Direct Query |
| #2221 | Block Emails & Addresses for WooCommerce Checkout | 70 | 4 | 12 | 700 | | | error log set error handler |
| #2222 | Quick Buy For Woocommerce | 70 | 105 | 22 | 1k+ | | | Text Domain Mismatch |
| #2223 | WPThumb | 70 | 30 | 9 | 800 | | | Output is not escaped |
| #2224 | Download Manager Addons for Elementor | 70 | 272 | 13 | 6k+ | | | Non Singular String Literal Domain |
| #2225 | Advanced Custom Fields: Price Field | 71 | 12 | 7 | 400 | | | Output is not escaped |
| #2226 | Social Chat Widget (⚡ by Callbell) | 71 | 11 | 6 | 600 | | | Output is not escaped |
| #2227 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | | | Text Domain Mismatch |
| #2228 | Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event | 71 | 24 | 49 | 700 | | | Non-prefixed global variable |
| #2229 | Really Simple Click To Call Bar | 71 | 23 | 3 | 8k+ | | | Output is not escaped |
| #2230 | WindPress – Tailwind CSS integration for WordPress | 71 | 16 | 106 | 3k+ | | | Non-prefixed hook name |
| #2231 | Woorise – Landing Pages, Forms & Surveys | 71 | 8 | 14 | 1k+ | | | Input is not sanitized |
| #2232 | Amazing Affiliates – Toolkit for Amazon Associates with Amazon Product Blocks and Amazon PAAPI5 / Creators API integration | 72 | 3 | 650 | 600 | | | Non-prefixed global variable |
| #2233 | BB Delete cache | 72 | 3 | 15 | 900 | | | Input is not sanitized |
| #2234 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #2235 | Getsitecontrol — Email Marketing Plugin | Popup Maker, Automations & Newsletters | 72 | 17 | 11 | 1k+ | | | wp function not compatible with requires wp |
| #2236 | Calendar.online / Kalender.digital – Plugin | 72 | 33 | 7 | 2k+ | | | Output is not escaped |
| #2237 | Media Library Organizer – Folders, File Manager & Media Categories | 72 | 20 | 130 | 20k+ | | | Non-prefixed global variable |
| #2238 | Responsive Blocks – Page Builder for Blocks & Patterns | 72 | 47 | 43 | 3k+ | | | badly named files |
| #2239 | Ultimate Member Custom Tab Builder Lite | 72 | 12 | 15 | 500 | | | Output is not escaped |
| #2240 | Video Backgrounds for SiteOrigin Page Builder | 72 | 55 | 5 | 2k+ | | | Text Domain Mismatch |
| #2241 | Webyx for Gutenberg – Fullpage Fullscreen Scrolling Websites | 72 | 14 | 11 | 700 | | | Output is not escaped |
| #2242 | Customizer for WooCommerce | 72 | 10 | 13 | 800 | | | Nonce verification recommended |
| #2243 | Direct Checkout for WooCommerce | 72 | 77 | 35 | 80k+ | | | Text Domain Mismatch |
| #2244 | Block Plugin Update | 73 | 9 | 10 | 6k+ | | | Missing direct file access protection |
| #2245 | BuddyPress Activity Shortcode | 73 | 9 | 14 | 2k+ | | | Non-prefixed hook name |
| #2246 | Conditionally display featured image on singular posts and pages | 73 | 17 | 6 | 30k+ | | | Output is not escaped |
| #2247 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | | | Non-prefixed hook name |
| #2248 | Email Test – Check if your emails are being delivered | 73 | 8 | 7 | 1k+ | | | Exception output is not escaped |
| #2249 | Infinite Notification – Sales Notification Plugin | 73 | 13 | 5 | 500 | | | Setting is missing a sanitization callback |
| #2250 | Weight zone shipping for WooCommerce | 73 | 25 | 13 | 1k+ | | | Missing Translators Comment |