| #2951 | CodePen Embed Block | 82 | 8 | 3 | 600 | | | Text Domain Mismatch |
| #2952 | Colibri Page Builder | 82 | 138 | 31 | 90k+ | | | Missing direct file access protection |
| #2953 | Confirm Plus Contact Form 7 | 82 | 10 | 15 | 7k+ | | | Non Singular String Literal Domain |
| #2954 | Awin Publisher MasterTag | 82 | 6 | 6 | 1k+ | | | Non-prefixed global variable |
| #2955 | Custom 404 Error Page | 82 | 12 | 3 | 1k+ | | | Text Domain Mismatch |
| #2956 | Timber Debug Bar | 82 | 12 | 0 | 600 | | | Output is not escaped |
| #2957 | Editor Blocks for Gutenberg | 82 | 6 | 8 | 700 | | | Missing direct file access protection |
| #2958 | ForumWP – Forum & Discussion Board | 82 | 22 | 444 | 800 | | | Non-prefixed global variable |
| #2959 | Genesis eNews Extended | 82 | 9 | 1 | 40k+ | | | Output is not escaped |
| #2960 | Easy Genesis Logo Uploader | 82 | 18 | 5 | 400 | | | Output is not escaped |
| #2961 | Head & Footer Code | 82 | 1 | 15 | 100k+ | | | Non-prefixed constant |
| #2962 | Hostinger Tools | 82 | 13 | 22 | 3m+ | | | wp function not compatible with requires wp |
| #2963 | Iknow Extra | 82 | 6 | 5 | 400 | | | Missing direct file access protection |
| #2964 | Image Gallery Block | 82 | 13 | 10 | 3k+ | | | wp function not compatible with requires wp |
| #2965 | Indent Lists Button | 82 | 10 | 3 | 700 | | | Output is not escaped |
| #2966 | Independent Analytics for MainWP | 82 | 7 | 13 | 700 | | | Nonce verification recommended |
| #2967 | Infobox | 82 | 15 | 12 | 1k+ | | | file system operations mkdir |
| #2968 | Japanese Proofreading Preview | 82 | 11 | 5 | 400 | | | Nonce verification recommended |
| #2969 | Lazy Load for Videos | 82 | 6 | 37 | 9k+ | | | Non-prefixed constant |
| #2970 | Link Juice Optimizer | 82 | 12 | 6 | 6k+ | | | Output is not escaped |
| #2971 | MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall | 82 | 55 | 22 | 200k+ | | | Missing direct file access protection |
| #2972 | MB Relationships | 82 | 1 | 35 | 1k+ | | | Non-prefixed class |
| #2973 | Meks Easy Maps | 82 | 13 | 13 | 900 | | | Input is not sanitized |
| #2974 | Meks Smart Social Widget | 82 | 10 | 2 | 10k+ | | | Output is not escaped |
| #2975 | Metricool – Social media and site statistics | 82 | 9 | 4 | 80k+ | | | Exception output is not escaped |
| #2976 | Multiple Form Instances Add-on for Gravity Forms | 82 | 5 | 5 | 800 | | | Missing direct file access protection |
| #2977 | MyBookTable Bookstore by Stormhill Media | 82 | 16 | 34 | 1k+ | | | Direct Query |
| #2978 | mypace Custom Meta Robots | 82 | 4 | 6 | 2k+ | | | Input is not sanitized |
| #2979 | OpenPix for WooCommerce | 82 | 69 | 28 | 500 | | | wp function not compatible with requires wp |
| #2980 | Parallax Slider Block | 82 | 15 | 12 | 900 | | | file system operations mkdir |
| #2981 | PixTypes | 82 | | 178 | 9k+ | | | Non-prefixed global variable |
| #2982 | Posts and Users Stats | 82 | | 183 | 600 | | | Non-prefixed global variable |
| #2983 | Preferred Languages | 82 | 3 | 6 | 2k+ | | | Input is not sanitized |
| #2984 | Property Hive Rental Yield Calculator | 82 | 16 | 2 | 400 | | | Text Domain Mismatch |
| #2985 | Regenerate Thumbnails | 82 | 10 | 9 | 1m+ | | | Direct Query |
| #2986 | WordPress REST API (Version 2) | 82 | 476 | 13 | 10k+ | | | Missing Arg Domain |
| #2987 | Search box on Navigation Menu | 82 | 22 | 3 | 500 | | | Text Domain Mismatch |
| #2988 | Seriously Simple Transcripts | 82 | 35 | 3 | 900 | | | Text Domain Mismatch |
| #2989 | Simple ads.txt | 82 | 8 | 6 | 1k+ | | | Missing direct file access protection |
| #2990 | Simple Page Ordering | 82 | 11 | 9 | 100k+ | | | Missing Arg Domain |
| #2991 | Simple Widget Title Links | 82 | 15 | 3 | 400 | | | Output is not escaped |
| #2992 | SiteNarrator Text-to-Speech Widget | 82 | 12 | 4 | 800 | | | Output is not escaped |
| #2993 | Image Slider Block | 82 | 13 | 14 | 3k+ | | | wp function not compatible with requires wp |
| #2994 | SnapWidget Social Photo Feed Widget | 82 | 9 | 9 | 600 | | | Output is not escaped |
| #2995 | Sticky Content – Make Any Section Sticky on Scroll | 82 | 24 | 9 | 400 | | | Text Domain Mismatch |
| #2996 | Stop Emails | 82 | 9 | 3 | 5k+ | | | Missing direct file access protection |
| #2997 | Storefront Blog Excerpts | 82 | 24 | 2 | 700 | | | Text Domain Mismatch |
| #2998 | Storefront Homepage Contact Section | 82 | 26 | 2 | 1k+ | | | Output is not escaped |
| #2999 | Sucuri Security – Auditing, Malware Scanner and Security Hardening | 82 | 51 | 11 | 600k+ | | | Missing direct file access protection |
| #3000 | Super Web Share – Native Social Sharing Button | 82 | 24 | 19 | 2k+ | | | Non-prefixed function |