| #3201 | Popupsmart | 79 | 28 | 2 | 600 | | | Output is not escaped |
| #3202 | Qi Addons For Elementor | 79 | 33 | 339 | 200k+ | | | Non-prefixed global variable |
| #3203 | Qty Increment Buttons for WooCommerce | 79 | 15 | 2 | 9k+ | | | Output is not escaped |
| #3204 | Flutterwave Payments | 79 | 8 | 39 | 600 | | | Non-prefixed global variable |
| #3205 | Real Category Management: Content Management in Category Folders | 79 | 4 | 73 | 2k+ | | | Non-prefixed constant |
| #3206 | Related Products Manager for WooCommerce | 79 | 9 | 43 | 1k+ | | | Non-prefixed global variable |
| #3207 | Remove Category URL – Remove 'category' base from category permalinks | 79 | 5 | 8 | 50k+ | | | Missing direct file access protection |
| #3208 | Remove noreferrer | 79 | 17 | 14 | 5k+ | | | Missing Arg Domain |
| #3209 | Responsive Mobile-Friendly Tooltip | 79 | 25 | 14 | 600 | | | Missing Arg Domain |
| #3210 | Retainful – WooCommerce Abandoned Cart, Newsletters, Email Marketing, Signup Forms and Automation | 79 | 15 | 26 | 1k+ | | | Non-prefixed hook name |
| #3211 | Search engines blocked warning | 79 | 20 | 3 | 500 | | | Output is not escaped |
| #3212 | Sellbrite | 79 | 18 | 4 | 500 | | | Short PHP open tag found |
| #3213 | SSH SFTP Updater Support | 79 | 6 | 31 | 10k+ | | | Non-prefixed global variable |
| #3214 | SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers | 79 | 45 | 66 | 200k+ | | | Non-prefixed hook name |
| #3215 | Testimonial Customer Feedback | 79 | 3 | 6 | 1k+ | | | Nonce verification recommended |
| #3216 | Visual Editor Biography | 79 | 11 | 3 | 900 | | | Missing Arg Domain |
| #3217 | Customizer for WooCommerce | 79 | 4 | 6 | 20k+ | | | Missing nonce verification |
| #3218 | WooCommerce Grid / List toggle | 79 | 10 | 12 | 10k+ | | | Output is not escaped |
| #3219 | Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist | 79 | 121 | 42 | 3k+ | | | Text Domain Mismatch |
| #3220 | WP Automatic Updates | 79 | 50 | 7 | 400 | | | Text Domain Mismatch |
| #3221 | WP Last Modified Info | 79 | 45 | 32 | 40k+ | | | Short PHP open tag found |
| #3222 | WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map by aBlocks | 79 | 6 | 10 | 20k+ | | | trademarked term |
| #3223 | New Relic Reporting for WordPress | 79 | 4 | 16 | 600 | | | Nonce verification recommended |
| #3224 | WP Page Loading | 79 | 14 | 9 | 800 | | | Text Domain Mismatch |
| #3225 | WP Permastructure | 79 | 14 | 6 | 400 | | | Missing Arg Domain |
| #3226 | WP Referral Code | 79 | 18 | 19 | 600 | | | Missing direct file access protection |
| #3227 | WP Updates Settings | 79 | 7 | 8 | 900 | | | Unsafe printing function |
| #3228 | WPMagPlus Companion | 79 | 104 | 16 | 700 | | | Text Domain Mismatch |
| #3229 | Yandex Mail | 79 | 16 | 4 | 400 | | | Non Singular String Literal Domain |
| #3230 | Яндекс Метрика | 79 | 10 | 4 | 10k+ | | | Unsafe printing function |
| #3231 | YITH Maintenance Mode | 79 | 19 | 63 | 5k+ | | | Non-prefixed global variable |
| #3232 | Accordion Blocks | 78 | 9 | 3 | 10k+ | | | Unsafe printing function |
| #3233 | Advanced Custom Fields: Gravity Forms Add-on | 78 | 33 | 13 | 30k+ | | | Text Domain Mismatch |
| #3234 | Support For Icomoon with Advanced Custom Fields | 78 | 15 | 6 | 1k+ | | | Output is not escaped |
| #3235 | Active Campaign & WPForms | 78 | 27 | 10 | 400 | | | Text Domain Mismatch |
| #3236 | ELEX WooCommerce Address Validation & Google Address Autocomplete Plugin | 78 | 73 | 40 | 700 | | | Missing Arg Domain |
| #3237 | AffiliateWP – Affiliate QR Codes | 78 | 32 | 8 | 1k+ | | | Text Domain Mismatch |
| #3238 | AffiliateWP – Allow Own Referrals | 78 | 37 | 10 | 500 | | | Text Domain Mismatch |
| #3239 | Instant AI Image Generator – Create & Import Images | 78 | | 23 | 1k+ | | | Non-prefixed constant |
| #3240 | AI Provider for Anthropic | 78 | 13 | 1 | 30k+ | | | Exception output is not escaped |
| #3241 | Animated Text Block – Add Typing and Looping Text Effects | 78 | 5 | 25 | 4k+ | | | Non-prefixed class |
| #3242 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #3243 | Biteship Shipping | 78 | 25 | 16 | 500 | | | wp function not compatible with requires wp |
| #3244 | Boei – AI Chatbot, Live Chat & 50+ Channels for WordPress | 78 | 9 | 4 | 1k+ | | | Output is not escaped |
| #3245 | Booking System Trafft | 78 | 3 | 19 | 400 | | | Nonce verification recommended |
| #3246 | Bookvault | 78 | 13 | 10 | 700 | | | Nonce verification recommended |
| #3247 | Claspo – Popups, Spin the Wheel & Email Capture | 78 | 107 | 16 | 1k+ | | | wp function not compatible with requires wp |
| #3248 | Code Block Syntax Highlighter for Elementor | 78 | 344 | 3 | 600 | | | Non Singular String Literal Domain |
| #3249 | Date Picker For Contact Form 7 | 78 | 3 | 8 | 4k+ | | | Missing nonce verification |
| #3250 | Web3 Crypto Payments by DePay for WooCommerce | 78 | 6 | 101 | 1k+ | | | Direct Query |