| #3351 | Delete Pending Comments | 57 | 16 | 11 | 10k+ | | | Unsafe printing function |
| #3352 | Disable Cart Fragments by Optimocha | 57 | 8 | 13 | 10k+ | | | Nonce verification recommended |
| #3353 | Elementor Beta (Developer Edition) | 57 | 36 | 32 | 30k+ | | | Output is not escaped |
| #3354 | Live Chat by Formilla – Real-time Chat & Chatbots Plugin | 57 | 22 | 13 | 2k+ | | | Missing Arg Domain |
| #3355 | APG Google Image Sitemap Feed | 57 | 36 | 33 | 900 | | | Non-prefixed global variable |
| #3356 | Gravity PDF | 57 | 116 | 152 | 20k+ | | | Non-prefixed global variable |
| #3357 | Hide Admin Notices | 57 | 9 | 16 | 20k+ | | | Input is not sanitized |
| #3358 | iConvert Promoter | 57 | 98 | 217 | 1k+ | | | Non-prefixed global variable |
| #3359 | Internal Link Juicer: SEO Auto Linker for WordPress | 57 | 12 | 61 | 90k+ | | | Database parameter is not escaped |
| #3360 | iZooto – Web Push Notifications | 57 | 26 | 25 | 1k+ | | | wp function not compatible with requires wp |
| #3361 | JSON API User | 57 | 17 | 34 | 1k+ | | | Non-prefixed hook name |
| #3362 | Logo Manager For Enamad – لوگوی نماد الکترونیکی | 57 | 18 | 14 | 5k+ | | | Output is not escaped |
| #3363 | Longer Permalinks | 57 | 27 | 21 | 8k+ | | | Missing Arg Domain |
| #3364 | MC4WP: Mailchimp for WordPress | 57 | | 238 | 1m+ | | | Non-prefixed global variable |
| #3365 | User Profile Picture | 57 | 42 | 54 | 40k+ | | | Non-prefixed hook name |
| #3366 | My WordPress Login Logo | 57 | 28 | 36 | 10k+ | | | Non-prefixed global variable |
| #3367 | Plethora Plugins Tabs + Accordions | 57 | 44 | 10 | 2k+ | | | Output is not escaped |
| #3368 | Protected Posts Logout Button | 57 | 10 | 20 | 1k+ | | | Input is not sanitized |
| #3369 | Public Post Preview | 57 | 8 | 11 | 100k+ | | | Nonce verification recommended |
| #3370 | Real-Time Find and Replace | 57 | 23 | 10 | 70k+ | | | Output is not escaped |
| #3371 | Remove admin menus by role | 57 | 5 | 54 | 8k+ | | | Input is not validated |
| #3372 | Search Exclude | 57 | 73 | 40 | 50k+ | | | Text Domain Mismatch |
| #3373 | Simple CSS | 57 | 22 | 13 | 80k+ | | | Missing Version |
| #3374 | Site Health Tool Manager | 57 | 13 | 5 | 2k+ | | | Unsafe printing function |
| #3375 | Responsive Slideshow – Photo Carousel | 57 | 1 | 74 | 2k+ | | | Non-prefixed global variable |
| #3376 | Team View | 57 | 32 | 19 | 1k+ | | | Output is not escaped |
| #3377 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |
| #3378 | tinyWYM Editor | 57 | 55 | 3 | 1k+ | | | Text Domain Mismatch |
| #3379 | Ultimate Member – Terms & Conditions | 57 | 19 | 9 | 4k+ | | | Output is not escaped |
| #3380 | WC Call For Price | 57 | 19 | 55 | 1k+ | | | Non-prefixed global variable |
| #3381 | WF Cookie Consent | 57 | 31 | 5 | 10k+ | | | Output is not escaped |
| #3382 | Filter Orders by Product for WooCommerce | 57 | 9 | 21 | 4k+ | | | Nonce verification recommended |
| #3383 | Sequential Order Numbers for WooCommerce | 57 | 9 | 24 | 10k+ | | | Interpolated SQL is not prepared |
| #3384 | WP Old Post Date Remover | 57 | 25 | 7 | 2k+ | | | Unsafe printing function |
| #3385 | Social Chat – Click To Chat App Button | 57 | 81 | 44 | 200k+ | | | Text Domain Mismatch |
| #3386 | WPC Product Quantity for WooCommerce | 57 | 14 | 48 | 2k+ | | | Non-prefixed global variable |
| #3387 | Advanced Floating Content Lite | 56 | 88 | 49 | 7k+ | | | Text Domain Mismatch |
| #3388 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #3389 | Anti-Captcha (anti-spam botblocker) | 56 | 23 | 26 | 1k+ | | | rand mt rand |
| #3390 | Booking Calendar | 56 | 16 | 40 | 50k+ | | | wp function not compatible with requires wp |
| #3391 | BuddyCommerce: WooCommerce and BuddyPress Integration | 56 | 29 | 19 | 800 | | | Output is not escaped |
| #3392 | SMTP by BestWebSoft | 56 | 486 | 175 | 1k+ | | | Text Domain Mismatch |
| #3393 | Easy Digital Downloads Featured Downloads | 56 | 15 | 15 | 1k+ | | | Output is not escaped |
| #3394 | FV Top Level Categories | 56 | 24 | 16 | 20k+ | | | Text Domain Mismatch |
| #3395 | Grids: Layout builder for WordPress | 56 | 24 | 27 | 2k+ | | | Missing direct file access protection |
| #3396 | Jquery Validation For Contact Form 7 | 56 | 18 | 19 | 9k+ | | | Missing direct file access protection |
| #3397 | Form data to kintone | 56 | 25 | 22 | 1k+ | | | Output is not escaped |
| #3398 | Kwayy HTML Sitemap | 56 | 13 | 19 | 6k+ | | | Missing nonce verification |
| #3399 | LearnPress – Course Wishlist | 56 | 35 | 22 | 20k+ | | | Output is not escaped |
| #3400 | MAS Brands for WooCommerce | 56 | 80 | 15 | 10k+ | | | Text Domain Mismatch |