| #3501 | Site Mailer – SMTP Replacement, Email API Deliverability & Email Log | 74 | 8 | 23 | 200k+ | | | Output is not escaped |
| #3502 | Sticky Custom Post Types | 74 | 15 | 0 | 500 | | | Missing Arg Domain |
| #3503 | Sublium Subscriptions – Subscriptions for WooCommerce – Recurring Payments, Subscription Plans & Installments | 74 | 35 | 22 | 400 | | | wp function not compatible with requires wp |
| #3504 | Vello Booking Calendar | 74 | 10 | 2 | 500 | | | Unsafe printing function |
| #3505 | Extra Shipping Rates for WooCommerce | 74 | 15 | 19 | 800 | | | Non-prefixed global variable |
| #3506 | WhatConverts | 74 | 10 | 10 | 7k+ | | | Non-prefixed function |
| #3507 | Widgets in Menu for WordPress | 74 | 16 | 12 | 8k+ | | | Text Domain Mismatch |
| #3508 | WP API SwaggerUI | 74 | 16 | 14 | 2k+ | | | Missing direct file access protection |
| #3509 | WP Cron HTTP Auth | 74 | 12 | 7 | 1k+ | | | Output is not escaped |
| #3510 | Force Login | 74 | 5 | 8 | 30k+ | | | Output is not escaped |
| #3511 | WP Revisions Limit | 74 | 16 | 14 | 900 | | | Missing Arg Domain |
| #3512 | WP-Sweep | 74 | 1 | 201 | 100k+ | | | Direct Query |
| #3513 | WP Term Colors | 74 | 3 | 13 | 700 | | | Nonce verification recommended |
| #3514 | Zion Builder – Website Builder for Speed & Creativity | 74 | 4 | 29 | 1k+ | | | Non-prefixed hook name |
| #3515 | Advanced Custom Fields – Widget Relationship Field add-on | 73 | 18 | 7 | 600 | | | Output is not escaped |
| #3516 | AffiliateWP – Allowed Products | 73 | 47 | 19 | 1k+ | | | Text Domain Mismatch |
| #3517 | Albacross for WordPress | 73 | 18 | 5 | 1k+ | | | Text Domain Mismatch |
| #3518 | ANAC XML Viewer | 73 | 21 | 1 | 1k+ | | | Output is not escaped |
| #3519 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | | | Non-prefixed function |
| #3520 | Bestfreebie Elementor Icons | 73 | 27 | 13 | 400 | | | Text Domain Mismatch |
| #3521 | Block Plugin Update | 73 | 9 | 10 | 6k+ | | | Missing direct file access protection |
| #3522 | BuddyPress Activity Shortcode | 73 | 9 | 14 | 2k+ | | | Non-prefixed hook name |
| #3523 | Clone Woo Orders – Free by WP Masters | 73 | 13 | 8 | 900 | | | Output is not escaped |
| #3524 | Conditionally display featured image on singular posts and pages | 73 | 17 | 6 | 30k+ | | | Output is not escaped |
| #3525 | Connect Polylang for Elementor | 73 | 1 | 21 | 100k+ | | | Nonce verification recommended |
| #3526 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | | | Text Domain Mismatch |
| #3527 | Contact Form7: Autocomplete | 73 | 27 | 8 | 500 | | | Text Domain Mismatch |
| #3528 | Contact Forms by Cimatti | 73 | 88 | 26 | 600 | | | wp function not compatible with requires wp |
| #3529 | Continue Shopping for WooCommerce | 73 | 9 | 20 | 5k+ | | | Input is not sanitized |
| #3530 | Custom Datepicker NMR | 73 | 4 | 12 | 1k+ | | | Missing Version |
| #3531 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | | | Non-prefixed hook name |
| #3532 | Dash Notifier | 73 | 12 | 6 | 20k+ | | | Heredoc Output Not Escaped |
| #3533 | Email Test – Check if your emails are being delivered | 73 | 8 | 7 | 1k+ | | | Exception output is not escaped |
| #3534 | EmailKit – Email Customizer for WooCommerce & WP | 73 | 18 | 81 | 70k+ | | | slow db query meta query |
| #3535 | Emergency password reset | 73 | 56 | 14 | 800 | | | wp function not compatible with requires wp |
| #3536 | EXMAGE – WordPress Image Links | 73 | 14 | 34 | 7k+ | | | Missing Arg Domain |
| #3537 | Export Media Library | 73 | 5 | 5 | 30k+ | | | Output is not escaped |
| #3538 | Export Plugin Details | 73 | 13 | 6 | 2k+ | | | Output is not escaped |
| #3539 | Force Password Change | 73 | 4 | 10 | 500 | | | Missing nonce verification |
| #3540 | Freetobook Responsive Widget | 73 | 5 | 14 | 500 | | | Input is not sanitized |
| #3541 | Genesis Widget Column Classes | 73 | 41 | 4 | 5k+ | | | Non Singular String Literal Domain |
| #3542 | Gravity Fieldset for Gravity Forms | 73 | 14 | 1 | 900 | | | Output is not escaped |
| #3543 | Hide WP Toolbar | 73 | 4 | 13 | 1k+ | | | trademarked term |
| #3544 | Infinite Notification – Sales Notification Plugin | 73 | 13 | 5 | 500 | | | Setting is missing a sanitization callback |
| #3545 | International Phone Number Format | 73 | 51 | 20 | 400 | | | Text Domain Mismatch |
| #3546 | jQuery Lightbox For Native Galleries | 73 | 26 | 7 | 5k+ | | | Text Domain Mismatch |
| #3547 | Meks Easy Ads Widget | 73 | 21 | 9 | 10k+ | | | Output is not escaped |
| #3548 | Meta Description | 73 | 5 | 9 | 400 | | | Input is not validated |
| #3549 | Mortgage Calculators WP | 73 | 18 | 123 | 3k+ | | | Non-prefixed global variable |
| #3550 | Multifile Upload Field for Contact Form 7 | 73 | 41 | 7 | 5k+ | | | Text Domain Mismatch |