| #3651 | RiskPay Gateway: USDC Payouts for WooCommerce | 72 | 20 | 2 | 600 | | | Output is not escaped |
| #3652 | Robots.txt Editor | 72 | 10 | 7 | 10k+ | | | Input is not validated or sanitized |
| #3653 | Root Relative URLs | 72 | 9 | 10 | 6k+ | | | Input is not sanitized |
| #3654 | Shipping Rate By Cities | 72 | 4 | 21 | 700 | | | Direct Query |
| #3655 | Simple Local Avatars | 72 | 14 | 16 | 100k+ | | | Non-prefixed constant |
| #3656 | Smartwaiver Waiver Widget | 72 | 17 | 8 | 400 | | | Output is not escaped |
| #3657 | Social Media Icons Widget | 72 | 181 | 10 | 1k+ | | | badly named files |
| #3658 | Storefront Product Sharing | 72 | 13 | 3 | 5k+ | | | Output is not escaped |
| #3659 | Tabs Widget for Page Builder | 72 | 22 | 7 | 3k+ | | | Text Domain Mismatch |
| #3660 | Templ Optimizer | 72 | 6 | 63 | 1k+ | | | Direct Query |
| #3661 | Starter Templates & Sites Pack by ThemeGrill | 72 | 28 | 51 | 70k+ | | | Non-prefixed hook name |
| #3662 | TinyPNG – JPEG, PNG & WebP image compression | 72 | 40 | 73 | 100k+ | | | Non-prefixed global variable |
| #3663 | Tiny Yardage Calculator | 72 | 23 | 1 | 300 | | | Output is not escaped |
| #3664 | Ultimate Member Custom Tab Builder Lite | 72 | 12 | 15 | 500 | | | Output is not escaped |
| #3665 | Video Backgrounds for SiteOrigin Page Builder | 72 | 55 | 5 | 2k+ | | | Text Domain Mismatch |
| #3666 | Waymark | 72 | 16 | 32 | 900 | | | Missing direct file access protection |
| #3667 | Place Order Without Payment for WooCommerce | 72 | 244 | 62 | 3k+ | | | Text Domain Mismatch |
| #3668 | Product Subtitle For WooCommerce | 72 | 6 | 36 | 3k+ | | | Non-prefixed namespace |
| #3669 | Webyx for Gutenberg – Fullpage Fullscreen Scrolling Websites | 72 | 14 | 11 | 600 | | | Output is not escaped |
| #3670 | Customizer for WooCommerce | 72 | 10 | 13 | 800 | | | Nonce verification recommended |
| #3671 | Direct Checkout for WooCommerce | 72 | 77 | 35 | 80k+ | | | Text Domain Mismatch |
| #3672 | ShinyStat Widget | 72 | 14 | 2 | 800 | | | Output is not escaped |
| #3673 | aapanel WP Toolkit | 71 | 20 | 18 | 2k+ | | | wp function not compatible with requires wp |
| #3674 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | | | curl curl setopt |
| #3675 | ACF Enhanced Message Field | 71 | 29 | 1 | 600 | | | Text Domain Mismatch |
| #3676 | Advanced Custom Fields: Price Field | 71 | 12 | 7 | 400 | | | Output is not escaped |
| #3677 | ACF Tooltip | 71 | 16 | 3 | 1k+ | | | Output is not escaped |
| #3678 | Add Any Extension to Pages | 71 | 3 | 10 | 2k+ | | | Input is not sanitized |
| #3679 | Change Administrator Email Address | 71 | 12 | 9 | 700 | | | Output is not escaped |
| #3680 | Another Mailchimp Widget | 71 | 28 | 17 | 4k+ | | | Missing Translators Comment |
| #3681 | Bold Timeline Lite | 71 | 220 | 561 | 10k+ | | | Non-prefixed global variable |
| #3682 | Bootstrap Shortcodes | 71 | 21 | 11 | 5k+ | | | Missing direct file access protection |
| #3683 | BuddyPress Default Data | 71 | 8 | 21 | 400 | | | Interpolated SQL is not prepared |
| #3684 | Social Chat Widget (⚡ by Callbell) | 71 | 11 | 6 | 600 | | | Output is not escaped |
| #3685 | Comfortable Reading | 71 | 16 | 8 | 2k+ | | | Output is not escaped |
| #3686 | commonWP | 71 | 18 | 33 | 400 | | | Non-prefixed hook name |
| #3687 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | | | Text Domain Mismatch |
| #3688 | Cresta Social Messenger | 71 | 9 | 10 | 1k+ | | | Non-prefixed function |
| #3689 | Easy Sticky Buttons | 71 | 21 | 16 | 600 | | | Short PHP open tag found |
| #3690 | GPX Viewer | 71 | 10 | 26 | 900 | | | Missing Version |
| #3691 | Info Cards – Add Text and Media in Card Layouts | 71 | 9 | 28 | 2k+ | | | Non-prefixed namespace |
| #3692 | Link Checker Pro | 71 | 6 | 25 | 4k+ | | | Non-prefixed function |
| #3693 | Meks Time Ago | 71 | 22 | 1 | 10k+ | | | Output is not escaped |
| #3694 | Multiple Roles | 71 | 7 | 20 | 5k+ | | | Non-prefixed global variable |
| #3695 | Nginx Helper | 71 | 47 | 60 | 200k+ | | | Non-prefixed global variable |
| #3696 | Print Bangla News | 71 | 29 | 17 | 2k+ | | | Output is not escaped |
| #3697 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #3698 | Quick and Easy FAQs | 71 | 92 | 9 | 10k+ | | | Non Singular String Literal Domain |
| #3699 | Really Simple Click To Call Bar | 71 | 23 | 3 | 8k+ | | | Output is not escaped |
| #3700 | Repeater Fields for WPForms | 71 | 173 | 18 | 500 | | | wp function not compatible with requires wp |