| #2151 | Ad Invalid Click Protector (AICP) | 35 | 78 | 45 | 10k+ | | | Text Domain Mismatch |
| #2152 | Smooth Back To Top Button | 56 | 41 | 7 | 40k+ | | | Output is not escaped |
| #2153 | HTML Import 2 | 34 | 273 | 26 | 5k+ | | | Unsafe printing function |
| #2154 | Bricksable for Bricks Builder | 80 | 1 | 76 | 10k+ | | | Post Not In exclude |
| #2155 | Gum Addon for Elementor | 35 | 660 | 72 | 50k+ | | | Text Domain Mismatch |
| #2156 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #2157 | Nginx Cache Controller | 35 | 79 | 96 | 1k+ | | | Text Domain Mismatch |
| #2158 | Multi Device Switcher | 98 | 2 | 9 | 20k+ | | | Non-prefixed function |
| #2159 | Thank You Page for WooCommerce | 68 | 6 | 27 | 10k+ | | | Non-prefixed global variable |
| #2160 | Product Customer List for WooCommerce | 25 | 610 | 1,334 | 9k+ | | | Non-prefixed global variable |
| #2161 | WP Help | 40 | 49 | 54 | 9k+ | | | Unsafe printing function |
| #2162 | bbPress Notify (No-Spam) | 35 | 62 | 66 | 2k+ | | | wp function not compatible with requires wp |
| #2163 | Collapsing Categories | 68 | 29 | 8 | 4k+ | | | Missing direct file access protection |
| #2164 | Disable Embeds | 99 | 2 | 0 | 10k+ | | | Missing direct file access protection |
| #2165 | Newpost Catch | 97 | 2 | 15 | 10k+ | | | Non-prefixed hook name |
| #2166 | Reddit for WooCommerce | 98 | | 17 | 70k+ | | | Dynamic hook name |
| #2167 | WC Fields Factory | 28 | 194 | 369 | 7k+ | | | Nonce verification recommended |
| #2168 | Mediavine Control Panel | 89 | 30 | 30 | 10k+ | | | Text Domain Mismatch |
| #2169 | Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates | 99 | | 13 | 10k+ | | | Non-prefixed constant |
| #2170 | Web Push Notifications – Webpushr | 31 | 169 | 293 | 10k+ | | | Output is not escaped |
| #2171 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | | | Output is not escaped |
| #2172 | Login Security Solution | 27 | 216 | 154 | 4k+ | | | Output is not escaped |
| #2173 | Patreon WordPress | 31 | 276 | 339 | 3k+ | | | Output is not escaped |
| #2174 | Redirect 404 Error Page to Homepage or Custom Page with Logs | 39 | 27 | 53 | 10k+ | | | Nonce verification recommended |
| #2175 | WPC AJAX Add to Cart for WooCommerce | 92 | | 28 | 10k+ | | | Non-prefixed hook name |
| #2176 | Elastic Email Sender | 96 | 121 | 4 | 10k+ | | | Text Domain Mismatch |
| #2177 | Preloader | 100 | | 0 | 10k+ | | | No open findings |
| #2178 | Mystery Themes Demo Importer | 95 | | 76 | 7k+ | | | Non-prefixed global variable |
| #2179 | Import Users from CSV | 47 | 33 | 12 | 10k+ | | | Unsafe printing function |
| #2180 | Nofollow for external link | 64 | 8 | 5 | 10k+ | | | Output is not escaped |
| #2181 | Video Popup – Video Lightbox for YouTube, Vimeo & MP4 | 100 | | 0 | 10k+ | | | No open findings |
| #2182 | Mega Elements – Addons for Elementor | 38 | 170 | 57 | 10k+ | | | Output is not escaped |
| #2183 | WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System | 51 | 22 | 38 | 5k+ | | | Output is not escaped |
| #2184 | JetWidgets For Elementor | 55 | 99 | 279 | 10k+ | | | Non-prefixed global variable |
| #2185 | Prevent Direct Access – Protect WordPress Files | 96 | 4 | 26 | 10k+ | | | Non-prefixed constant |
| #2186 | iControlWP | 47 | 45 | 59 | 1k+ | | | Missing direct file access protection |
| #2187 | All In One SEO Pack for WooCommerce | 40 | 57 | 25 | 3k+ | | | Text Domain Mismatch |
| #2188 | Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | 23 | 188 | 2,123 | 5k+ | | | Non-prefixed global variable |
| #2189 | CP Media Player – Audio Player and Video Player | 66 | 224 | 48 | 3k+ | | | Text Domain Mismatch |
| #2190 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #2191 | WC – APG Weight Shipping | 99 | | 6 | 6k+ | | | trademarked term |
| #2192 | Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links | 22 | 1,044 | 1,797 | 20k+ | | | Non-prefixed global variable |
| #2193 | WP Twitter Auto Publish | 33 | 442 | 171 | 4k+ | | | Output is not escaped |
| #2194 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #2195 | FancyBox | 96 | 5 | 3 | 4k+ | | | Not In Footer |
| #2196 | Custom Product Tabs Lite for WooCommerce | 75 | 3 | 11 | 4k+ | | | Input is not validated |
| #2197 | Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | 40 | 23 | 44 | 30k+ | | | Missing direct file access protection |
| #2198 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | | Non-prefixed global variable |
| #2199 | Friendly Captcha for WordPress | 35 | 192 | 62 | 10k+ | | | Output is not escaped |
| #2200 | EU/UK VAT Validation Manager for WooCommerce | 35 | 1 | 0 | 6k+ | | | Hidden files included |