| #2601 | Video Slider – Slider Carousel | 24 | 208 | 2,203 | 3k+ | | | Request data is not unslashed |
| #2602 | Theme Switcha – Easily Switch Themes for Development and Testing | 43 | 42 | 53 | 7k+ | | | Output is not escaped |
| #2603 | MediaPress | 23 | 904 | 583 | 4k+ | | | Output is not escaped |
| #2604 | RTMForm Builder | 34 | 188 | 209 | 30k+ | | | Text Domain Mismatch |
| #2605 | Search and Replace | 70 | 7 | 9 | 10k+ | | | Input is not sanitized |
| #2606 | WP FullCalendar | 37 | 32 | 64 | 8k+ | | | Nonce verification recommended |
| #2607 | Internal Links Manager | 35 | 188 | 121 | 10k+ | | | Output is not escaped |
| #2608 | Travel Agency Companion – Create Tour & Travel Website Using WP Travel Engine | 34 | 128 | 211 | 4k+ | | | Non-prefixed global variable |
| #2609 | PixCodes | 94 | | 216 | 8k+ | | | Non-prefixed global variable |
| #2610 | WPPizza – A Restaurant Plugin | 18 | 4,689 | 2,703 | 1k+ | | | Text Domain Mismatch |
| #2611 | RumbleTalk Live Group Chat – HTML5 | 83 | 9 | 13 | 700 | | | Missing direct file access protection |
| #2612 | YMC Filter | 24 | 12 | 1,732 | 4k+ | | | Non-prefixed global variable |
| #2613 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | | | Non-prefixed global variable |
| #2614 | iyzico for WooCommerce | 42 | 34 | 54 | 10k+ | | | Unsafe printing function |
| #2615 | Performant Translations | 97 | 5 | 9 | 40k+ | | | Non-prefixed global variable |
| #2616 | School Management System – WPSchoolPress | 20 | 353 | 5,275 | 1k+ | | | Non-prefixed global variable |
| #2617 | Announcer – Sticky Message Banner & Notification Bar | 41 | 110 | 27 | 10k+ | | | Output is not escaped |
| #2618 | LWS Hide Login | 45 | 5 | 58 | 20k+ | | | Request data is not unslashed |
| #2619 | Theme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons | 31 | 393 | 329 | 6k+ | | | Missing direct file access protection |
| #2620 | WP Spell Check | 25 | 9 | 4,365 | 2k+ | | | Direct Query |
| #2621 | Clone Posts | 98 | 5 | 5 | 10k+ | | | Missing Arg Domain |
| #2622 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | | | Output is not escaped |
| #2623 | Hello Bar Popup Builder | 94 | 2 | 0 | 3k+ | | | Non Enqueued Script |
| #2624 | Better Google Analytics | 29 | 376 | 869 | 2k+ | | | Non-prefixed global variable |
| #2625 | WooCommerce Accommodation Bookings | 92 | 1 | 91 | 1k+ | | | Non-prefixed global variable |
| #2626 | Image Optimization For SEO | 56 | 116 | 69 | 3k+ | | | Non Singular String Literal Domain |
| #2627 | Memberful – Membership Plugin | 27 | 351 | 336 | 1k+ | | | Text Domain Mismatch |
| #2628 | WP Smart Preloader | 68 | 27 | 10 | 5k+ | | | Output is not escaped |
| #2629 | Edwiser Bridge – WordPress Moodle Integration | 30 | 4 | 669 | 4k+ | | | Non-prefixed hook name |
| #2630 | Ajaxify Comments – Ajax and Lazy Loading Comments | 65 | 20 | 38 | 3k+ | | | Non-prefixed hook name |
| #2631 | Spiffy Calendar | 33 | 473 | 243 | 3k+ | | | Output is not escaped |
| #2632 | Featured Image Admin Thumb | 90 | 7 | 10 | 20k+ | | | Non-prefixed hook name |
| #2633 | XServer Migrator | 35 | 39 | 53 | 10k+ | | | Interpolated SQL is not prepared |
| #2634 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | | | wp function not compatible with requires wp |
| #2635 | Abandoned Cart Recovery for WooCommerce | 41 | 20 | 202 | 4k+ | | | Request data is not unslashed |
| #2636 | Intercom | 0 | 60 | 71 | 6k+ | | | Non-prefixed function |
| #2637 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #2638 | HTML5 jQuery Audio Player | 32 | 251 | 153 | 1k+ | | | Unsafe printing function |
| #2639 | Lazy Load for Comments | 99 | | 6 | 2k+ | | | Non-prefixed constant |
| #2640 | Duplicate PP | 90 | | 8 | 10k+ | | | Non-prefixed constant |
| #2641 | Embedly | 42 | 17 | 38 | 2k+ | | | Output is not escaped |
| #2642 | FluentSnippets – High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager | 56 | 31 | 27 | 50k+ | | | Nonce verification recommended |
| #2643 | Responsive Gallery Grid | 40 | 90 | 14 | 4k+ | | | Output is not escaped |
| #2644 | Manual Image Crop | 40 | 178 | 61 | 8k+ | | | Output is not escaped |
| #2645 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 157 | 826 | 7k+ | | | Non-prefixed global variable |
| #2646 | MaxGalleria | 26 | 278 | 560 | 2k+ | | | Non-prefixed global variable |
| #2647 | Form Input Masks For Elementor Forms | 35 | 3 | 1 | 10k+ | | | Hidden files included |
| #2648 | Sitemap Generator | 50 | 60 | 26 | 3k+ | | | Output is not escaped |
| #2649 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | | | Non Singular String Literal Domain |
| #2650 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | | | Non-prefixed hook name |