| #2851 | WP Hide Dashboard | 75 | 6 | 10 | 2k+ | | | trademarked term |
| #2852 | JetGridBuilder — Grid Builder for Elementor and Gutenberg | 39 | 414 | 40 | 4k+ | | | Text Domain Mismatch |
| #2853 | Paytm Payment Gateway | 35 | 92 | 104 | 3k+ | | | Missing Arg Domain |
| #2854 | My Eyes Are Up Here | 35 | 7 | 12 | 2k+ | | | Missing nonce verification |
| #2855 | Table Addons for Elementor | 50 | 92 | 29 | 20k+ | | | wp function not compatible with requires wp |
| #2856 | BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript | 25 | 204 | 546 | 4k+ | | | Non-prefixed global variable |
| #2857 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | | | Text Domain Mismatch |
| #2858 | LocalWeb All In One | 36 | 34 | 297 | 5k+ | | | Non-prefixed global variable |
| #2859 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #2860 | Typing Effect | 97 | 7 | 5 | 10k+ | | | Text Domain Mismatch |
| #2861 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | 32 | 560 | 198 | 5k+ | | | Text Domain Mismatch |
| #2862 | Automatic Domain Changer | 69 | 37 | 14 | 10k+ | | | Text Domain Mismatch |
| #2863 | FA Lite – WP responsive slider plugin | 32 | 726 | 140 | 500 | | | Unsafe printing function |
| #2864 | SALERT – Fake Sales Notification WooCommerce | 42 | 41 | 67 | 8k+ | | | Non-prefixed global variable |
| #2865 | Mortgage Calculator | 55 | 98 | 16 | 4k+ | | | Text Domain Mismatch |
| #2866 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | | | Text Domain Mismatch |
| #2867 | SEO Data Transporter | 35 | 7 | 5 | 2k+ | | | Missing direct file access protection |
| #2868 | Frontend Reset Password | 35 | 83 | 128 | 10k+ | | | Text Domain Mismatch |
| #2869 | Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels | 34 | 86 | 255 | 9k+ | | | Direct Query |
| #2870 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #2871 | Photoswipe Masonry Gallery | 36 | 57 | 47 | 6k+ | | | Non Singular String Literal Text |
| #2872 | Blogger To WordPress | 94 | 15 | 4 | 3k+ | | | Missing direct file access protection |
| #2873 | ЮKassa для WooCommerce | 22 | 590 | 167 | 9k+ | | | Short PHP open tag found |
| #2874 | Cookie Bar | 44 | 29 | 3 | 10k+ | | | Unsafe printing function |
| #2875 | Full Background Manager | 40 | 37 | 24 | 7k+ | | | Output is not escaped |
| #2876 | WP-Persian | 35 | 144 | 37 | 7k+ | | | Unsafe printing function |
| #2877 | Checkout Files Upload for WooCommerce | 38 | 57 | 120 | 7k+ | | | Input is not sanitized |
| #2878 | WPML Widgets | 59 | 9 | 9 | 9k+ | | | Unsafe printing function |
| #2879 | Simple Shortcode for Google Maps | 98 | 2 | 5 | 3k+ | | | Non-prefixed hook name |
| #2880 | DoLogin Security | 100 | | 0 | 7k+ | | | No open findings |
| #2881 | WP-REST-API V2 Menus | 96 | 5 | 4 | 3k+ | | | trademarked term |
| #2882 | Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. | 100 | | 1 | 10k+ | | | mismatched plugin name |
| #2883 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #2884 | FlexTable – Data Table Sync with Google Sheets | 35 | 20 | 78 | 4k+ | | | Direct Query |
| #2885 | Core Rollback | 93 | 5 | 2 | 10k+ | | | wp function not compatible with requires wp |
| #2886 | Departamentos y Ciudades de Colombia para Woocommerce | 58 | 49 | 42 | 6k+ | | | Text Domain Mismatch |
| #2887 | WP Content Copy Protection with Color Design | 38 | 96 | 61 | 5k+ | | | Non Singular String Literal Domain |
| #2888 | Quick Buy Now Button for WooCommerce | 54 | 136 | 25 | 40k+ | | | Text Domain Mismatch |
| #2889 | Crowdsignal Forms | 100 | | 0 | 200k+ | | | No open findings |
| #2890 | Product Attachment for WooCommerce | 24 | 1,233 | 1,777 | 7k+ | | | Non-prefixed global variable |
| #2891 | Child Theme Wizard | 100 | | 0 | 10k+ | | | No open findings |
| #2892 | WPCore Plugin Manager | 35 | 118 | 38 | 9k+ | | | Text Domain Mismatch |
| #2893 | Pronamic Google Maps | 85 | 24 | 18 | 1k+ | | | Non-prefixed global variable |
| #2894 | Fancy Comments WordPress | 34 | 359 | 39 | 2k+ | | | Unsafe printing function |
| #2895 | Ninjalytics: Sales Reports & Order Export for WooCommerce and EDD | 35 | 6 | 32 | 6k+ | | | Non-prefixed global variable |
| #2896 | WP Ultimate Post Grid | 34 | 114 | 74 | 4k+ | | | Missing direct file access protection |
| #2897 | Watermark RELOADED | 97 | 6 | 3 | 700 | | | Non-prefixed constant |
| #2898 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | | | Text Domain Mismatch |
| #2899 | Redirect 404 to Homepage | 88 | 4 | 4 | 70k+ | | | parse url parse url |
| #2900 | Real Thumbnail Generator: Efficient regeneration of thumbnails in all sizes | 85 | 5 | 58 | 1k+ | | | Non-prefixed constant |