| #2901 | Elementor Blocks for Gutenberg | 80 | 7 | 6 | 10k+ | | | Output is not escaped |
| #2902 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #2903 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | | | badly named files |
| #2904 | Dashboard Welcome for Elementor | 94 | 1 | 2 | 10k+ | | | Non-prefixed class |
| #2905 | GutenBee – Gutenberg Blocks | 97 | 7 | 10 | 7k+ | | | Missing direct file access protection |
| #2906 | Genesis Portfolio Pro | 97 | 9 | 16 | 5k+ | | | Non-prefixed global variable |
| #2907 | EXMAGE – WordPress Image Links | 73 | 14 | 34 | 6k+ | | | Missing Arg Domain |
| #2908 | Timeline Block For Gutenberg | 100 | | 2 | 9k+ | | | mismatched plugin name |
| #2909 | WPForce Logout – WordPress User Login Logout Management Plugin | 37 | 567 | 32 | 8k+ | | | Output is not escaped |
| #2910 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 20 | 440 | 750 | 400 | | | Missing direct file access protection |
| #2911 | Easy Add Thumbnail | 98 | 3 | 0 | 7k+ | | | Missing direct file access protection |
| #2912 | CC Child Pages | 38 | 63 | 152 | 9k+ | | | Non-prefixed global variable |
| #2913 | WooCommerce Accepted Payment Methods | 66 | 28 | 4 | 2k+ | | | badly named files |
| #2914 | Shopkeeper Extender | 35 | 14 | 26 | 5k+ | | | Missing Version |
| #2915 | Stop WP Emails Going to Spam | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #2916 | Log Deprecated Notices | 38 | 92 | 73 | 900 | | | Text Domain Mismatch |
| #2917 | MM Title Manager — Hide Page and Post Title | 81 | 4 | 4 | 9k+ | | | Unsafe printing function |
| #2918 | Smooth Scroll Up | 41 | 61 | 10 | 6k+ | | | Output is not escaped |
| #2919 | Add to Cart Button Custom Text | 42 | 98 | 4 | 9k+ | | | Text Domain Mismatch |
| #2920 | Discussion Board – WordPress Forum Plugin | 31 | 105 | 153 | 2k+ | | | Request data is not unslashed |
| #2921 | Advanced Product Search For WooCommerce | 38 | 160 | 38 | 4k+ | | | Text Domain Mismatch |
| #2922 | Visual Website Optimizer | 48 | 86 | 4 | 5k+ | | | wp function not compatible with requires wp |
| #2923 | Order on Mobile for WooCommerce | 84 | 14 | 1 | 7k+ | | | Output is not escaped |
| #2924 | WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 24 | 534 | 1,559 | 3k+ | | | Non-prefixed global variable |
| #2925 | SoftTech-IT bKash, Rocket, Nagad | 38 | 164 | 81 | 6k+ | | | Text Domain Mismatch |
| #2926 | Jetpack VideoPress | 35 | 710 | 241 | 7k+ | | | Text Domain Mismatch |
| #2927 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #2928 | Event Calendar – Calendar | 24 | 1,111 | 1,262 | 2k+ | | | Text Domain Mismatch |
| #2929 | Feature A Page Widget | 41 | 66 | 5 | 3k+ | | | Output is not escaped |
| #2930 | ElementsReady Addons for Elementor | 23 | 231 | 666 | 3k+ | | | Non-prefixed global variable |
| #2931 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #2932 | WPML Multilingual for BuddyPress and BuddyBoss | 51 | 18 | 21 | 6k+ | | | SQL query is not prepared |
| #2933 | Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist | 79 | 121 | 42 | 3k+ | | | Text Domain Mismatch |
| #2934 | Pre-Orders for WooCommerce | 30 | 568 | 261 | 7k+ | | | Output is not escaped |
| #2935 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 910 | 1,835 | 1k+ | | | Non-prefixed global variable |
| #2936 | Login-Logout | 35 | 104 | 8 | 3k+ | | | Output is not escaped |
| #2937 | Meta Field Block – Display custom fields in the Block Editor without coding | 97 | 1 | 11 | 10k+ | | | Non-prefixed hook name |
| #2938 | Display Environment Type | 99 | 2 | 2 | 1k+ | | | Missing Translators Comment |
| #2939 | Auto Coupons for WooCommerce | 42 | 82 | 68 | 4k+ | | | Output is not escaped |
| #2940 | Theme Blvd Layout Builder | 35 | 207 | 169 | 2k+ | | | Output is not escaped |
| #2941 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #2942 | License Manager for WooCommerce | 23 | 129 | 797 | 6k+ | | | Nonce verification recommended |
| #2943 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | | Exception output is not escaped |
| #2944 | Photo Gallery – Image, Video & Portfolio | 76 | 4 | 11 | 1k+ | | | Missing Version |
| #2945 | Intagrate Lite | 33 | 94 | 152 | 4k+ | | | date date |
| #2946 | Genesis Featured Page Advanced | 41 | 209 | 4 | 7k+ | | | Output is not escaped |
| #2947 | No Gutenberg – Disable Blocks Editor and Global Styles – Back to Classic Editor | 99 | 1 | 3 | 9k+ | | | trademarked term |
| #2948 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | | Non-prefixed global variable |
| #2949 | Latest Post Shortcode | 98 | 5 | 6 | 4k+ | | | Non-prefixed constant |
| #2950 | Cue by AudioTheme.com | 35 | 28 | 150 | 6k+ | | | Non-prefixed hook name |