| #2951 | UiChemy — Figma Converter for Elementor, Gutenberg and Bricks | 39 | 8 | 100 | 9k+ | | | Nonce verification recommended |
| #2952 | SimplyBook.me – Booking and reservations calendar | 54 | 31 | 13 | 30k+ | | | Exception output is not escaped |
| #2953 | Simple Website Redirect | 35 | 3 | 3 | 5k+ | | | Discouraged text-domain loading |
| #2954 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 39 | 65 | 72 | 6k+ | | | block api version too low |
| #2955 | WP ADA Compliance Check Basic | 28 | 785 | 177 | 3k+ | | | Text Domain Mismatch |
| #2956 | WPS Bookings for WooCommerce | 88 | 26 | 249 | 4k+ | | | Non-prefixed global variable |
| #2957 | Billplz for WooCommerce | 39 | 289 | 65 | 6k+ | | | Text Domain Mismatch |
| #2958 | Geo Controller | 23 | 91 | 450 | 1k+ | | | Non-prefixed global variable |
| #2959 | Swatchly – Product Variation Swatches for WooCommerce | 31 | 540 | 214 | 5k+ | | | Output is not escaped |
| #2960 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | | | Non-prefixed function |
| #2961 | Jetpack Search | 45 | 925 | 426 | 5k+ | | | Text Domain Mismatch |
| #2962 | Volunteer Sign Up Sheets | 32 | 967 | 401 | 1k+ | | | Output is not escaped |
| #2963 | DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | 32 | 166 | 119 | 5k+ | | | Output is not escaped |
| #2964 | Gallery Images Ape | 25 | 588 | 341 | 1k+ | | | Output is not escaped |
| #2965 | Name Directory | 38 | 520 | 309 | 3k+ | | | Output is not escaped |
| #2966 | Etsy Shop | 42 | 58 | 21 | 3k+ | | | Unsafe printing function |
| #2967 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #2968 | WebinarPress – Webinar System for WordPress | 54 | 61 | 499 | 900 | | | Non-prefixed global variable |
| #2969 | Tockify Events Calendar | 35 | 35 | 12 | 2k+ | | | Output is not escaped |
| #2970 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 600 | | | Output is not escaped |
| #2971 | MultiParcels Shipping For WooCommerce | 23 | 197 | 389 | 4k+ | | | Mixed line endings |
| #2972 | Transliterator – Multilingual and Multi-script Text Conversion | 28 | 305 | 322 | 3k+ | | | Output is not escaped |
| #2973 | YaMaps for WordPress Plugin | 64 | 21 | 30 | 10k+ | | | Non-prefixed global variable |
| #2974 | Header Footer Builder for Elementor | 99 | | 6 | 20k+ | | | Non-prefixed class |
| #2975 | Monster Widget | 98 | 3 | 4 | 800 | | | Non-prefixed hook name |
| #2976 | Podcast Importer SecondLine | 28 | 356 | 169 | 4k+ | | | Text Domain Mismatch |
| #2977 | Sticky Buttons – Floating Buttons Builder | 97 | 2 | 108 | 10k+ | | | Non-prefixed global variable |
| #2978 | EasyMega | 93 | 1 | 22 | 6k+ | | | Non-prefixed hook name |
| #2979 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | | | Non-prefixed function |
| #2980 | Deposits & Partial Payments for WooCommerce | 35 | 174 | 144 | 5k+ | | | Text Domain Mismatch |
| #2981 | Easy SSL Plugin for SAKURA Rental Server | 62 | 23 | 17 | 50k+ | | | Input is not sanitized |
| #2982 | GSheetConnector For WPForms – WPForms Google Sheets Integration (Real-Time Sync) | 32 | 120 | 145 | 8k+ | | | Non-prefixed global variable |
| #2983 | One Click Close Comments | 99 | 1 | 2 | 4k+ | | | unexpected markdown file |
| #2984 | Media Slider for Photos Images Videos | 69 | 10 | 23 | 2k+ | | | Missing Version |
| #2985 | Responsive Slider Gallery – Responsive Image Photo Slider | 62 | 32 | 122 | 2k+ | | | Non-prefixed global variable |
| #2986 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | | Text Domain Mismatch |
| #2987 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #2988 | WC Ukraine Shipping – Integration of Nova Poshta and Ukrposhta for WooCommerce | 35 | 504 | 164 | 7k+ | | | Text Domain Mismatch |
| #2989 | RestroPress – Online Food Ordering System | 18 | 521 | 3,082 | 1k+ | | | Non-prefixed global variable |
| #2990 | FG Drupal to WordPress | 26 | 275 | 100 | 700 | | | Unsafe printing function |
| #2991 | Show-Hide / Collapse-Expand | 70 | 18 | 15 | 10k+ | | | Missing direct file access protection |
| #2992 | Debug This | 52 | 43 | 32 | 2k+ | | | Missing Translators Comment |
| #2993 | WP Crowdfunding | 23 | 199 | 1,629 | 2k+ | | | Non-prefixed global variable |
| #2994 | WP and Divi Icons | 68 | 201 | 56 | 2k+ | | | wp function not compatible with requires wp |
| #2995 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | | | Output is not escaped |
| #2996 | MyBookTable Bookstore by Stormhill Media | 82 | 16 | 34 | 1k+ | | | Direct Query |
| #2997 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #2998 | Wonder PDF Embed | 75 | 53 | 1 | 8k+ | | | badly named files |
| #2999 | WP Job Manager – Company Profiles | 96 | 3 | 10 | 2k+ | | | trademarked term |
| #3000 | Disable Lazy Load | 100 | | 1 | 10k+ | | | plugin header nonexistent domain path |