| #3051 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | | | Non-prefixed global variable |
| #3052 | Podcast Subscribe Buttons | 33 | 552 | 39 | 5k+ | | | Text Domain Mismatch |
| #3053 | Post Types Unlimited | 72 | 45 | 7 | 10k+ | | | Missing Translators Comment |
| #3054 | Automattic For Agencies Client | 53 | 249 | 184 | 20k+ | | | Text Domain Mismatch |
| #3055 | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 23 | 934 | 3,619 | 1k+ | | | Non-prefixed global variable |
| #3056 | GD bbPress Tools | 43 | 15 | 61 | 1k+ | | | Input is not sanitized |
| #3057 | WP Font Awesome | 98 | 2 | 4 | 10k+ | | | trademarked term |
| #3058 | Responsive Slideshow – Photo Carousel | 57 | 1 | 74 | 2k+ | | | Non-prefixed global variable |
| #3059 | Side Menu Lite – Sticky Floating Side Menu | 59 | 9 | 123 | 7k+ | | | Non-prefixed global variable |
| #3060 | Product Compare for WooCommerce | 38 | 55 | 191 | 3k+ | | | Non-prefixed global variable |
| #3061 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #3062 | Payoneer Checkout | 33 | 168 | 45 | 5k+ | | | Exception output is not escaped |
| #3063 | Advanced Floating Content Lite | 25 | 643 | 1,348 | 7k+ | | | Non-prefixed global variable |
| #3064 | Getty Images | 59 | 11 | 46 | 2k+ | | | Missing nonce verification |
| #3065 | One page checkout and layouts for woocommerce | 38 | 83 | 52 | 3k+ | | | Non-prefixed global variable |
| #3066 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #3067 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |
| #3068 | Product Configurator for WooCommerce | 31 | 41 | 562 | 3k+ | | | Non-prefixed hook name |
| #3069 | ACF Theme Code for Advanced Custom Fields | 40 | 478 | 40 | 10k+ | | | Output is not escaped |
| #3070 | Remove Yoast SEO Comments | 85 | 12 | 5 | 10k+ | | | wp function not compatible with requires wp |
| #3071 | Debug Log Manager – Conveniently Monitor and Inspect Errors | 66 | 33 | 44 | 10k+ | | | Input is not validated |
| #3072 | WP Date and Time Shortcode | 40 | 90 | 12 | 10k+ | | | Output is not escaped |
| #3073 | Add Widget After Content | 70 | 6 | 11 | 7k+ | | | Setting is missing a sanitization callback |
| #3074 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |
| #3075 | Statify – Extended Evaluation | 95 | 2 | 119 | 20k+ | | | Non-prefixed global variable |
| #3076 | Comment Edit Core – Simple Comment Editing | 73 | 27 | 85 | 2k+ | | | Non-prefixed hook name |
| #3077 | No CAPTCHA reCAPTCHA | 40 | 112 | 26 | 4k+ | | | Text Domain Mismatch |
| #3078 | Easy Footnotes | 96 | 6 | 22 | 8k+ | | | Non-prefixed global variable |
| #3079 | Surfer – WordPress Plugin | 97 | 1 | 25 | 6k+ | | | Direct Query |
| #3080 | Novalnet Payment Gateway for WooCommerce | 94 | 4 | 58 | 1k+ | | | Non-prefixed class |
| #3081 | ThemeZee Widget Bundle | 42 | 211 | 58 | 5k+ | | | Output is not escaped |
| #3082 | CallTrackingMetrics | 21 | 923 | 286 | 3k+ | | | Unsafe printing function |
| #3083 | LIQUID SPEECH BALLOON | 44 | 34 | 30 | 10k+ | | | Output is not escaped |
| #3084 | Custom User Profile Photo | 77 | 16 | 3 | 5k+ | | | Unsafe printing function |
| #3085 | Donorbox – Free Recurring Donation Plugin and Fundraising Platform | 87 | 5 | 6 | 8k+ | | | Missing Arg Domain |
| #3086 | Custom Icons for Elementor and WPBakery | 74 | 35 | 38 | 10k+ | | | Non-prefixed global variable |
| #3087 | Advanced Image Styles | 98 | 3 | 1 | 9k+ | | | Missing direct file access protection |
| #3088 | PiWeb Cancel order / Refund request for WooCommerce | 76 | 40 | 49 | 2k+ | | | wp function not compatible with requires wp |
| #3089 | WPBakery Visual Composer & qTranslate-X | 98 | 2 | 3 | 7k+ | | | trademarked term |
| #3090 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #3091 | User Activity Tracking and Log | 50 | 30 | 263 | 3k+ | | | Non-prefixed global variable |
| #3092 | BuddyPress Xprofile Custom Field Types | 41 | 39 | 189 | 4k+ | | | Missing nonce verification |
| #3093 | DMCA Protection Badge | 20 | 4,425 | 217 | 1k+ | | | Output is not escaped |
| #3094 | Post Meta Inspector | 83 | 6 | 1 | 2k+ | | | Unsafe printing function |
| #3095 | Country Code For Elementor Form Telephone Field | 99 | 10 | 3 | 10k+ | | | Text Domain Mismatch |
| #3096 | RS WP Book Showcase – A Complete Book Catalogue & Library System | 24 | 910 | 343 | 1k+ | | | Text Domain Mismatch |
| #3097 | Genesis Visual Hook Guide | 65 | 13 | 14 | 700 | | | Nonce verification recommended |
| #3098 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #3099 | XML for Google Merchant Center | 29 | 52 | 312 | 3k+ | | | Non-prefixed global variable |
| #3100 | Advanced Accordion Gutenberg Block – Create Beautiful FAQs, Content Accordions & Interactive Tabs | 37 | 39 | 36 | 10k+ | | | Missing direct file access protection |