| #3401 | CodeColorer | 64 | 65 | 266 | 1k+ | | | Non-prefixed global variable |
| #3402 | Events Tracker for Elementor | 96 | 4 | 10 | 10k+ | | | Non-prefixed constant |
| #3403 | Subtitles | 86 | 4 | 9 | 3k+ | | | Non-prefixed hook name |
| #3404 | Zeno Font Resizer | 78 | 13 | 2 | 5k+ | | | Output is not escaped |
| #3405 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | | Output is not escaped |
| #3406 | UsersWP – ReCaptcha | 40 | 80 | 17 | 3k+ | | | Text Domain Mismatch |
| #3407 | Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file | 95 | 11 | 15 | 9k+ | | | Non-prefixed global variable |
| #3408 | Payrexx Payment Gateway for WooCommerce | 45 | 18 | 117 | 2k+ | | | Non-prefixed class |
| #3409 | Audit Trail | 34 | 90 | 107 | 10k+ | | | Unsafe printing function |
| #3410 | WP Links Page | 98 | 2 | 3 | 3k+ | | | trademarked term |
| #3411 | WPS Visitor Counter | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #3412 | Robots.txt Editor | 72 | 10 | 7 | 10k+ | | | Input is not validated or sanitized |
| #3413 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | | | Non-prefixed global variable |
| #3414 | Events Calendar by FooEvents | 35 | 57 | 59 | 4k+ | | | Non-prefixed global variable |
| #3415 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #3416 | Social Sharing (by Danny) | 93 | 9 | 8 | 2k+ | | | Missing direct file access protection |
| #3417 | Make Section & Column Clickable For Elementor | 99 | 3 | 0 | 10k+ | | | Text Domain Mismatch |
| #3418 | picu – Online Photo Proofing Gallery | 27 | 613 | 325 | 2k+ | | | Output is not escaped |
| #3419 | GSheetConnector for Elementor Forms – Sync Elementor Forms to Google Sheets | 81 | 11 | 12 | 9k+ | | | Non-prefixed global variable |
| #3420 | Coupon Generator for WooCommerce | 40 | 39 | 28 | 10k+ | | | Unsafe printing function |
| #3421 | WP BASIC Auth | 83 | 4 | 13 | 4k+ | | | Input is not sanitized |
| #3422 | Verified Member for BuddyPress | 47 | 20 | 38 | 3k+ | | | Nonce verification recommended |
| #3423 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #3424 | Breadcrumbs for WooCommerce | 76 | 14 | 2 | 6k+ | | | Output is not escaped |
| #3425 | Doneren met Mollie | 36 | 420 | 351 | 4k+ | | | SQL query is not prepared |
| #3426 | Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress | 41 | 27 | 168 | 2k+ | | | Request data is not unslashed |
| #3427 | Generate PDF using Contact Form 7 | 93 | | 3 | 4k+ | | | Input is not sanitized |
| #3428 | Registered Users Only | 49 | 14 | 14 | 2k+ | | | Unsafe printing function |
| #3429 | List Pages Shortcode | 96 | 5 | 9 | 5k+ | | | Non-prefixed hook name |
| #3430 | Evergreen Countdown Timer | 45 | 193 | 35 | 2k+ | | | wp function not compatible with requires wp |
| #3431 | Unfiltered MU | 96 | 5 | 2 | 3k+ | | | Discouraged WordPress constant usage: MUPLUGINDIR |
| #3432 | KiviCare – Clinic & Patient Management System (EHR) | 24 | 223 | 880 | 2k+ | | | Direct Query |
| #3433 | TechGasp Sound Master | 41 | 136 | 4 | 500 | | | Output is not escaped |
| #3434 | Prismatic | 42 | 61 | 29 | 2k+ | | | Output is not escaped |
| #3435 | S2W – Import Shopify to WooCommerce | 39 | 8 | 132 | 3k+ | | | Request data is not unslashed |
| #3436 | Comments Import & Export | 85 | 112 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #3437 | JS Archive List | 34 | 99 | 31 | 3k+ | | | Output is not escaped |
| #3438 | Atarim – Visual Feedback, Review & AI Collaboration | 24 | 765 | 442 | 1k+ | | | wp function not compatible with requires wp |
| #3439 | Nexi XPay | 33 | 496 | 277 | 6k+ | | | Text Domain Mismatch |
| #3440 | FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet | 88 | 6 | 18 | 1k+ | | | Nonce verification recommended |
| #3441 | Seed Social | 56 | 36 | 7 | 6k+ | | | Output is not escaped |
| #3442 | Slim Jetpack | 22 | 2,586 | 1,947 | 2k+ | | | Text Domain Mismatch |
| #3443 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | | | Non-prefixed global variable |
| #3444 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #3445 | Better Addons for Elementor | 87 | 125 | 221 | 4k+ | | | Non-prefixed global variable |
| #3446 | Import XML and RSS Feeds | 34 | 260 | 85 | 2k+ | | | Unsafe printing function |
| #3447 | Iframely – WP media embeds, cards and blocks | 35 | 136 | 43 | 2k+ | | | Unsafe printing function |
| #3448 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | | | Output is not escaped |
| #3449 | WP Social Widget | 39 | 239 | 7 | 4k+ | | | Output is not escaped |
| #3450 | Toocheke Companion | 25 | 429 | 1,227 | 1k+ | | | Non-prefixed global variable |