| #3501 | Customer Reviews Collector for WooCommerce | 96 | 5 | 1 | 5k+ | | | Missing direct file access protection |
| #3502 | WP Auto Updater | 87 | 5 | 19 | 7k+ | | | Database parameter is not escaped |
| #3503 | Easy Image Collage | 40 | 96 | 18 | 4k+ | | | Unsafe printing function |
| #3504 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #3505 | Post Pay Counter | 31 | 639 | 238 | 1k+ | | | Output is not escaped |
| #3506 | Easy Photography Portfolio | 83 | 38 | 33 | 2k+ | | | Missing direct file access protection |
| #3507 | DarkMySite – Advanced Dark Mode Plugin for WordPress | 46 | 22 | 100 | 1k+ | | | Request data is not unslashed |
| #3508 | WPC Variation Swatches for WooCommerce | 89 | | 29 | 7k+ | | | Non-prefixed global variable |
| #3509 | WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups | 38 | 299 | 58 | 3k+ | | | Non Singular String Literal Domain |
| #3510 | Free Assets Library – Openverse/Pixabay 600+ Million Images | 68 | 44 | 36 | 4k+ | | | Text Domain Mismatch |
| #3511 | Midtrans-WooCommerce | 30 | 112 | 132 | 5k+ | | | Non-prefixed global variable |
| #3512 | BugSnag Error Monitoring plugin | 39 | 52 | 96 | 2k+ | | | wp function not compatible with requires wp |
| #3513 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | | | Non-prefixed global variable |
| #3514 | Subscriber by BestWebSoft | 26 | 550 | 376 | 900 | | | Text Domain Mismatch |
| #3515 | Lead Forensics | 93 | 1 | 5 | 5k+ | | | Non-prefixed hook name |
| #3516 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | | Text Domain Mismatch |
| #3517 | M Chart | 25 | 558 | 1,465 | 3k+ | | | Non-prefixed global variable |
| #3518 | MotoPress Hotel Booking Styles & Templates | 35 | 37 | 19 | 10k+ | | | block api version too low |
| #3519 | WebwinkelKeur: Webshop keurmerk & reviews for WordPress | 32 | 200 | 47 | 4k+ | | | Short PHP open tag found |
| #3520 | WP Scraper | 98 | 2 | 4 | 2k+ | | | trademarked term |
| #3521 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | | Output is not escaped |
| #3522 | Markdown Editor (Formerly Dark Mode) | 97 | 2 | 19 | 1k+ | | | Non-prefixed function |
| #3523 | Fix Image Rotation | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #3524 | REST API Log | 51 | 44 | 95 | 5k+ | | | Non-prefixed hook name |
| #3525 | FormCraft – Form Builder | 42 | 186 | 156 | 2k+ | | | Text Domain Mismatch |
| #3526 | Local Time Clock | 37 | 105 | 11 | 1k+ | | | Output is not escaped |
| #3527 | Decent Comments | 38 | 93 | 28 | 2k+ | | | Output is not escaped |
| #3528 | JoomSport – for Sports: Team & League, Football, Hockey & more | 25 | 523 | 1,747 | 1k+ | | | Direct Query |
| #3529 | Super block slider – Image & content slider | 99 | 1 | 2 | 9k+ | | | Missing direct file access protection |
| #3530 | WebMan Amplifier | 98 | | 13 | 2k+ | | | Non-prefixed class |
| #3531 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | | | Non-prefixed global variable |
| #3532 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #3533 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #3534 | Daddy Plus | 90 | 35 | 552 | 8k+ | | | Non-prefixed global variable |
| #3535 | TC Custom JavaScript | 35 | 19 | 26 | 10k+ | | | Missing Version |
| #3536 | The School Management – Education & Learning ERP | 25 | 1 | 2,858 | 800 | | | Non-prefixed global variable |
| #3537 | Hosting Benchmark tool | 31 | 202 | 115 | 4k+ | | | rand rand |
| #3538 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #3539 | WP Instant Feeds | 35 | 19 | 12 | 6k+ | | | Output is not escaped |
| #3540 | Getsitecontrol — Email Marketing Plugin | Popup Maker, Automations & Newsletters | 72 | 17 | 11 | 1k+ | | | wp function not compatible with requires wp |
| #3541 | PagBank / PagSeguro Connect para WooCommerce | 22 | 505 | 757 | 4k+ | | | Non-prefixed global variable |
| #3542 | Open Graph Protocol Framework | 75 | 17 | 12 | 3k+ | | | Missing direct file access protection |
| #3543 | Organization chart | 32 | 187 | 334 | 5k+ | | | SQL query is not prepared |
| #3544 | Product Open Pricing (Name Your Price) for WooCommerce | 50 | 105 | 37 | 6k+ | | | Text Domain Mismatch |
| #3545 | Button Generator – Easily Create Custom Buttons with Icons and Analytics | 96 | 8 | 68 | 5k+ | | | Non-prefixed global variable |
| #3546 | Modern Footnotes | 77 | 18 | 6 | 6k+ | | | Output is not escaped |
| #3547 | NS Featured Posts | 86 | 2 | 15 | 4k+ | | | Nonce verification recommended |
| #3548 | Gravity Forms Constant Contact | 46 | 36 | 27 | 3k+ | | | Non-prefixed class |
| #3549 | Boostify Header Footer Builder for Elementor | 54 | 419 | 55 | 7k+ | | | Text Domain Mismatch |
| #3550 | Crafty Social Buttons | 37 | 279 | 27 | 900 | | | Non Singular String Literal Domain |