| #3701 | Stock Locations for WooCommerce | 32 | 549 | 360 | 1k+ | | | Output is not escaped |
| #3702 | Posts Like Dislike | 42 | 157 | 39 | 5k+ | | | Non Singular String Literal Domain |
| #3703 | Single Post Template | 62 | 14 | 8 | 4k+ | | | Text Domain Mismatch |
| #3704 | Bulk Delete Comments | 41 | 15 | 61 | 5k+ | | | Direct Query |
| #3705 | Vietnam Checkout for WooCommerce | 38 | 93 | 137 | 10k+ | | | Nonce verification recommended |
| #3706 | PilotPress | 32 | 150 | 285 | 900 | | | Output is not escaped |
| #3707 | aThemes Addons for Elementor | 90 | 13 | 96 | 8k+ | | | Non-prefixed global variable |
| #3708 | Beds24 Online Booking | 23 | 532 | 374 | 2k+ | | | wp function not compatible with requires wp |
| #3709 | Web-Stat | 89 | 2 | 6 | 5k+ | | | Input is not sanitized |
| #3710 | Revisionize | 41 | 54 | 24 | 4k+ | | | Output is not escaped |
| #3711 | Social Media Icons Widget | 72 | 181 | 10 | 1k+ | | | badly named files |
| #3712 | Oasis Workflow | 21 | 775 | 575 | 700 | | | Text Domain Mismatch |
| #3713 | Lucky Wheel for WooCommerce – Spin a Sale | 39 | 12 | 153 | 1k+ | | | Request data is not unslashed |
| #3714 | SportsPress for Football (Soccer) | 58 | 107 | 34 | 6k+ | | | Text Domain Mismatch |
| #3715 | Browser Screenshots | 86 | 15 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #3716 | Juiz Last Tweet Widget | 32 | 136 | 53 | 500 | | | Output is not escaped |
| #3717 | FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | 66 | 26 | 30 | 6k+ | | | Missing direct file access protection |
| #3718 | toyyibPay for WooCommerce | 99 | 1 | 0 | 6k+ | | | outdated tested upto header |
| #3719 | AAA Option Optimizer | 91 | 1 | 7 | 9k+ | | | Database parameter is not escaped |
| #3720 | Genesis Footer Builder | 41 | 124 | 3 | 1k+ | | | Output is not escaped |
| #3721 | Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | 22 | 669 | 769 | 1k+ | | | Output is not escaped |
| #3722 | PDF invoice for WP ERP | 58 | 96 | 134 | 2k+ | | | Non-prefixed global variable |
| #3723 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | | | Exception output is not escaped |
| #3724 | Clean Archives Reloaded | 55 | 25 | 6 | 600 | | | Unsafe printing function |
| #3725 | Fathom Analytics for WP | 63 | 25 | 15 | 10k+ | | | Output is not escaped |
| #3726 | PDF Builder for WPForms | 22 | 321 | 266 | 900 | | | SQL query is not prepared |
| #3727 | WP YouTube Player | 61 | 14 | 17 | 1k+ | | | Output is not escaped |
| #3728 | Algori PDF Viewer | 98 | 2 | 5 | 7k+ | | | Missing Version |
| #3729 | Another Mailchimp Widget | 71 | 28 | 17 | 4k+ | | | Missing Translators Comment |
| #3730 | Simple Iframe | 97 | 5 | 0 | 6k+ | | | Missing direct file access protection |
| #3731 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #3732 | Advanced CSS Editor | 76 | 25 | 6 | 5k+ | | | Output is not escaped |
| #3733 | Polylang Theme Strings | 42 | 119 | 30 | 6k+ | | | Output is not escaped |
| #3734 | The Courier Guy Shipping for WooCommerce | 35 | 57 | 107 | 3k+ | | | Missing nonce verification |
| #3735 | Zoho Campaigns | 38 | 3 | 129 | 3k+ | | | Non-prefixed global variable |
| #3736 | Marvy – Background Animations for Elementor | 55 | 63 | 34 | 4k+ | | | Text Domain Mismatch |
| #3737 | Gravity Forms Email Blacklist | 98 | 2 | 4 | 10k+ | | | trademarked term |
| #3738 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | | | Non-prefixed global variable |
| #3739 | Simply Show IDs | 91 | 5 | 1 | 3k+ | | | Missing direct file access protection |
| #3740 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #3741 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 24 | 529 | 357 | 1k+ | | | Text Domain Mismatch |
| #3742 | Click to top | 72 | 22 | 8 | 2k+ | | | Output is not escaped |
| #3743 | Contact Form 7 – Phone mask field | 60 | 21 | 7 | 20k+ | | | Unsafe printing function |
| #3744 | Flat Rate per State/Country/Region for WooCommerce | 60 | 27 | 4 | 1k+ | | | Output is not escaped |
| #3745 | ShopMagic Abandoned Cart Recovery for WooCommerce | 35 | 16 | 23 | 2k+ | | | Non-prefixed global variable |
| #3746 | Quiz Builder for WooCommerce – Product Recommendations | 99 | | 21 | 2k+ | | | Non-prefixed constant |
| #3747 | Custom Payment Gateways for WooCommerce | 98 | 2 | 3 | 9k+ | | | wp function not compatible with requires wp |
| #3748 | Maintenance Page | 37 | 62 | 33 | 3k+ | | | Output is not escaped |
| #3749 | Title Toggle for Storefront Theme | 68 | 16 | 9 | 3k+ | | | Output is not escaped |
| #3750 | RPB Chessboard | 40 | 86 | 98 | 1k+ | | | Missing direct file access protection |