| #3801 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #3802 | Definitely allow mobile zooming | 100 | 1 | 0 | 7k+ | | | Missing direct file access protection |
| #3803 | Genesis Dambuster | 39 | 94 | 67 | 3k+ | | | Output is not escaped |
| #3804 | JSM Show User Metadata | 40 | 14 | 64 | 3k+ | | | Nonce verification recommended |
| #3805 | Product Size Chart For WooCommerce | 66 | 9 | 22 | 6k+ | | | Non-prefixed hook name |
| #3806 | Download Manager Addons for Elementor | 70 | 272 | 13 | 6k+ | | | Non Singular String Literal Domain |
| #3807 | Satispay for WooCommerce | 62 | 19 | 12 | 7k+ | | | Exception output is not escaped |
| #3808 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | | | Output is not escaped |
| #3809 | Core Web Vitals & PageSpeed Booster | 77 | 346 | 65 | 1k+ | | | Text Domain Mismatch |
| #3810 | Ultimate Member – Online Users | 58 | 25 | 4 | 3k+ | | | Output is not escaped |
| #3811 | WP QuickLaTeX | 42 | 41 | 60 | 4k+ | | | Non-prefixed global variable |
| #3812 | Vanilla PDF Embed | 85 | 8 | 3 | 3k+ | | | parse url parse url |
| #3813 | wp-Monalisa | 48 | 56 | 94 | 700 | | | Direct Query |
| #3814 | Goftino | 45 | 16 | 20 | 10k+ | | | Output is not escaped |
| #3815 | Album Photostream Flickr Gallery | 77 | 30 | 31 | 1k+ | | | Text Domain Mismatch |
| #3816 | Ultra Companion – Companion plugin for WPoperation Themes | 34 | 73 | 116 | 1k+ | | | Missing direct file access protection |
| #3817 | Enable CORS | 98 | 10 | 2 | 6k+ | | | Missing direct file access protection |
| #3818 | Ticket Tailor — Event Ticketing & Registration | 86 | 3 | 3 | 4k+ | | | Non Enqueued Script |
| #3819 | Smartideo | 76 | 8 | 3 | 1k+ | | | Output is not escaped |
| #3820 | Checkfront Online Booking System | 70 | 32 | 16 | 2k+ | | | wp function not compatible with requires wp |
| #3821 | Social Shop for WooCommerce | 38 | 51 | 24 | 800 | | | Output is not escaped |
| #3822 | Cart Notices for WooCommerce | 23 | 650 | 471 | 2k+ | | | Text Domain Mismatch |
| #3823 | Leyka | 21 | 257 | 3,446 | 2k+ | | | Request data is not unslashed |
| #3824 | Airwallex Online Payments Gateway | 95 | 2 | 2 | 4k+ | | | Nonce verification recommended |
| #3825 | Smart Archives Reloaded | 39 | 78 | 36 | 1k+ | | | Non Singular String Literal Domain |
| #3826 | Logo Slider and Showcase | 84 | 2 | 15 | 7k+ | | | Missing nonce verification |
| #3827 | WRC Pricing Tables – Responsive CSS3 Pricing Tables | 50 | 5 | 96 | 2k+ | | | Missing nonce verification |
| #3828 | Post Date Randomizer | 45 | 42 | 6 | 9k+ | | | Unsafe printing function |
| #3829 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | | | Text Domain Mismatch |
| #3830 | User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress | 30 | 484 | 280 | 3k+ | | | Text Domain Mismatch |
| #3831 | Max upload filesize | 83 | 3 | 8 | 9k+ | | | Input is not validated |
| #3832 | Open Graphite | 38 | 380 | 204 | 3k+ | | | Unsafe printing function |
| #3833 | Equal Height Columns | 61 | 24 | 5 | 10k+ | | | Output is not escaped |
| #3834 | Buy one Get one Free – BOGO discount rule maker for WooCommerce | 40 | 119 | 57 | 400 | | | Text Domain Mismatch |
| #3835 | SamedayCourier Shipping | 29 | 336 | 269 | 4k+ | | | Non Singular String Literal Domain |
| #3836 | EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder | 23 | 356 | 1,515 | 2k+ | | | Non-prefixed global variable |
| #3837 | Jotform – AI Chatbot | 85 | | 8 | 5k+ | | | Input is not validated |
| #3838 | FastDup – Fastest WordPress Migration & Duplicator | 31 | 83 | 66 | 5k+ | | | wp function not compatible with requires wp |
| #3839 | Donation Thermometer | 40 | 324 | 88 | 2k+ | | | Output is not escaped |
| #3840 | Speed Kit | 32 | 296 | 73 | 2k+ | | | Output is not escaped |
| #3841 | Acme Fix Images – Regenerate Thumbnails | 97 | 5 | 5 | 3k+ | | | Missing direct file access protection |
| #3842 | NextGEN Custom Fields | 36 | 215 | 131 | 1k+ | | | SQL query is not prepared |
| #3843 | Hide Categories and Products for Woocommerce | 75 | 1 | 20 | 10k+ | | | Input is not sanitized |
| #3844 | WP Fail2Ban Redux | 82 | 1 | 10 | 7k+ | | | trademarked term |
| #3845 | AI WP Writer – SEO content generator, chatGPT, Gemini | 33 | 581 | 531 | 3k+ | | | Text Domain Mismatch |
| #3846 | Social Sharing Block | 86 | 5 | 11 | 7k+ | | | Non-prefixed global variable |
| #3847 | Visual Term Description Editor | 82 | 11 | 5 | 10k+ | | | Missing Arg Domain |
| #3848 | Enhanced Admin Bar with Codex Search | 39 | 64 | 3 | 1k+ | | | Missing Arg Domain |
| #3849 | Quick View For WooCommerce | 41 | 44 | 44 | 1k+ | | | Output is not escaped |
| #3850 | Add to Calendar Button | 35 | 31 | 9 | 3k+ | | | Output is not escaped |