| #2801 | Cue by AudioTheme.com | 35 | 28 | 150 | 6k+ | | | Non-prefixed hook name |
| #2802 | Custom Contact Forms | 40 | 13 | 106 | 6k+ | | | Missing nonce verification |
| #2803 | Custom Post Type Maker | 35 | 240 | 86 | 6k+ | | | Unsafe printing function |
| #2804 | Datafeedr API | 34 | 307 | 48 | 6k+ | | | Output is not escaped |
| #2805 | Departamentos y Ciudades de Colombia para Woocommerce | 58 | 49 | 42 | 6k+ | | | Text Domain Mismatch |
| #2806 | Disable Author Pages | 48 | 23 | 5 | 6k+ | | | Unsafe printing function |
| #2807 | Disable cart page for WooCommerce | 74 | 2 | 8 | 6k+ | | | Input is not sanitized |
| #2808 | Disable Generate Thumbnails | 98 | 1 | 14 | 6k+ | | | Non-prefixed global variable |
| #2809 | Disable Plugin Autoupdate Emails | 98 | 3 | 3 | 6k+ | | | trademarked term |
| #2810 | Document Embedder Addons for Elementor – Embed Documents in Elementor Websites | 89 | | 4 | 6k+ | | | Input is not validated |
| #2811 | GDPR tools: Cookie notice + privacy | 41 | 67 | 8 | 6k+ | | | Unsafe printing function |
| #2812 | Dynamic QR Code – generator | 22 | 238 | 208 | 6k+ | | | Missing direct file access protection |
| #2813 | Easy Custom Auto Excerpt | 30 | 84 | 166 | 6k+ | | | Non-prefixed global variable |
| #2814 | Map Block | 98 | 2 | 5 | 6k+ | | | Missing direct file access protection |
| #2815 | Product Bundle Builder for WooCommerce | 35 | 152 | 138 | 6k+ | | | Text Domain Mismatch |
| #2816 | EasyMega | 93 | 1 | 22 | 6k+ | | | Non-prefixed hook name |
| #2817 | eCommerce Companion | 100 | | 0 | 6k+ | | | No open findings |
| #2818 | Gutenberg Blocks Library & Toolkit – Editor Plus | 35 | 27 | 11 | 6k+ | | | Text Domain Mismatch |
| #2819 | Elements Plus! | 96 | 11 | 20 | 6k+ | | | Non-prefixed function |
| #2820 | Email Before Download | 36 | 89 | 29 | 6k+ | | | Unsafe printing function |
| #2821 | Embedder for Google Reviews | 27 | 531 | 1,333 | 6k+ | | | Non-prefixed global variable |
| #2822 | Enable CORS | 98 | 10 | 2 | 6k+ | | | Missing direct file access protection |
| #2823 | Error Log Viewer by BestWebSoft | 58 | 433 | 172 | 6k+ | | | Text Domain Mismatch |
| #2824 | EU/UK VAT Validation Manager for WooCommerce | 35 | 1 | 0 | 6k+ | | | Hidden files included |
| #2825 | Event Single Page Builder For The Events Calendar | 99 | 1 | 2 | 6k+ | | | Non-prefixed class |
| #2826 | EventON – Events Calendar | 23 | 2,585 | 1,021 | 6k+ | | | Text Domain Mismatch |
| #2827 | EXMAGE – WordPress Image Links | 73 | 14 | 34 | 6k+ | | | Missing Arg Domain |
| #2828 | Export User Data | 38 | 187 | 62 | 6k+ | | | Text Domain Mismatch |
| #2829 | Fatal Error Notify | 68 | 10 | 12 | 6k+ | | | Request data is not unslashed |
| #2830 | Heroic Favicon Generator | 41 | 104 | 7 | 6k+ | | | Output is not escaped |
| #2831 | Flexible PDF Invoices for WooCommerce & WordPress | 35 | 15 | 55 | 6k+ | | | Non-prefixed global variable |
| #2832 | FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | 66 | 26 | 30 | 6k+ | | | Missing direct file access protection |
| #2833 | GD bbPress Attachments | 35 | 2 | 10 | 6k+ | | | wp redirect wp redirect |
| #2834 | GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content | 25 | 88 | 863 | 6k+ | | | Non-prefixed global variable |
| #2835 | Request a Quote for WooCommerce – Get a Quote Button | 52 | 25 | 12 | 6k+ | | | Output is not escaped |
| #2836 | Givebutter Widget | 91 | 8 | 2 | 6k+ | | | wp function not compatible with requires wp |
| #2837 | GiveWP Donation Widgets for Elementor | 38 | 483 | 13 | 6k+ | | | Text Domain Mismatch |
| #2838 | Gutena Accordion – Beautiful FAQ Accordion Block | 97 | 6 | 3 | 6k+ | | | Missing Arg Domain |
| #2839 | Gutena Tabs | 98 | 6 | 2 | 6k+ | | | Missing Arg Domain |
| #2840 | HashThemes Demo Importer | 38 | 71 | 44 | 6k+ | | | Output is not escaped |
| #2841 | Hide Updates | 93 | 3 | 4 | 6k+ | | | Nonce verification recommended |
| #2842 | HivePress Geolocation | 81 | 2 | 25 | 6k+ | | | Nonce verification recommended |
| #2843 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | | | Text Domain Mismatch |
| #2844 | HTTP Auth | 97 | 9 | 3 | 6k+ | | | wp function not compatible with requires wp |
| #2845 | Page Speed Optimizer: HTTP/2 Push, Async JavaScript, and Defer CSS | 36 | 68 | 33 | 6k+ | | | Output is not escaped |
| #2846 | Hunk Companion | 23 | 2,547 | 687 | 6k+ | | | Text Domain Mismatch |
| #2847 | Ibtana – Ecommerce Product Addons | 23 | 1,547 | 1,718 | 6k+ | | | Non Singular String Literal Domain |
| #2848 | IMPress for IDX Broker | 22 | 1,085 | 636 | 6k+ | | | Text Domain Mismatch |
| #2849 | Illdy Companion | 38 | 187 | 23 | 6k+ | | | Output is not escaped |
| #2850 | Intercom | 0 | 60 | 71 | 6k+ | | | Non-prefixed function |