| #2001 | ColorMeShop WordPress Plugin | 36 | 392 | 37 | 600 | | | Exception output is not escaped |
| #2002 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 47 | 382 | 300k+ | | | Non-prefixed global variable |
| #2003 | Team Members Profile – Employee Directory & Staff Showcase | 34 | 339 | 90 | 600 | | | Output is not escaped |
| #2004 | Slider Path for Elementor | 33 | 329 | 100 | 700 | | | Text Domain Mismatch |
| #2005 | WP Plugin Info Card | 37 | 53 | 376 | 500 | | | Nonce verification recommended |
| #2006 | Yaad Sarig Payment Gateway For WC | 30 | 158 | 271 | 2k+ | | | Nonce verification recommended |
| #2007 | CM Header and Footer – Add custom scripts and styles to your header and footer with ease | 36 | 230 | 198 | 1k+ | | | Output is not escaped |
| #2008 | Event Post | 34 | 329 | 99 | 1k+ | | | Output is not escaped |
| #2009 | Offen | 33 | 313 | 115 | 500 | | | Output is not escaped |
| #2010 | All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier | 32 | 325 | 102 | 600 | | | Missing Arg Domain |
| #2011 | Five Star Business Profile and Schema | 33 | 289 | 138 | 7k+ | | | Output is not escaped |
| #2012 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #2013 | Ubigeo de Perú para Woocommerce y WordPress | 36 | 191 | 235 | 4k+ | | | Non-prefixed function |
| #2014 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 28 | 209 | 217 | 10k+ | | | Exception output is not escaped |
| #2015 | AMP | 43 | 63 | 362 | 400k+ | | | Non-prefixed hook name |
| #2016 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |
| #2017 | Insert Headers and Footers Code – HT Script | 36 | 391 | 34 | 7k+ | | | Text Domain Mismatch |
| #2018 | More Types | 33 | 227 | 198 | 800 | | | Non-prefixed global variable |
| #2019 | Sticky Header Effects for Elementor | 69 | 354 | 71 | 300k+ | | | Text Domain Mismatch |
| #2020 | CloudSecure WP Security | 29 | 74 | 350 | 100k+ | | | Request data is not unslashed |
| #2021 | Block User Account | 35 | 280 | 143 | 1k+ | | | Unsafe printing function |
| #2022 | JS Help Desk – AI-Powered Support & Ticketing System | 37 | 17 | 406 | 7k+ | | | Missing nonce verification |
| #2023 | Max Mega Menu | 37 | 249 | 174 | 300k+ | | | Output is not escaped |
| #2024 | PW WooCommerce Gift Cards | 34 | 238 | 185 | 20k+ | | | Output is not escaped |
| #2025 | ShopBuilder – WooCommerce Builder For Elementor | 86 | 9 | 414 | 10k+ | | | Non-prefixed global variable |
| #2026 | Ovation Elements | 36 | 23 | 399 | 10k+ | | | Non-prefixed global variable |
| #2027 | WC City Select | 94 | 406 | 16 | 2k+ | | | Missing Arg Domain |
| #2028 | Pay. Payment Methods for WooCommerce | 33 | 318 | 104 | 3k+ | | | Non Singular String Literal Domain |
| #2029 | Adapta RGPD | 37 | 349 | 72 | 40k+ | | | Text Domain Mismatch |
| #2030 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 39 | 73 | 348 | 1m+ | | | Non-prefixed global variable |
| #2031 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #2032 | Divi Torque Lite – Divi Modules for the Divi Builder & Theme | 27 | 146 | 274 | 50k+ | | | Non-prefixed global variable |
| #2033 | Thumbnail carousel slider | 34 | 277 | 143 | 2k+ | | | Output is not escaped |
| #2034 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 30 | 45 | 374 | 4m+ | | | Non-prefixed global variable |
| #2035 | WC MyParcel Belgium | 86 | 340 | 79 | 600 | | | Text Domain Mismatch |
| #2036 | Product Sort and Display for WooCommerce | 28 | 190 | 229 | 2k+ | | | Output is not escaped |
| #2037 | AJAX Login and Registration modal popup + inline form | 28 | 157 | 261 | 3k+ | | | Output is not escaped |
| #2038 | Tuskcode Map Pro for Bing Maps | 35 | 59 | 359 | 600 | | | Direct Query |
| #2039 | DJ-Accessibility – Accessibility Plugin | 33 | 370 | 48 | 3k+ | | | Text Domain Mismatch |
| #2040 | Easy HTTPS Redirection (SSL) | 29 | 266 | 152 | 100k+ | | | Unsafe printing function |
| #2041 | Sitemap by click5 | 25 | 286 | 132 | 6k+ | | | Unsafe printing function |
| #2042 | Easy Upload Files During Checkout | 33 | 218 | 199 | 500 | | | Unsafe printing function |
| #2043 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | | | SQL query is not prepared |
| #2044 | Slider Factory | 61 | 3 | 414 | 2k+ | | | Non-prefixed global variable |
| #2045 | DSGVO/GDPR Cookies, DSE, Impressum & Google Fonts Proxy | 37 | 391 | 25 | 700 | | | Text Domain Mismatch |
| #2046 | Multi Step Form | 34 | 277 | 139 | 9k+ | | | Output is not escaped |
| #2047 | Tag Manager – Header, Body And Footer | 38 | 97 | 319 | 20k+ | | | Non-prefixed global variable |
| #2048 | Delisho – Recipe Widgets and Blocks | 34 | 60 | 355 | 1k+ | | | Input is not sanitized |
| #2049 | mosparo Integration | 35 | 114 | 301 | 900 | | | Missing nonce verification |
| #2050 | Site Search 360 | 32 | 202 | 213 | 400 | | | Output is not escaped |