| #2201 | amCharts: Charts and Maps | 40 | 263 | 113 | 2k+ | | | Text Domain Mismatch |
| #2202 | Maintenance Redirect | 38 | 244 | 132 | 10k+ | | | Missing Arg Domain |
| #2203 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #2204 | Responsive Team Members Showcase, Team Grid, Team Slider, and Staff List – Smart Team (formerly WP Team) | 91 | 4 | 372 | 5k+ | | | Non-prefixed global variable |
| #2205 | Theme Blvd Layout Builder | 35 | 207 | 169 | 2k+ | | | Output is not escaped |
| #2206 | Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | 26 | 51 | 325 | 300k+ | | | Direct Query |
| #2207 | Apaczka.pl WooCommerce | 31 | 99 | 276 | 1k+ | | | Non-prefixed global variable |
| #2208 | Custom Scrollbar | 27 | 184 | 191 | 2k+ | | | Output is not escaped |
| #2209 | FG Drupal to WordPress | 26 | 275 | 100 | 700 | | | Unsafe printing function |
| #2210 | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 38 | 344 | 30 | 10k+ | | | Text Domain Mismatch |
| #2211 | PeproDev WooCommerce Receipt Uploader | 33 | 325 | 49 | 1k+ | | | Non Singular String Literal Domain |
| #2212 | Slider Ultimate | 36 | 294 | 80 | 500 | | | Output is not escaped |
| #2213 | remarketable | 30 | 281 | 93 | 600 | | | Output is not escaped |
| #2214 | Awesome Widgets for SiteOrigin Page Builder | 33 | 314 | 59 | 500 | | | Text Domain Mismatch |
| #2215 | Comments – GraphComment | AI-Moderated Comment System | 33 | 196 | 177 | 400 | | | Unsafe printing function |
| #2216 | Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize | 67 | 293 | 80 | 10k+ | | | Text Domain Mismatch |
| #2217 | Shipping Zones by Drawing for WooCommerce | 35 | 278 | 95 | 600 | | | Text Domain Mismatch |
| #2218 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | | Exception output is not escaped |
| #2219 | Simple Ajax Chat – Add a Fast, Secure Chat Box | 32 | 107 | 266 | 2k+ | | | Output is not escaped |
| #2220 | TinyMCE Custom Styles | 39 | 297 | 76 | 7k+ | | | Non Singular String Literal Domain |
| #2221 | Trackserver | 38 | 17 | 356 | 400 | | | Input is not sanitized |
| #2222 | Absolute Addons For Elementor | 35 | 86 | 286 | 400 | | | Non-prefixed global variable |
| #2223 | ActivityPub | 81 | 67 | 305 | 6k+ | | | Non-prefixed global variable |
| #2224 | Ultimate Addons for Elementor | 33 | 81 | 291 | 2m+ | | | Non-prefixed class |
| #2225 | ووکامرس فارسی | 28 | 157 | 215 | 100k+ | | | Output is not escaped |
| #2226 | Qi Addons For Elementor | 79 | 33 | 339 | 200k+ | | | Non-prefixed global variable |
| #2227 | Estimated Delivery for WooCommerce | 34 | 301 | 70 | 1k+ | | | Short PHP open tag found |
| #2228 | String locator | 35 | 52 | 319 | 100k+ | | | Non-prefixed global variable |
| #2229 | Styler for Gravity Forms | 41 | 369 | 2 | 2k+ | | | Text Domain Mismatch |
| #2230 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | | | Non-prefixed global variable |
| #2231 | Dynamic Pricing With Discount Rules for WooCommerce | 25 | 165 | 205 | 5k+ | | | Non-prefixed global variable |
| #2232 | Login Security Solution | 27 | 216 | 154 | 4k+ | | | Output is not escaped |
| #2233 | MAS Companies For WP Job Manager | 33 | 62 | 308 | 1k+ | | | Non-prefixed hook name |
| #2234 | Responsive Starter Templates – Elementor Templates & Starter Sites | 38 | 48 | 322 | 10k+ | | | Non-prefixed global variable |
| #2235 | Speed Kit | 32 | 296 | 73 | 2k+ | | | Output is not escaped |
| #2236 | Themify Store Locator | 31 | 244 | 125 | 500 | | | Text Domain Mismatch |
| #2237 | PayPal Currency Converter BASIC for WooCommerce | 36 | 348 | 20 | 400 | | | Output is not escaped |
| #2238 | PW WooCommerce Bulk Edit | 34 | 219 | 149 | 20k+ | | | Unsafe printing function |
| #2239 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | | | Output is not escaped |
| #2240 | Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) | 26 | 98 | 269 | 10k+ | | | error log error log |
| #2241 | Kargo Takip, Kargo SMS, İlçe Mahalle Sözleşme by Hezarfen | 30 | 70 | 297 | 2k+ | | | Non-prefixed global variable |
| #2242 | Theme One Click Demo Importer | 27 | 210 | 157 | 500 | | | Text Domain Mismatch |
| #2243 | Disclaimer Popup | 37 | 313 | 53 | 1k+ | | | Text Domain Mismatch |
| #2244 | ICIT Weather Widget | 35 | 358 | 8 | 400 | | | Output is not escaped |
| #2245 | JW Player for WordPress | 48 | 288 | 78 | 1k+ | | | Text Domain Mismatch |
| #2246 | PiWeb Live sales notification for WooCommerce | 37 | 289 | 77 | 30k+ | | | Text Domain Mismatch |
| #2247 | Real Media Library: Media Library Folder & File Manager | 47 | 1 | 365 | 100k+ | | | Direct Query |
| #2248 | Delivery Date Time & Pickup for WooCommerce | 37 | 148 | 216 | 400 | | | Output is not escaped |
| #2249 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #2250 | Insert Html Snippet | 39 | 159 | 205 | 20k+ | | | Output is not escaped |