| #2301 | Relevanssi – A Better Search | 32 | 86 | 266 | 100k+ | | | Missing direct file access protection |
| #2302 | Widgets for Amazon Reviews | 96 | | 352 | 2k+ | | | Non-prefixed global variable |
| #2303 | Widgets for Booking.com Reviews | 95 | | 352 | 8k+ | | | Non-prefixed global variable |
| #2304 | MailUp for WordPress – Email and Newsletter Subscription Form | 33 | 251 | 100 | 2k+ | | | Text Domain Mismatch |
| #2305 | WP Tripadvisor Review Widgets | 95 | | 351 | 20k+ | | | Non-prefixed global variable |
| #2306 | Scroll Magic Addon for Elementor | 77 | 344 | 7 | 400 | | | Text Domain Mismatch |
| #2307 | WP-Cron Status Checker | 35 | 240 | 111 | 5k+ | | | Text Domain Mismatch |
| #2308 | WP Subscription Forms – Subscription Form Plugin for WordPress | 34 | 131 | 220 | 400 | | | Non-prefixed global variable |
| #2309 | FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | 76 | 17 | 333 | 1k+ | | | Non-prefixed global variable |
| #2310 | InPost Gallery | 33 | 105 | 245 | 700 | | | Non-prefixed global variable |
| #2311 | OTP Login & Register Woocommerce | 34 | 148 | 202 | 1k+ | | | Missing nonce verification |
| #2312 | Qode Essential Addons | 31 | 55 | 295 | 10k+ | | | Non-prefixed global variable |
| #2313 | Raffle Play Woocommerce | 31 | 151 | 199 | 800 | | | Output is not escaped |
| #2314 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | | | Exception output is not escaped |
| #2315 | Year Make Model Search for WooCommerce | 35 | 188 | 162 | 1k+ | | | Output is not escaped |
| #2316 | Anything Popup | 37 | 164 | 185 | 2k+ | | | Non-prefixed global variable |
| #2317 | Deposits & Partial Payments for WooCommerce | 34 | 179 | 170 | 5k+ | | | Text Domain Mismatch |
| #2318 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | | Non-prefixed global variable |
| #2319 | Operation Demo Importer – Demo Importer For WPoperation Themes | 30 | 245 | 104 | 1k+ | | | Text Domain Mismatch |
| #2320 | Widgets for Airbnb Reviews | 96 | | 349 | 6k+ | | | Non-prefixed global variable |
| #2321 | Widgets for Yelp Reviews | 96 | | 349 | 2k+ | | | Non-prefixed global variable |
| #2322 | Widgets for Thumbtack Reviews | 96 | | 349 | 900 | | | Non-prefixed global variable |
| #2323 | Pelecard Gateway | 76 | 295 | 54 | 400 | | | Text Domain Mismatch |
| #2324 | Insert Headers And Footers | 55 | 74 | 275 | 300k+ | | | Non-prefixed function |
| #2325 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |
| #2326 | WordPress Importer | 25 | 238 | 110 | 2m+ | | | Output is not escaped |
| #2327 | Code Block Syntax Highlighter for Elementor | 78 | 344 | 3 | 600 | | | Non Singular String Literal Domain |
| #2328 | Melapress Login Security | 31 | 69 | 278 | 2k+ | | | Non-prefixed global variable |
| #2329 | SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | 36 | 4 | 342 | 2k+ | | | Nonce verification recommended |
| #2330 | Better Addons for Elementor | 87 | 125 | 221 | 4k+ | | | Non-prefixed global variable |
| #2331 | Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) | 31 | 113 | 233 | 2k+ | | | Non-prefixed namespace |
| #2332 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | | | Output is not escaped |
| #2333 | NextGEN Custom Fields | 36 | 215 | 131 | 1k+ | | | SQL query is not prepared |
| #2334 | Simple Webchat | 39 | 142 | 204 | 1k+ | | | Output is not escaped |
| #2335 | SEOPress for MainWP | 61 | 240 | 106 | 900 | | | Text Domain Mismatch |
| #2336 | Trinity Audio – Text to Speech AI audio player to convert content into audio | 23 | 119 | 227 | 2k+ | | | Non-prefixed global variable |
| #2337 | Widgets for Ebay Reviews | 96 | | 346 | 500 | | | Non-prefixed global variable |
| #2338 | PayPal Zettle POS for WooCommerce | 31 | 302 | 44 | 4k+ | | | Exception output is not escaped |
| #2339 | Advanced Twenty Seventeen | 34 | 247 | 98 | 3k+ | | | Text Domain Mismatch |
| #2340 | Branded Social Images – Open Graph Images with logo and extra text layer | 29 | 254 | 91 | 900 | | | Non Singular String Literal Domain |
| #2341 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #2342 | Import XML and RSS Feeds | 34 | 260 | 85 | 2k+ | | | Unsafe printing function |
| #2343 | Jock On Air Now (JOAN) | 38 | 121 | 224 | 500 | | | Output is not escaped |
| #2344 | Linguise – AI Automatic Multilingual Translation | 31 | 61 | 284 | 1k+ | | | Non-prefixed global variable |
| #2345 | PanoPress | 31 | 111 | 234 | 2k+ | | | Output is not escaped |
| #2346 | WP Associate Post R2 | 35 | 259 | 86 | 3k+ | | | Output is not escaped |
| #2347 | WP Sort Order | 36 | 134 | 211 | 6k+ | | | Direct Query |
| #2348 | Widgets for Reviews & Recommendations | 95 | | 344 | 8k+ | | | Non-prefixed global variable |
| #2349 | If Menu – Visibility control for Menus | 39 | 281 | 63 | 50k+ | | | Output is not escaped |
| #2350 | PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget | 34 | 46 | 298 | 9k+ | | | Missing nonce verification |