| #2351 | Smart Cookie Kit | 38 | 263 | 81 | 3k+ | | | Output is not escaped |
| #2352 | weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #2353 | WonderPush – Web Push Notifications – WooCommerce Abandoned Cart – GDPR | 30 | 152 | 192 | 600 | | | Missing direct file access protection |
| #2354 | Widgets for Google Reviews | 95 | | 344 | 900k+ | | | Non-prefixed global variable |
| #2355 | Conditional Logic Emails, Fields, Redirect for Elementor Forms | 75 | 312 | 31 | 2k+ | | | wp function not compatible with requires wp |
| #2356 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #2357 | Quran multilanguage Text & Audio | 35 | 177 | 166 | 500 | | | Output is not escaped |
| #2358 | QR code MeCard/vCard generator | 40 | 322 | 21 | 2k+ | | | Unsafe printing function |
| #2359 | FormCraft – Form Builder | 42 | 186 | 156 | 2k+ | | | Text Domain Mismatch |
| #2360 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 70k+ | | | Unsafe printing function |
| #2361 | Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels | 34 | 86 | 255 | 9k+ | | | Direct Query |
| #2362 | Premium Portfolio Features for Phlox theme | 33 | 204 | 137 | 40k+ | | | Output is not escaped |
| #2363 | افزونه پیامک ووکامرس Persian WooCommerce SMS | 31 | 72 | 269 | 40k+ | | | Nonce verification recommended |
| #2364 | Easy Social Icons | 35 | 182 | 158 | 20k+ | | | Output is not escaped |
| #2365 | RSS for Yandex Zen | 37 | 240 | 100 | 4k+ | | | Unsafe printing function |
| #2366 | Simple CPT | 41 | 280 | 60 | 4k+ | | | Unsafe printing function |
| #2367 | Themify Popup | 29 | 232 | 108 | 8k+ | | | Text Domain Mismatch |
| #2368 | Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager | 34 | 32 | 307 | 100k+ | | | Non-prefixed global variable |
| #2369 | Foyer – Digital Signage for WordPress | 38 | 148 | 191 | 1k+ | | | Non-prefixed global variable |
| #2370 | SAML IDP (Identity Provider) – Login with Website Users | 35 | 13 | 326 | 600 | | | Non-prefixed global variable |
| #2371 | Travel Agency Companion – Create Tour & Travel Website Using WP Travel Engine | 34 | 128 | 211 | 4k+ | | | Non-prefixed global variable |
| #2372 | Manager for IcoMoon | 32 | 270 | 68 | 400 | | | Short PHP open tag found |
| #2373 | Slider Pro | 37 | 78 | 260 | 2k+ | | | Non-prefixed global variable |
| #2374 | Random Posts and Pages Widget | 37 | 322 | 15 | 1k+ | | | Output is not escaped |
| #2375 | Orderable – Restaurant & Food Ordering System | 35 | 12 | 324 | 5k+ | | | Non-prefixed global variable |
| #2376 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | 48 | 63 | 273 | 100k+ | | | Non-prefixed global variable |
| #2377 | Cornerstone | 34 | 161 | 174 | 30k+ | | | Nonce verification recommended |
| #2378 | QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly | 35 | 225 | 110 | 8k+ | | | Non Singular String Literal Domain |
| #2379 | Widget Box Lite | 37 | 318 | 17 | 900 | | | Output is not escaped |
| #2380 | Additional Order Filters for WooCommerce | 39 | 79 | 255 | 2k+ | | | Nonce verification recommended |
| #2381 | HD Quiz | 39 | 252 | 82 | 7k+ | | | Output is not escaped |
| #2382 | Muslim Prayer Time-Salah/Iqamah | 32 | 155 | 179 | 400 | | | date date |
| #2383 | Product page shipping calculator for WooCommerce | 37 | 217 | 117 | 1k+ | | | Text Domain Mismatch |
| #2384 | WP Mail Logging | 34 | 76 | 258 | 300k+ | | | Nonce verification recommended |
| #2385 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | | | Direct Query |
| #2386 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #2387 | JetWidgets for Elementor and WooCommerce | 33 | 187 | 146 | 7k+ | | | Text Domain Mismatch |
| #2388 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget | 30 | 231 | 102 | 1k+ | | | Non Singular String Literal Domain |
| #2389 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #2390 | CodeColorer | 64 | 65 | 266 | 1k+ | | | Non-prefixed global variable |
| #2391 | Photo Gallery – Responsive Image Galleries by Supsystic | 24 | 240 | 91 | 20k+ | | | Text Domain Mismatch |
| #2392 | LocalWeb All In One | 36 | 34 | 297 | 5k+ | | | Non-prefixed global variable |
| #2393 | StoreBuild – Online Store Builder for WooCommerce | 30 | 120 | 211 | 600 | | | Non-prefixed global variable |
| #2394 | Carousel Horizontal Posts Content Slider | 36 | 271 | 59 | 2k+ | | | Text Domain Mismatch |
| #2395 | Dashboard Widgets Suite | 36 | 206 | 124 | 4k+ | | | Output is not escaped |
| #2396 | Edit Flow | 34 | 103 | 227 | 4k+ | | | Non-prefixed hook name |
| #2397 | Formzu WP | 30 | 167 | 163 | 3k+ | | | Text Domain Mismatch |
| #2398 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | | | Non-prefixed global variable |
| #2399 | WP Smart Import : Import any XML File to WordPress | 49 | 28 | 302 | 1k+ | | | Non-prefixed global variable |
| #2400 | Customer Email Verification for WooCommerce | 37 | 165 | 164 | 2k+ | | | Nonce verification recommended |