| #2851 | g-FFL Cockpit | 35 | 18 | 224 | 500 | | | Direct Query |
| #2852 | Greek Multi Tool – Greeklish Slugs, Permalinks & Transliteration | 38 | 160 | 82 | 1k+ | | | Unsafe printing function |
| #2853 | Maps for WP | 39 | 169 | 73 | 400 | | | Output is not escaped |
| #2854 | Payflex Payment Gateway | 33 | 181 | 61 | 1k+ | | | Text Domain Mismatch |
| #2855 | Revolut Gateway for WooCommerce | 32 | 85 | 157 | 7k+ | | | Input is not sanitized |
| #2856 | Scripts n Styles | 39 | 150 | 92 | 30k+ | | | Output is not escaped |
| #2857 | Search Everything | 36 | 165 | 77 | 10k+ | | | Text Domain Mismatch |
| #2858 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | | | Text Domain Mismatch |
| #2859 | Kiyoh customer review | 35 | 173 | 68 | 500 | | | Output is not escaped |
| #2860 | Digital Signature Add-on for WooCommerce | 34 | 165 | 76 | 1k+ | | | Text Domain Mismatch |
| #2861 | Payment Button for PayPal | 36 | 155 | 86 | 4k+ | | | Unsafe printing function |
| #2862 | Cost Calculator for Elementor | 80 | 223 | 17 | 500 | | | wp function not compatible with requires wp |
| #2863 | Modular DS: Monitor, update, and backup multiple websites | 21 | 159 | 81 | 40k+ | | | Exception output is not escaped |
| #2864 | Post Grid | 45 | 32 | 208 | 30k+ | | | Non-prefixed global variable |
| #2865 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #2866 | Manual Image Crop | 40 | 178 | 61 | 8k+ | | | Output is not escaped |
| #2867 | PitchPrint | 30 | 76 | 163 | 400 | | | Input is not sanitized |
| #2868 | Advanced Datepicker – Restricts Date for Contact Form 7 | 72 | 228 | 11 | 400 | | | wp function not compatible with requires wp |
| #2869 | WPC Product Options for WooCommerce | 38 | 57 | 182 | 4k+ | | | Non-prefixed global variable |
| #2870 | Admin Custom Login | 43 | | 238 | 20k+ | | | Request data is not unslashed |
| #2871 | LWS Tools | 31 | 104 | 134 | 10k+ | | | Request data is not unslashed |
| #2872 | MC4WP: Mailchimp for WordPress | 57 | | 238 | 1m+ | | | Non-prefixed global variable |
| #2873 | Pods – Custom Content Types and Fields | 41 | 5 | 233 | 100k+ | | | Direct Query |
| #2874 | Publish to Schedule | 37 | 195 | 43 | 3k+ | | | Text Domain Mismatch |
| #2875 | Quantcast Choice | 39 | 227 | 11 | 3k+ | | | Text Domain Mismatch |
| #2876 | Social Web Suite – Social Media Auto Post, Social Media Auto Publish | 27 | 74 | 164 | 500 | | | Non-prefixed global variable |
| #2877 | Product Addons for Woocommerce – Product Options with Custom Fields | 33 | 124 | 114 | 30k+ | | | Output is not escaped |
| #2878 | Arconix Shortcodes | 34 | 129 | 108 | 4k+ | | | Output is not escaped |
| #2879 | Caddy – WooCommerce Side Cart & Free Shipping Bar | 67 | 38 | 199 | 3k+ | | | Non-prefixed global variable |
| #2880 | Calculator Builder – Create an Online Calculator | 39 | 16 | 221 | 1k+ | | | Non-prefixed global variable |
| #2881 | Code Snippets | 36 | 34 | 203 | 1m+ | | | Nonce verification recommended |
| #2882 | Simple Custom CSS and JS | 37 | 168 | 69 | 600k+ | | | Output is not escaped |
| #2883 | WebDefender Security – Protection & AntiSpam | 70 | 176 | 61 | 1k+ | | | wp function not compatible with requires wp |
| #2884 | Maven Algolia | 28 | 148 | 89 | 6k+ | | | Non Singular String Literal Domain |
| #2885 | Popular Posts | 35 | 166 | 71 | 900 | | | Unsafe printing function |
| #2886 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 37 | 165 | 72 | 5k+ | | | Text Domain Mismatch |
| #2887 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 500 | | | SQL query is not prepared |
| #2888 | ClickRank – Ai SEO Automation | 37 | 10 | 226 | 1k+ | | | Direct Query |
| #2889 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | | Non-prefixed global variable |
| #2890 | Taboola | 30 | 89 | 147 | 1k+ | | | Output is not escaped |
| #2891 | Useful Blocks | 34 | 214 | 22 | 20k+ | | | Output is not escaped |
| #2892 | White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard | 38 | 205 | 31 | 10k+ | | | Output is not escaped |
| #2893 | NP Quote Request for WooCommerce | 40 | 91 | 145 | 8k+ | | | Non-prefixed global variable |
| #2894 | Gift Wrapper for WooCommerce | 80 | 111 | 125 | 2k+ | | | Text Domain Mismatch |
| #2895 | Despacho vía Starken Pro para WooCommerce | 44 | 175 | 60 | 400 | | | Text Domain Mismatch |
| #2896 | MAS Elementor | 89 | 19 | 216 | 1k+ | | | Non-prefixed hook name |
| #2897 | YOURLS Link Creator | 37 | 196 | 39 | 500 | | | Text Domain Mismatch |
| #2898 | Bard Extra | 36 | 158 | 76 | 700 | | | Text Domain Mismatch |
| #2899 | České služby pro WordPress | 31 | 95 | 139 | 1k+ | | | Output is not escaped |
| #2900 | Document Library Lite | 34 | 149 | 85 | 4k+ | | | Text Domain Mismatch |