| #2901 | RealHomes Stripe Payments | 32 | 201 | 33 | 500 | | | Exception output is not escaped |
| #2902 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #2903 | Toolbox for Asgaros Forum | 36 | 150 | 84 | 1k+ | | | Output is not escaped |
| #2904 | Social Media Auto Poster – Schedule & Publish to Buffer | 58 | 23 | 211 | 7k+ | | | Dynamic hook name |
| #2905 | Floating Action Button | 39 | 164 | 69 | 1k+ | | | Unsafe printing function |
| #2906 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | | | Non Singular String Literal Domain |
| #2907 | Payment Gateway of Stripe for WooCommerce | 94 | | 233 | 8k+ | | | Non-prefixed hook name |
| #2908 | Custom Payment Gateways for WooCommerce | 35 | 202 | 31 | 3k+ | | | Non Singular String Literal Domain |
| #2909 | REVIEWS.io for WooCommerce | 58 | 71 | 161 | 1k+ | | | Non-prefixed global variable |
| #2910 | Split Test For Elementor | 33 | 98 | 134 | 3k+ | | | Non-prefixed global variable |
| #2911 | Tourfic Toolkit | 37 | 67 | 165 | 1k+ | | | Post Not In exclude |
| #2912 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #2913 | Hippoo Mobile App for WooCommerce | 34 | 27 | 204 | 1k+ | | | Direct Query |
| #2914 | Activity Log – Monitor & Record User Changes | 38 | 81 | 149 | 200k+ | | | Nonce verification recommended |
| #2915 | PDF invoice for WP ERP | 58 | 96 | 134 | 2k+ | | | Non-prefixed global variable |
| #2916 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #2917 | OPcache Manager | 35 | 155 | 75 | 1k+ | | | Output is not escaped |
| #2918 | Phone Orders for WooCommerce | 35 | 1 | 229 | 1k+ | | | Non-prefixed hook name |
| #2919 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 82 | 148 | 100k+ | | | Output is not escaped |
| #2920 | Vietnam Checkout for WooCommerce | 38 | 93 | 137 | 10k+ | | | Nonce verification recommended |
| #2921 | Advanced Image Gallery for Elementor – Grid, Carousel & Slideshow | 76 | 3 | 226 | 400 | | | Non-prefixed global variable |
| #2922 | Better Click To Share – Shareable Quote Boxes for X (Twitter) | 37 | 170 | 59 | 6k+ | | | Unsafe printing function |
| #2923 | Custom PHP Settings | 36 | 153 | 76 | 10k+ | | | Output is not escaped |
| #2924 | IssueM | 33 | 56 | 173 | 600 | | | Request data is not unslashed |
| #2925 | Multiple Shipping Addresses for WooCommerce (Address Book) | 40 | 21 | 208 | 2k+ | | | Non-prefixed global variable |
| #2926 | CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x | 39 | 7 | 222 | 20k+ | | | Non-prefixed hook name |
| #2927 | XT Visitor Counter | 37 | 177 | 52 | 7k+ | | | Output is not escaped |
| #2928 | Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder | 71 | 21 | 207 | 800 | | | Non-prefixed global variable |
| #2929 | Astrology | 95 | 7 | 221 | 600 | | | Non-prefixed global variable |
| #2930 | BuddyPress Xprofile Custom Field Types | 41 | 39 | 189 | 4k+ | | | Missing nonce verification |
| #2931 | Counter live visitors for WooCommerce | 35 | 189 | 39 | 6k+ | | | Short PHP open tag found |
| #2932 | Payment Gateway of PayPal for WooCommerce | 41 | 44 | 184 | 7k+ | | | Nonce verification recommended |
| #2933 | Evergreen Countdown Timer | 45 | 193 | 35 | 2k+ | | | wp function not compatible with requires wp |
| #2934 | JJ NextGen JQuery Slider | 39 | 221 | 7 | 800 | | | Output is not escaped |
| #2935 | Phone Button | 41 | 25 | 203 | 700 | | | Non-prefixed global variable |
| #2936 | Related Posts by Taxonomy | 35 | 131 | 97 | 10k+ | | | Output is not escaped |
| #2937 | Secure Passkeys | 43 | 145 | 83 | 1k+ | | | Exception output is not escaped |
| #2938 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | | Dynamic hook name |
| #2939 | WPS Limit Login | 39 | 152 | 76 | 100k+ | | | Output is not escaped |
| #2940 | Currency Switcher for WooCommerce | 35 | 166 | 61 | 800 | | | Text Domain Mismatch |
| #2941 | Manage Notification E-mails | 36 | 129 | 98 | 100k+ | | | Non-prefixed function |
| #2942 | Mega Elements – Addons for Elementor | 38 | 170 | 57 | 10k+ | | | Output is not escaped |
| #2943 | Responsive Mailform ( Plugin Version ) – easy, responsive, contact, mailform | 38 | 120 | 107 | 500 | | | Output is not escaped |
| #2944 | Robots & Sitemap | 37 | 199 | 28 | 500 | | | Text Domain Mismatch |
| #2945 | Invoice123 | 38 | 139 | 88 | 400 | | | Text Domain Mismatch |
| #2946 | Advanced Editor Tools | 41 | 143 | 84 | 1m+ | | | Unsafe printing function |
| #2947 | Action Scheduler | 38 | 92 | 134 | 20k+ | | | Exception output is not escaped |
| #2948 | Kargo Takip | 35 | 84 | 142 | 3k+ | | | Missing nonce verification |
| #2949 | turboSMTP | 40 | 114 | 112 | 400 | | | Unsafe printing function |
| #2950 | Min Max Step Quantity Limits Manager for WooCommerce | 35 | 67 | 158 | 3k+ | | | Non-prefixed global variable |