| #2951 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | | Output is not escaped |
| #2952 | Tawk.To Manager | 39 | 204 | 21 | 600 | | | Output is not escaped |
| #2953 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #2954 | Connect WooCommerce to ActiveCampaign by EqualServing | 35 | 135 | 89 | 1k+ | | | Text Domain Mismatch |
| #2955 | Login for Google Apps | 27 | 139 | 85 | 10k+ | | | Exception output is not escaped |
| #2956 | Lana Downloads Manager | 38 | 146 | 78 | 3k+ | | | Unsafe printing function |
| #2957 | reSmush.it : The original free image compressor and optimizer plugin | 25 | 155 | 69 | 100k+ | | | Output is not escaped |
| #2958 | Stax Addons for Elementor | 40 | 143 | 81 | 500 | | | Output is not escaped |
| #2959 | Gallery by Visual Portfolio | 39 | 35 | 189 | 60k+ | | | Non-prefixed hook name |
| #2960 | Block Editor Bootstrap Blocks | 39 | 173 | 50 | 900 | | | Text Domain Mismatch |
| #2961 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | | | Missing Arg Domain |
| #2962 | Social Engine | 29 | 133 | 90 | 600 | | | Exception output is not escaped |
| #2963 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | | | Missing Translators Comment |
| #2964 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #2965 | WP Dummy Content Generator | 34 | 93 | 130 | 6k+ | | | Output is not escaped |
| #2966 | WP Mapbox GL JS Maps | 28 | 104 | 119 | 1k+ | | | Output is not escaped |
| #2967 | BP Group Documents | 36 | 27 | 195 | 600 | | | Non-prefixed global variable |
| #2968 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #2969 | imoje | 38 | 62 | 160 | 2k+ | | | Nonce verification recommended |
| #2970 | Requirements Checklist | 40 | 200 | 22 | 900 | | | Output is not escaped |
| #2971 | Tools for Twitter | 34 | 135 | 87 | 1k+ | | | Output is not escaped |
| #2972 | Abandoned Cart Recovery for WooCommerce | 41 | 20 | 202 | 4k+ | | | Request data is not unslashed |
| #2973 | Live Visitor Counter | 34 | 108 | 114 | 4k+ | | | Interpolated SQL is not prepared |
| #2974 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 4k+ | | | Non-prefixed global variable |
| #2975 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | | | Exception output is not escaped |
| #2976 | CSV Import and Exporter | 32 | 83 | 138 | 1k+ | | | Non-prefixed global variable |
| #2977 | Darkify – Dark Mode & Night Mode for Website & Admin (Dark Theme Included) | 38 | 38 | 183 | 600 | | | Non-prefixed global variable |
| #2978 | HelloAsso | 60 | 132 | 89 | 4k+ | | | Short PHP open tag found |
| #2979 | PDF Compressor & Watermark – iLovePDF | 35 | 216 | 5 | 600 | | | Text Domain Mismatch |
| #2980 | Microsoft Clarity | 36 | 53 | 168 | 200k+ | | | Nonce verification recommended |
| #2981 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 32 | 159 | 62 | 10k+ | | | Output is not escaped |
| #2982 | Post My CF7 Form | 52 | 25 | 196 | 2k+ | | | Non-prefixed global variable |
| #2983 | WP LinkedIn Auto Publish | 34 | 165 | 56 | 8k+ | | | Output is not escaped |
| #2984 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | | | Non-prefixed hook name |
| #2985 | NextGEN Gallery Optimizer | 34 | 128 | 92 | 1k+ | | | Output is not escaped |
| #2986 | WP All Export – Order Export for WooCommerce | 37 | 109 | 111 | 3k+ | | | Text Domain Mismatch |
| #2987 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | | | Text Domain Mismatch |
| #2988 | Quiz Cat – WordPress Quiz Plugin | 40 | 151 | 69 | 4k+ | | | Output is not escaped |
| #2989 | Rara One Click Demo Import | 36 | 122 | 98 | 20k+ | | | Missing Translators Comment |
| #2990 | ValidateCertify Free | 37 | 123 | 97 | 1k+ | | | Text Domain Mismatch |
| #2991 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 33 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #2992 | WP Super Edit | 36 | 35 | 185 | 2k+ | | | Nonce verification recommended |
| #2993 | Birds Custom Login | 39 | 196 | 23 | 4k+ | | | Non Singular String Literal Domain |
| #2994 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 35 | 31 | 188 | 1k+ | | | Non-prefixed global variable |
| #2995 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #2996 | Loan Comparison | 40 | 27 | 192 | 400 | | | Request data is not unslashed |
| #2997 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | | | Unsafe printing function |
| #2998 | Barion Payment Gateway for WooCommerce | 32 | 67 | 152 | 6k+ | | | Non-prefixed global variable |
| #2999 | WP 2-step verification | 32 | 154 | 65 | 1k+ | | | Output is not escaped |
| #3000 | Archive Control | 39 | 151 | 67 | 1k+ | | | Unsafe printing function |