| #3001 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #3002 | Bubble Menu – Floating Button Menu with Sticky Navigation | 40 | 2 | 216 | 1k+ | | | Nonce verification recommended |
| #3003 | FakerPress | 53 | 66 | 152 | 10k+ | | | Non-prefixed global variable |
| #3004 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | | Direct Query |
| #3005 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #3006 | PayU CommercePro Plugin | 37 | | 218 | 7k+ | | | error log error log |
| #3007 | POEditor | 37 | 78 | 140 | 500 | | | Output is not escaped |
| #3008 | TrackingMore Order Tracking for WooCommerce (Free plan available) | 33 | 94 | 124 | 800 | | | Text Domain Mismatch |
| #3009 | Zoho Marketing Automation | 37 | 24 | 194 | 1k+ | | | Non-prefixed global variable |
| #3010 | Category Featured Images Extended | 40 | 177 | 40 | 400 | | | Text Domain Mismatch |
| #3011 | 우커머스 포트원 플러그인 (국내 모든 PG를 한 번에) | 34 | 36 | 181 | 600 | | | Nonce verification recommended |
| #3012 | Menubar | 39 | 171 | 46 | 1k+ | | | Output is not escaped |
| #3013 | Advance Product Search- Voice & Ajax Search for WooCommerce | 35 | 125 | 92 | 9k+ | | | Text Domain Mismatch |
| #3014 | WP Discourse | 24 | 103 | 114 | 1k+ | | | Nonce verification recommended |
| #3015 | WP-ServerInfo | 38 | 162 | 55 | 10k+ | | | Output is not escaped |
| #3016 | WPLMS H5P | 36 | 111 | 106 | 1k+ | | | Text Domain Mismatch |
| #3017 | zipMoney(Zip Co) Payments Plugin for WooCommerce | 34 | 147 | 70 | 2k+ | | | Text Domain Mismatch |
| #3018 | DarkLooks – Dark Mode Switcher For WordPress | 35 | 195 | 21 | 900 | | | Text Domain Mismatch |
| #3019 | FreePay for WooCommerce | 36 | 114 | 102 | 400 | | | Output is not escaped |
| #3020 | Lightning Advanced Unit | 38 | 189 | 27 | 3k+ | | | Output is not escaped |
| #3021 | PixCodes | 94 | | 216 | 8k+ | | | Non-prefixed global variable |
| #3022 | Database Backup for WordPress | 35 | 128 | 88 | 70k+ | | | Output is not escaped |
| #3023 | Blimply | 37 | 172 | 43 | 800 | | | Text Domain Mismatch |
| #3024 | CC Child Pages | 38 | 63 | 152 | 9k+ | | | Non-prefixed global variable |
| #3025 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #3026 | Post Slider For WPBakery Page Builder | 38 | 201 | 14 | 1k+ | | | Output is not escaped |
| #3027 | Real Time Validation for Gravity Forms | 35 | 185 | 30 | 2k+ | | | Output is not escaped |
| #3028 | Virusdie | One-click website security | 39 | 149 | 66 | 2k+ | | | Output is not escaped |
| #3029 | Disable Payment Methods based on cart conditions for WooCommerce | 36 | 158 | 57 | 1k+ | | | Non Singular String Literal Domain |
| #3030 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |
| #3031 | Clean Testimonials | 34 | 127 | 87 | 400 | | | Output is not escaped |
| #3032 | DeveloPress Sticky Footer Bar | 36 | 165 | 49 | 400 | | | Output is not escaped |
| #3033 | LH Archived Post Status | 37 | 150 | 64 | 3k+ | | | Text Domain Mismatch |
| #3034 | My Post Order | 37 | 100 | 114 | 400 | | | Output is not escaped |
| #3035 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #3036 | WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | 38 | 33 | 181 | 2k+ | | | Non-prefixed global variable |
| #3037 | Payment Gateway for PayPal Pro & PayPal Checkout for WooCommerce | 35 | 67 | 147 | 1k+ | | | Request data is not unslashed |
| #3038 | WP 404 Auto Redirect to Similar Post | 38 | 166 | 48 | 30k+ | | | Text Domain Mismatch |
| #3039 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | | | Non Singular String Literal Domain |
| #3040 | Cookie Information – Cookie Banner with Consent Mode v2 | 35 | 185 | 28 | 2k+ | | | Output is not escaped |
| #3041 | Genesis Featured Page Advanced | 41 | 209 | 4 | 7k+ | | | Output is not escaped |
| #3042 | Payoneer Checkout | 33 | 168 | 45 | 5k+ | | | Exception output is not escaped |
| #3043 | Sezzle Woocommerce Payment | 37 | 108 | 105 | 1k+ | | | Text Domain Mismatch |
| #3044 | Timber | 24 | 85 | 128 | 20k+ | | | Non-prefixed hook name |
| #3045 | Products Coming Soon for WooCommerce | 38 | 151 | 62 | 700 | | | Output is not escaped |
| #3046 | Yotpo: Product & Photo Reviews for WooCommerce | 35 | 24 | 189 | 2k+ | | | Non-prefixed function |
| #3047 | Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter | 37 | 151 | 61 | 600 | | | Output is not escaped |
| #3048 | Fast Chat Button | 41 | 24 | 188 | 1k+ | | | Non-prefixed global variable |
| #3049 | Quotes Addon for GetPaid | 40 | 191 | 21 | 600 | | | Text Domain Mismatch |
| #3050 | Post List Featured Image | 35 | 112 | 100 | 900 | | | Output is not escaped |