| #3101 | Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types | 39 | 89 | 117 | 20k+ | | | Unsafe printing function |
| #3102 | ACF: TablePress | 37 | 160 | 45 | 1k+ | | | Text Domain Mismatch |
| #3103 | Bosa Elementor Addons and Templates for WooCommerce | 32 | 40 | 165 | 20k+ | | | slow db query tax query |
| #3104 | Mollie Payments for WooCommerce | 32 | 71 | 134 | 100k+ | | | Dynamic hook name |
| #3105 | Rabo Smart Pay for WooCommerce | 36 | 150 | 55 | 600 | | | Text Domain Mismatch |
| #3106 | Broken Link Notifier | 40 | 11 | 193 | 1k+ | | | Non-prefixed global variable |
| #3107 | Featured Video Plus | 34 | 99 | 105 | 10k+ | | | Non-prefixed global variable |
| #3108 | All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login | 83 | 182 | 22 | 600 | | | wp function not compatible with requires wp |
| #3109 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #3110 | Really Simple Gallery Widget | 39 | 114 | 90 | 700 | | | Non-prefixed global variable |
| #3111 | Rating Widget: Post Rating, 5 Star Rating, Reviews, Thumbs Up & Down, Reaction | 63 | 177 | 27 | 400 | | | Missing direct file access protection |
| #3112 | WP Export Categories & Taxonomies | 37 | 169 | 35 | 400 | | | Output is not escaped |
| #3113 | Simple Accessibility Button | 41 | 33 | 171 | 900 | | | Non-prefixed global variable |
| #3114 | WPAdmin AWS CDN | 66 | 161 | 42 | 400 | | | Text Domain Mismatch |
| #3115 | 404 Image Redirection (Replace Broken Images) | 47 | 118 | 85 | 600 | | | Text Domain Mismatch |
| #3116 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #3117 | Custom Simple Rss | 40 | 73 | 130 | 2k+ | | | Nonce verification recommended |
| #3118 | Podigee WordPress Quick Publish – now with Gutenberg support! | 34 | 108 | 95 | 700 | | | Text Domain Mismatch |
| #3119 | Search Live | 40 | 132 | 71 | 600 | | | Output is not escaped |
| #3120 | Search with Typesense | 40 | 81 | 122 | 700 | | | Non-prefixed global variable |
| #3121 | Accounting for WooCommerce | 39 | 87 | 115 | 500 | | | Unsafe printing function |
| #3122 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #3123 | Custom Post Type Attachment | 34 | 153 | 49 | 800 | | | wp function not compatible with requires wp |
| #3124 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | | | Non-prefixed global variable |
| #3125 | One Click Order Re-Order | 38 | 139 | 63 | 1k+ | | | Non Singular String Literal Domain |
| #3126 | Direct Checkout – Quick View – Buy Now For WooCommerce | 36 | 90 | 112 | 2k+ | | | Missing nonce verification |
| #3127 | StoreAgent – WooCommerce AI Chatbot & AI Content Tools | 76 | | 202 | 500 | | | Non-prefixed global variable |
| #3128 | Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder | 36 | 162 | 40 | 200k+ | | | Output is not escaped |
| #3129 | Pledged Plugins PCI Gateway for NMI and WooCommerce | 41 | 160 | 42 | 2k+ | | | Text Domain Mismatch |
| #3130 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | | Missing Translators Comment |
| #3131 | REST API Log | 34 | 78 | 124 | 5k+ | | | Non-prefixed hook name |
| #3132 | WP-Sweep | 74 | 1 | 201 | 100k+ | | | Direct Query |
| #3133 | Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) | 41 | 175 | 26 | 100k+ | | | Unsafe printing function |
| #3134 | Checkout for PayPal | 37 | 134 | 67 | 600 | | | Unsafe printing function |
| #3135 | Push Notifications for WP – Self Hosted Web Push Notifications | 92 | 165 | 36 | 6k+ | | | wp function not compatible with requires wp |
| #3136 | Ultimate 410 Gone Status Code | 34 | 136 | 65 | 7k+ | | | Output is not escaped |
| #3137 | Age Gate | 69 | 61 | 139 | 40k+ | | | Missing direct file access protection |
| #3138 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #3139 | Media Sync | 39 | 193 | 7 | 50k+ | | | Short PHP open tag found |
| #3140 | PE Easy Slider | 42 | 190 | 10 | 800 | | | Output is not escaped |
| #3141 | Show All Comments | 39 | 108 | 92 | 400 | | | Nonce verification recommended |
| #3142 | Sync Post With Other Site | 39 | 179 | 21 | 3k+ | | | Non Singular String Literal Domain |
| #3143 | VK Post Author Display | 36 | 87 | 113 | 10k+ | | | Non-prefixed function |
| #3144 | Payment Gateway for Redsys & WooCommerce Lite | 32 | 125 | 75 | 20k+ | | | Text Domain Mismatch |
| #3145 | Xendit Payment | 37 | 3 | 197 | 3k+ | | | Missing nonce verification |
| #3146 | Admin Tools | 38 | 189 | 10 | 3k+ | | | Unsafe printing function |
| #3147 | SuperCPT | 37 | 172 | 27 | 600 | | | Output is not escaped |
| #3148 | Product Slider, Product Grid, Product Masonry | 49 | 55 | 144 | 9k+ | | | wp function not compatible with requires wp |
| #3149 | 2C2P Redirect API for WooCommerce | 36 | 136 | 62 | 900 | | | wp function not compatible with requires wp |
| #3150 | PiWeb Advanced Flat rate / Conditional shipping for WooCommerce | 40 | 6 | 192 | 2k+ | | | Nonce verification recommended |