| #3151 | Advanced Product Search For WooCommerce | 38 | 160 | 38 | 4k+ | | | Text Domain Mismatch |
| #3152 | Clio Grow Form | 91 | 179 | 19 | 1k+ | | | Text Domain Mismatch |
| #3153 | Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | 35 | 30 | 168 | 1k+ | | | Non-prefixed global variable |
| #3154 | Custom Permalinks | 91 | 197 | 1 | 100k+ | | | wp function not compatible with requires wp |
| #3155 | One Click SSL | 40 | 136 | 62 | 10k+ | | | Unsafe printing function |
| #3156 | Product Delivery Date for WooCommerce – Lite | 35 | 171 | 27 | 1k+ | | | Text Domain Mismatch |
| #3157 | Standout CSS3 Buttons | 38 | 183 | 15 | 500 | | | Output is not escaped |
| #3158 | ThemeKit For WordPress | 39 | 149 | 49 | 700 | | | Output is not escaped |
| #3159 | Notiqoo – Order Notification & Customer Chat for WooCommerce | 52 | 11 | 187 | 1k+ | | | Non-prefixed global variable |
| #3160 | Audit Trail | 34 | 90 | 107 | 10k+ | | | Unsafe printing function |
| #3161 | One Page Express Companion | 35 | 132 | 65 | 10k+ | | | Output is not escaped |
| #3162 | OSM Map Widget for Elementor | 35 | 183 | 14 | 9k+ | | | Text Domain Mismatch |
| #3163 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #3164 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | | | Non-prefixed hook name |
| #3165 | Atomic Edge Security – Firewall, Malware Scan and Login Security | 40 | 12 | 184 | 600 | | | Non-prefixed global variable |
| #3166 | Automatic Internal Links for SEO by Pagup | 35 | 30 | 166 | 1k+ | | | error log error log |
| #3167 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 500 | | | Missing nonce verification |
| #3168 | Century ToolKit | 33 | 118 | 78 | 700 | | | Output is not escaped |
| #3169 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #3170 | Flexible Editor Panel for Elementor | 42 | 154 | 42 | 20k+ | | | Text Domain Mismatch |
| #3171 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #3172 | Image Widget | 35 | 165 | 31 | 100k+ | | | Output is not escaped |
| #3173 | Materialis Companion | 36 | 129 | 67 | 6k+ | | | Unsafe printing function |
| #3174 | Openpay Stores Plugin | 31 | 121 | 75 | 1k+ | | | Non-prefixed global variable |
| #3175 | Paytm Payment Gateway | 35 | 92 | 104 | 3k+ | | | Missing Arg Domain |
| #3176 | Posts Like Dislike | 42 | 157 | 39 | 5k+ | | | Non Singular String Literal Domain |
| #3177 | Better Find and Replace – AI-Powered Suggestions | 36 | 67 | 129 | 40k+ | | | Missing direct file access protection |
| #3178 | SB RSS feed plus | 37 | 172 | 24 | 1k+ | | | Output is not escaped |
| #3179 | SEO SIMPLE PACK | 90 | 99 | 97 | 100k+ | | | Non-prefixed global variable |
| #3180 | Theme Demo Import | 50 | 101 | 95 | 5k+ | | | Non-prefixed hook name |
| #3181 | WP Extended Search | 41 | 159 | 37 | 20k+ | | | Output is not escaped |
| #3182 | WP-PostViews | 35 | 132 | 64 | 100k+ | | | Unsafe printing function |
| #3183 | WPS Child Theme Generator | 39 | 111 | 85 | 6k+ | | | Unsafe printing function |
| #3184 | Blaze Demo Importer | 36 | 101 | 94 | 8k+ | | | Output is not escaped |
| #3185 | Maintenance Mode | 39 | 86 | 109 | 7k+ | | | Output is not escaped |
| #3186 | Simple Statistics for Feeds | 40 | 64 | 131 | 800 | | | Nonce verification recommended |
| #3187 | Easy Updates Manager | 48 | 13 | 182 | 300k+ | | | Non-prefixed global variable |
| #3188 | Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress | 41 | 27 | 168 | 2k+ | | | Request data is not unslashed |
| #3189 | Variation Swatches for WooCommerce | 37 | 92 | 103 | 10k+ | | | Output is not escaped |
| #3190 | WP-ViperGB | 35 | 127 | 68 | 400 | | | Output is not escaped |
| #3191 | WPO365 | MICROSOFT 365 GRAPH MAILER | 37 | 112 | 83 | 10k+ | | | Text Domain Mismatch |
| #3192 | WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 | 28 | 57 | 138 | 500 | | | Request data is not unslashed |
| #3193 | Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more | 35 | 102 | 92 | 400 | | | Non-prefixed global variable |
| #3194 | Social Photo Fetcher | 38 | 151 | 43 | 1k+ | | | Output is not escaped |
| #3195 | Prisna GWT – Google Website Translator | 39 | 117 | 77 | 8k+ | | | Text Domain Mismatch |
| #3196 | Lead Call Buttons | 35 | 113 | 81 | 5k+ | | | Output is not escaped |
| #3197 | OSM – OpenStreetMap | 37 | 130 | 64 | 10k+ | | | Output is not escaped |
| #3198 | pCloud WP Backup | 29 | 120 | 74 | 1k+ | | | Exception output is not escaped |
| #3199 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #3200 | OpenHook | 39 | 172 | 22 | 1k+ | | | Unsafe printing function |