| #3301 | Total Sales Counts for WooCommerce | 40 | 121 | 62 | 700 | | | SQL query is not prepared |
| #3302 | Brevo for WooCommerce | 35 | 116 | 67 | 30k+ | | | Output is not escaped |
| #3303 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #3304 | CSS JS Manager, Async JavaScript, Defer Render Blocking CSS | 34 | 76 | 106 | 1k+ | | | Input is not validated |
| #3305 | Easy WP Cleaner | 38 | 58 | 124 | 2k+ | | | Non-prefixed global variable |
| #3306 | Image Carousel | 39 | 164 | 18 | 1k+ | | | Output is not escaped |
| #3307 | Booster Pack for Divi | 95 | 179 | 2 | 500 | | | Text Domain Mismatch |
| #3308 | Activity Plus Reloaded for BuddyPress | 33 | 88 | 93 | 1k+ | | | Output is not escaped |
| #3309 | BuddyPress Follow | 38 | 114 | 67 | 1k+ | | | Text Domain Mismatch |
| #3310 | Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | 62 | 81 | 100 | 40k+ | | | Missing direct file access protection |
| #3311 | Post slider elementor addons | 78 | 168 | 13 | 2k+ | | | Text Domain Mismatch |
| #3312 | Posts By Tag | 39 | 151 | 30 | 1k+ | | | Output is not escaped |
| #3313 | PowerPack for LearnDash | 97 | 173 | 8 | 1k+ | | | Text Domain Mismatch |
| #3314 | Specific Content For Mobile – Customize the mobile version without redirections | 40 | 26 | 155 | 4k+ | | | Nonce verification recommended |
| #3315 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | | | Exception output is not escaped |
| #3316 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #3317 | WP-Persian | 35 | 144 | 37 | 7k+ | | | Unsafe printing function |
| #3318 | Download Plugin | 31 | 78 | 102 | 60k+ | | | Output is not escaped |
| #3319 | QODE Wishlist for WooCommerce | 89 | 2 | 178 | 10k+ | | | Non-prefixed global variable |
| #3320 | Teamleader CRM Forms | 35 | 150 | 30 | 500 | | | Non Singular String Literal Domain |
| #3321 | User Photo | 35 | 112 | 68 | 3k+ | | | Output is not escaped |
| #3322 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | | | Non-prefixed global variable |
| #3323 | WPGatsby | 31 | 125 | 55 | 3k+ | | | Text Domain Mismatch |
| #3324 | Advanced Export for WP & WPMU | 36 | 124 | 55 | 700 | | | Output is not escaped |
| #3325 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | | Non-prefixed function |
| #3326 | Category Posts Widget | 38 | 153 | 26 | 40k+ | | | Output is not escaped |
| #3327 | Saitama Addon Pack | 39 | 152 | 27 | 1k+ | | | Output is not escaped |
| #3328 | ElementCamp | 94 | 1 | 178 | 1k+ | | | Post Not In exclude |
| #3329 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #3330 | HW Image Widget | 39 | 138 | 41 | 1k+ | | | Output is not escaped |
| #3331 | Iframely – WP media embeds, cards and blocks | 35 | 136 | 43 | 2k+ | | | Unsafe printing function |
| #3332 | Jellyfish Counter Widget | 41 | 174 | 5 | 1k+ | | | Output is not escaped |
| #3333 | Simple Posts Ticker – Easy, Lightweight & Flexible | 39 | 151 | 28 | 2k+ | | | Output is not escaped |
| #3334 | VRTs – Visual Regression Tests | 58 | 61 | 118 | 900 | | | Database parameter is not escaped |
| #3335 | WP-PageNavi | 35 | 84 | 95 | 500k+ | | | Non Singular String Literal Domain |
| #3336 | bbPress Login Register Links On Forum Topic Pages | 38 | 142 | 36 | 600 | | | Text Domain Mismatch |
| #3337 | Cue by AudioTheme.com | 35 | 28 | 150 | 6k+ | | | Non-prefixed hook name |
| #3338 | List category posts | 37 | 161 | 17 | 80k+ | | | Output is not escaped |
| #3339 | Mailchimp List Subscribe Form | 86 | 22 | 156 | 60k+ | | | Non-prefixed global variable |
| #3340 | MantraBrain Starter Sites | MantraBrain Theme Demo Importer | 34 | 117 | 61 | 1k+ | | | Output is not escaped |
| #3341 | Autopay dla WooCommerce | 32 | 95 | 83 | 900 | | | Output is not escaped |
| #3342 | PixTypes | 82 | | 178 | 9k+ | | | Non-prefixed global variable |
| #3343 | Shipping by Rules for WooCommerce | 39 | 130 | 48 | 500 | | | Output is not escaped |
| #3344 | Plugin Name: Traffic Counter Widget Plugin | 36 | 71 | 107 | 600 | | | Output is not escaped |
| #3345 | Vertical News Scroller | 38 | 118 | 60 | 5k+ | | | Output is not escaped |
| #3346 | Innovs WPBakery Visual Composer WHMCS Elements | 37 | 154 | 24 | 2k+ | | | Text Domain Mismatch |
| #3347 | Checkout Files Upload for WooCommerce | 38 | 57 | 120 | 7k+ | | | Input is not sanitized |
| #3348 | Easy Profile Widget | 37 | 157 | 20 | 400 | | | Output is not escaped |
| #3349 | WP Sticky Sidebar – Floating Sidebar On Scroll for Any Theme | 36 | 93 | 84 | 10k+ | | | Non-prefixed global variable |
| #3350 | Send Emails with Mandrill | 50 | 36 | 141 | 6k+ | | | Non-prefixed global variable |