| #3351 | Big File Uploads – Increase Maximum File Upload Size | 32 | 70 | 107 | 100k+ | | | Input is not sanitized |
| #3352 | Vertical marquee post title | 42 | 109 | 68 | 400 | | | Output is not escaped |
| #3353 | SuperFaktura WooCommerce | 36 | 60 | 117 | 2k+ | | | Nonce verification recommended |
| #3354 | Anant Sites — Elementor & Gutenberg Readymade Template Library Free & Pro Templates | 38 | 20 | 156 | 1k+ | | | Non-prefixed global variable |
| #3355 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #3356 | Wbcom Designs – Birthday Widget for BuddyPress | 84 | 163 | 13 | 400 | | | Text Domain Mismatch |
| #3357 | Buy one Get one Free – BOGO discount rule maker for WooCommerce | 40 | 119 | 57 | 400 | | | Text Domain Mismatch |
| #3358 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 600 | | | Missing Arg Domain |
| #3359 | Export Plugins and Templates | 30 | 143 | 33 | 1k+ | | | file system operations fread |
| #3360 | Posts Table with Search & Sort | 35 | 143 | 33 | 3k+ | | | Text Domain Mismatch |
| #3361 | Product Questions & Answers for WooCommerce | 41 | 81 | 95 | 400 | | | Output is not escaped |
| #3362 | Quick Restaurant Menu | 37 | 136 | 40 | 1k+ | | | Text Domain Mismatch |
| #3363 | Simple Like Page – Fast & Privacy-Friendly Page Embeds | 41 | 145 | 31 | 10k+ | | | Output is not escaped |
| #3364 | Plugin Name: Traffic Stats Widget Plugin | 38 | 69 | 107 | 600 | | | Output is not escaped |
| #3365 | Save and Share Cart for WooCommerce | 35 | 125 | 51 | 600 | | | Text Domain Mismatch |
| #3366 | AI Assistant for Elementor – Auto Content Writer, OpenAI, ChatGPT | 55 | 151 | 24 | 400 | | | Text Domain Mismatch |
| #3367 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #3368 | Lightweight Subscribe To Comments | 37 | 105 | 70 | 1k+ | | | Unsafe printing function |
| #3369 | Companion Sitemap Generator – Simple, Smart, and SEO-Ready | 33 | 118 | 57 | 7k+ | | | Missing Translators Comment |
| #3370 | DB Cache Reloaded Fix | 29 | 133 | 42 | 2k+ | | | Output is not escaped |
| #3371 | Firelight Lightbox | 52 | 78 | 97 | 200k+ | | | Non-prefixed global variable |
| #3372 | EasyMe Connect | 37 | 130 | 45 | 500 | | | Text Domain Mismatch |
| #3373 | Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element | 43 | 66 | 109 | 800 | | | Missing direct file access protection |
| #3374 | Highcompress Image Compressor | 41 | 106 | 69 | 600 | | | Text Domain Mismatch |
| #3375 | Motors VIN Decoder | 36 | 87 | 88 | 400 | | | Output is not escaped |
| #3376 | Nginx Cache Controller | 35 | 79 | 96 | 1k+ | | | Text Domain Mismatch |
| #3377 | Repeater Fields for Gravity Forms | 46 | 134 | 41 | 1k+ | | | wp function not compatible with requires wp |
| #3378 | Restrict Widgets | 38 | 135 | 40 | 4k+ | | | Non Singular String Literal Domain |
| #3379 | Showcase IDX Real Estate Search & Lead Capture | 32 | 123 | 52 | 2k+ | | | Output is not escaped |
| #3380 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #3381 | Unit Price for WooCommerce | 44 | 112 | 63 | 1k+ | | | Output is not escaped |
| #3382 | When Last Login | 36 | 52 | 123 | 50k+ | | | Non-prefixed global variable |
| #3383 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | | | Output is not escaped |
| #3384 | Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro | 35 | 35 | 139 | 20k+ | | | Non-prefixed class |
| #3385 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #3386 | CF7 to Webhook | 38 | 102 | 72 | 30k+ | | | Unsafe printing function |
| #3387 | Classified Ads | 40 | 136 | 38 | 1k+ | | | Text Domain Mismatch |
| #3388 | iCount Payment Gateway | 41 | 152 | 22 | 500 | | | Text Domain Mismatch |
| #3389 | Modal Window – create popup modal window | 40 | 4 | 170 | 10k+ | | | Non-prefixed global variable |
| #3390 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 35 | 132 | 42 | 300k+ | | | Missing direct file access protection |
| #3391 | PickPlugins Pricing Table | 39 | 3 | 171 | 900 | | | Missing nonce verification |
| #3392 | Super Simple Site Offline | 37 | 115 | 59 | 6k+ | | | Text Domain Mismatch |
| #3393 | Uber reCaptcha | 43 | 129 | 45 | 1k+ | | | Text Domain Mismatch |
| #3394 | WC Cancel Order | 35 | 52 | 122 | 5k+ | | | Non-prefixed hook name |
| #3395 | WP Video Lightbox | 38 | 107 | 67 | 30k+ | | | Unsafe printing function |
| #3396 | Database Snapshots – WPvivid | 36 | 66 | 108 | 1k+ | | | Direct Query |
| #3397 | Alt Magic: AI Image Alt Text Generator for WP & Image Rename | 39 | 61 | 112 | 1k+ | | | Direct Query |
| #3398 | Fetchify | 85 | 154 | 19 | 600 | | | Text Domain Mismatch |
| #3399 | EU Cookie Law Compliance | 38 | 151 | 22 | 2k+ | | | Non Singular String Literal Domain |
| #3400 | Mailmunch Forms for Mailchimp | 34 | 120 | 53 | 10k+ | | | Output is not escaped |