| #3401 | Mass Ping Tool for SEO – WordPress ping list to get indexed faster on Google, Yandex, … | 34 | 77 | 96 | 400 | | | Output is not escaped |
| #3402 | Smart Send Logistics | 37 | 92 | 81 | 400 | | | Output is not escaped |
| #3403 | Tumult Hype Animations | 32 | 56 | 117 | 1k+ | | | Output is not escaped |
| #3404 | JTL-Connector for WooCommerce | 64 | 7 | 166 | 1k+ | | | Direct Query |
| #3405 | Z-Credit Checkout – WooCommerce Payment Gateway | 41 | 151 | 22 | 900 | | | Text Domain Mismatch |
| #3406 | Dadevarzan Beaver Builder Modules | 63 | 167 | 5 | 600 | | | Text Domain Mismatch |
| #3407 | Sync QCloud COS | 36 | 63 | 109 | 600 | | | Non-prefixed function |
| #3408 | Virtuaria PagBank / PagSeguro for WooCommerce | 48 | 12 | 160 | 1k+ | | | Non-prefixed global variable |
| #3409 | WPC Frequently Bought Together for WooCommerce | 40 | 63 | 109 | 10k+ | | | Output is not escaped |
| #3410 | BMI Adult & Kid Calculator | 43 | 33 | 138 | 700 | | | Request data is not unslashed |
| #3411 | CiviCRM Profile Sync | 35 | 31 | 140 | 500 | | | Non-prefixed global variable |
| #3412 | Contextual Related Posts | 93 | 2 | 169 | 50k+ | | | Non-prefixed hook name |
| #3413 | LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor | 81 | 162 | 9 | 3k+ | | | Text Domain Mismatch |
| #3414 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #3415 | 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 | 53 | 79 | 92 | 1k+ | | | Missing direct file access protection |
| #3416 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #3417 | Advanced Permalinks | 35 | 94 | 76 | 400 | | | wp function not compatible with requires wp |
| #3418 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #3419 | CorvusPay WooCommerce Payment Gateway | 37 | 29 | 141 | 1k+ | | | Missing nonce verification |
| #3420 | HollerBox — Fast & Effective Popups & Lead-Generation | 34 | 78 | 92 | 2k+ | | | Output is not escaped |
| #3421 | Image Watermark WP | 39 | 88 | 82 | 600 | | | Output is not escaped |
| #3422 | Post Password Token | 35 | 132 | 38 | 600 | | | Text Domain Mismatch |
| #3423 | Push notification for Mobile and Web app | 31 | 87 | 83 | 400 | | | Non Singular String Literal Domain |
| #3424 | WP Open Street Map | 35 | 59 | 111 | 3k+ | | | Input is not validated |
| #3425 | Bogo | 39 | 30 | 139 | 10k+ | | | Request data is not unslashed |
| #3426 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #3427 | Colibri Page Builder | 82 | 138 | 31 | 90k+ | | | Missing direct file access protection |
| #3428 | Flexible Posts Widget | 41 | 136 | 33 | 7k+ | | | Output is not escaped |
| #3429 | GoPay for WooCommerce | 37 | 66 | 103 | 1k+ | | | Non-prefixed global variable |
| #3430 | Ultimate Lightbox | 39 | 110 | 59 | 1k+ | | | Unsafe printing function |
| #3431 | UniConsent Cookie Consent CMP – Consent Manager | 42 | 150 | 19 | 1k+ | | | Unsafe printing function |
| #3432 | Price Based on Country for WooCommerce | 52 | 43 | 126 | 20k+ | | | Non-prefixed hook name |
| #3433 | WP Better Permalinks | 36 | 110 | 59 | 1k+ | | | Output is not escaped |
| #3434 | Datafeedr WooCommerce Importer | 38 | 112 | 56 | 5k+ | | | Text Domain Mismatch |
| #3435 | Enhanced AJAX Add to Cart for WooCommerce | 46 | 90 | 78 | 600 | | | Missing Arg Domain |
| #3436 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | | | Output is not escaped |
| #3437 | Ozh' Admin Drop Down Menu | 36 | 125 | 43 | 3k+ | | | Output is not escaped |
| #3438 | Thrive Automator | 32 | 84 | 84 | 10k+ | | | SQL query is not prepared |
| #3439 | JWT Authentication for WP REST APIs | 93 | 140 | 28 | 20k+ | | | wp function not compatible with requires wp |
| #3440 | Custom Product Tabs for WooCommerce | 36 | 87 | 81 | 80k+ | | | Output is not escaped |
| #3441 | Advance Bank Payment Transfer Gateway | 41 | 105 | 62 | 1k+ | | | Text Domain Mismatch |
| #3442 | All-in-one Like Widget | 42 | 165 | 2 | 1k+ | | | Text Domain Mismatch |
| #3443 | Catalog for Woocommerce | 40 | 92 | 75 | 1k+ | | | Output is not escaped |
| #3444 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #3445 | CMB2 | 36 | 148 | 19 | 300k+ | | | Output is not escaped |
| #3446 | CSH Login | 36 | 126 | 41 | 500 | | | Output is not escaped |
| #3447 | Easy SwipeBox | 35 | 157 | 10 | 2k+ | | | Non Singular String Literal Domain |
| #3448 | WP eBay Product Feeds | 37 | 136 | 31 | 700 | | | Output is not escaped |
| #3449 | Garden Gnome Package | 34 | 116 | 51 | 4k+ | | | Text Domain Mismatch |
| #3450 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |