| #3451 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #3452 | Lenix scss compiler | 35 | 133 | 34 | 800 | | | Exception output is not escaped |
| #3453 | Note – A live edit text widget | 38 | 118 | 49 | 1k+ | | | Output is not escaped |
| #3454 | OptionTree | 93 | 165 | 2 | 50k+ | | | Text Domain Mismatch |
| #3455 | Designil PDPA Thailand | 39 | 131 | 36 | 3k+ | | | Output is not escaped |
| #3456 | List Petfinder Pets | 40 | 121 | 46 | 400 | | | Output is not escaped |
| #3457 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels | 93 | 150 | 17 | 50k+ | | | wp function not compatible with requires wp |
| #3458 | Ryviu – Review Importer & Product Reviews | 37 | 72 | 95 | 1k+ | | | Output is not escaped |
| #3459 | Simple Social Media Share Buttons – Social Sharing for Everyone | 56 | 145 | 22 | 20k+ | | | Text Domain Mismatch |
| #3460 | StaticPress | 36 | 88 | 79 | 500 | | | Output is not escaped |
| #3461 | Quantity Plus Minus Button for WooCommerce | 36 | 83 | 84 | 10k+ | | | Output is not escaped |
| #3462 | PagHiper Boleto e PIX para WooCommerce | 34 | 29 | 138 | 1k+ | | | Missing nonce verification |
| #3463 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | | | Output is not escaped |
| #3464 | 360 Javascript Viewer | 37 | 144 | 22 | 1k+ | | | Output is not escaped |
| #3465 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #3466 | Text To Speech TTS Accessibility | 93 | | 166 | 3k+ | | | Non-prefixed hook name |
| #3467 | bbPress WP Tweaks | 40 | 147 | 18 | 1k+ | | | Output is not escaped |
| #3468 | Better WordPress External Links | 39 | 130 | 35 | 400 | | | Non Singular String Literal Domain |
| #3469 | Custom Related Posts | 39 | 131 | 34 | 3k+ | | | Output is not escaped |
| #3470 | HTML5 Cumulus | 39 | 132 | 33 | 1k+ | | | Output is not escaped |
| #3471 | jQuery Pin It Button for Images | 38 | 129 | 36 | 10k+ | | | Output is not escaped |
| #3472 | Log Deprecated Notices | 38 | 92 | 73 | 900 | | | Text Domain Mismatch |
| #3473 | Login as User | 36 | 101 | 64 | 30k+ | | | Output is not escaped |
| #3474 | MainWP Child Reports | 35 | 49 | 116 | 100k+ | | | Non-prefixed hook name |
| #3475 | Mass Email To Users | 40 | 84 | 81 | 800 | | | Output is not escaped |
| #3476 | Monetag Official Plugin | 38 | 133 | 32 | 5k+ | | | Text Domain Mismatch |
| #3477 | OG Tags | 42 | 131 | 34 | 2k+ | | | Non Singular String Literal Domain |
| #3478 | Softaculous | 24 | 115 | 50 | 10k+ | | | file system operations fread |
| #3479 | Tilopay | 37 | 35 | 130 | 1k+ | | | Nonce verification recommended |
| #3480 | W2S – Migrate WooCommerce to Shopify | 38 | 33 | 132 | 1k+ | | | Non-prefixed global variable |
| #3481 | Lucky Wheel for WooCommerce – Spin a Sale | 39 | 12 | 153 | 1k+ | | | Request data is not unslashed |
| #3482 | Compress, Resize & Lazy Load Images – WPvivid Image Optimization | 47 | 107 | 58 | 10k+ | | | Missing direct file access protection |
| #3483 | AdSimple Cookie Consent Banner | 65 | 55 | 109 | 600 | | | wp function not compatible with requires wp |
| #3484 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | | | Non Singular String Literal Domain |
| #3485 | CommerceBird – AI Command Center, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online). | 61 | 2 | 162 | 400 | | | Direct Query |
| #3486 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #3487 | Dotdigital for WordPress | 64 | 41 | 123 | 400 | | | Dynamic hook name |
| #3488 | Export to Blogger | 38 | 47 | 117 | 900 | | | Non-prefixed global variable |
| #3489 | GetPaid > Item Inventory | 40 | 112 | 52 | 400 | | | Text Domain Mismatch |
| #3490 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 63 | 30 | 134 | 3k+ | | | Direct Query |
| #3491 | The Courier Guy Shipping for WooCommerce | 35 | 57 | 107 | 3k+ | | | Missing nonce verification |
| #3492 | Theme and plugin translation for Polylang (TTfP) | 40 | 102 | 62 | 10k+ | | | Text Domain Mismatch |
| #3493 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | | | Output is not escaped |
| #3494 | Ashe Extra | 38 | 108 | 55 | 3k+ | | | Text Domain Mismatch |
| #3495 | Beauty Form Styler for Gravity Forms | 38 | 70 | 93 | 600 | | | Output is not escaped |
| #3496 | Creative Addons for Elementor | 44 | 63 | 100 | 800 | | | Missing Arg Domain |
| #3497 | Custom Category Post Order | 36 | 80 | 83 | 500 | | | Text Domain Mismatch |
| #3498 | Genesis Blocks | 88 | 154 | 9 | 40k+ | | | Offloaded Content |
| #3499 | Import to Photo Gallery from NextGen gallery | 38 | 80 | 83 | 400 | | | Direct Query |
| #3500 | RSS Image Feed | 37 | 147 | 16 | 2k+ | | | Output is not escaped |