| #3501 | Starbox – the Author Box for Humans | 52 | 144 | 19 | 10k+ | | | Non Singular String Literal Domain |
| #3502 | Quick View for WooCommerce | 94 | | 163 | 2k+ | | | Non-prefixed global variable |
| #3503 | Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist | 79 | 121 | 42 | 3k+ | | | Text Domain Mismatch |
| #3504 | WP Multisite Content Copier/Updater | 40 | 19 | 144 | 800 | | | Interpolated SQL is not prepared |
| #3505 | Local Business Schema (JSON-LD) Lite | 90 | 155 | 8 | 3k+ | | | Text Domain Mismatch |
| #3506 | Announce from the Dashboard | 38 | 138 | 24 | 7k+ | | | Non Singular String Literal Domain |
| #3507 | Bulk Post Update Date | 36 | 96 | 66 | 10k+ | | | Unsafe printing function |
| #3508 | Database for Contact Form 7 | 38 | 34 | 128 | 7k+ | | | Missing nonce verification |
| #3509 | CF7 Spreadsheets | 35 | 100 | 62 | 400 | | | Text Domain Mismatch |
| #3510 | Invite Anyone | 40 | 32 | 130 | 1k+ | | | Non-prefixed hook name |
| #3511 | OneSignal Sender | 39 | 112 | 50 | 400 | | | Output is not escaped |
| #3512 | CPS | Age Verification | 40 | 127 | 35 | 800 | | | Unsafe printing function |
| #3513 | User Specific Content | 38 | 143 | 19 | 1k+ | | | Text Domain Mismatch |
| #3514 | WP Emmet | 37 | 154 | 8 | 3k+ | | | Output is not escaped |
| #3515 | WP Forms Signature Contract Add-On | 35 | 127 | 35 | 900 | | | Text Domain Mismatch |
| #3516 | WP-Print | 35 | 110 | 52 | 8k+ | | | Unsafe printing function |
| #3517 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 35 | 48 | 114 | 5k+ | | | Non-prefixed hook name |
| #3518 | Genesis Dambuster | 39 | 94 | 67 | 3k+ | | | Output is not escaped |
| #3519 | WP GIF Uploader | 33 | 117 | 44 | 1k+ | | | Text Domain Mismatch |
| #3520 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 115 | 46 | 3k+ | | | Output is not escaped |
| #3521 | Contact Form Widget | 38 | 54 | 107 | 1k+ | | | Request data is not unslashed |
| #3522 | Post Carousel for DV Builder | 74 | 152 | 9 | 2k+ | | | Text Domain Mismatch |
| #3523 | Quick Buy Now Button for WooCommerce | 54 | 136 | 25 | 40k+ | | | Text Domain Mismatch |
| #3524 | Scroll Back To Top | 37 | 149 | 12 | 10k+ | | | Output is not escaped |
| #3525 | Ultimate Dashboard – Custom WordPress Dashboard | 40 | 17 | 144 | 60k+ | | | Input is not sanitized |
| #3526 | Website LLMs.txt | 40 | 13 | 148 | 40k+ | | | Non-prefixed global variable |
| #3527 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #3528 | GDPR | 77 | 39 | 121 | 10k+ | | | Non-prefixed global variable |
| #3529 | Xpro Slider For Beaver Builder – Lite | 70 | 147 | 13 | 500 | | | Text Domain Mismatch |
| #3530 | Donations via PayPal | 40 | 143 | 17 | 20k+ | | | Output is not escaped |
| #3531 | Social Sharing Plugin – Social Warfare | 35 | 17 | 143 | 20k+ | | | Non-prefixed class |
| #3532 | Swiper Js Slider | 38 | 125 | 35 | 400 | | | Output is not escaped |
| #3533 | ThemeZee Toolkit | 40 | 44 | 116 | 6k+ | | | Nonce verification recommended |
| #3534 | WP Tab Widget | 40 | 128 | 32 | 10k+ | | | Output is not escaped |
| #3535 | Post Grid Master — Post Grids & AJAX Filters | 42 | 44 | 115 | 1k+ | | | Non-prefixed global variable |
| #3536 | Conditional Fields for Contact Form 7 | 41 | 106 | 53 | 100k+ | | | Output is not escaped |
| #3537 | Email Encoder – Protect Email Addresses and Phone Numbers | 38 | 9 | 150 | 90k+ | | | Non-prefixed global variable |
| #3538 | Enhanced Text Widget | 34 | 101 | 58 | 30k+ | | | Output is not escaped |
| #3539 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #3540 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #3541 | Pronamic Client | 35 | 111 | 48 | 700 | | | Output is not escaped |
| #3542 | RateMyAgent Official | 89 | 1 | 158 | 400 | | | Non-prefixed namespace |
| #3543 | Shipping Simulator for WooCommerce | 39 | 120 | 39 | 5k+ | | | Text Domain Mismatch |
| #3544 | Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | 35 | 83 | 76 | 2k+ | | | Output is not escaped |
| #3545 | AdFlow – Easy Google AdSense Integration | 40 | 150 | 9 | 3k+ | | | Unsafe printing function |
| #3546 | Supplier Order Email | 36 | 54 | 105 | 400 | | | Output is not escaped |
| #3547 | SEO Auto Linker | 39 | 97 | 62 | 3k+ | | | Unsafe printing function |
| #3548 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | | | Short PHP open tag found |
| #3549 | Easy Testimonial Slider and Form | 37 | 14 | 144 | 800 | | | Request data is not unslashed |
| #3550 | Export Customers Data | 34 | 109 | 49 | 500 | | | Text Domain Mismatch |