| #3601 | Confetti | 42 | 136 | 17 | 3k+ | | | Unsafe printing function |
| #3602 | Multiple Themes | 41 | 112 | 41 | 10k+ | | | Output is not escaped |
| #3603 | LiveJournal Importer | 37 | 86 | 67 | 8k+ | | | Output is not escaped |
| #3604 | Pro Mime Types – Manage file media types | 80 | 55 | 98 | 2k+ | | | Non-prefixed global variable |
| #3605 | Responsive Full Width Background Slider | 40 | 131 | 22 | 2k+ | | | Unsafe printing function |
| #3606 | Shippit for WooCommerce | 44 | 127 | 26 | 900 | | | Text Domain Mismatch |
| #3607 | SureRank SEO – Smart Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema | 77 | 58 | 95 | 300k+ | | | Non-prefixed hook name |
| #3608 | Transcoder | 35 | 42 | 111 | 400 | | | Non-prefixed function |
| #3609 | SSLCommerz Payment Gateway | 38 | 21 | 132 | 2k+ | | | Non-prefixed global variable |
| #3610 | Webmention | 33 | 64 | 89 | 900 | | | Output is not escaped |
| #3611 | Z | 39 | 84 | 69 | 500 | | | Output is not escaped |
| #3612 | Car Route Planner Plugin | 38 | 135 | 17 | 400 | | | Output is not escaped |
| #3613 | Submission DOM tracking for Contact Form 7 | 41 | 144 | 8 | 400 | | | Text Domain Mismatch |
| #3614 | Custom Login | 42 | 36 | 116 | 10k+ | | | Non-prefixed global variable |
| #3615 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #3616 | Force Reinstall | 35 | 118 | 34 | 2k+ | | | Output is not escaped |
| #3617 | Magic Liquidizer Responsive Table | 41 | 114 | 38 | 6k+ | | | Text Domain Mismatch |
| #3618 | AI Product Search for WooCommerce – Motive Commerce Search | 35 | 70 | 82 | 400 | | | Missing direct file access protection |
| #3619 | OT Flatsome Vertical Menu | 35 | 126 | 26 | 10k+ | | | Text Domain Mismatch |
| #3620 | Product Enquiry for WooCommerce (Now with AI Assistant) | 86 | 6 | 146 | 10k+ | | | Non-prefixed global variable |
| #3621 | Repeater for Contact Form 7 | 94 | 145 | 7 | 500 | | | wp function not compatible with requires wp |
| #3622 | User Meta Display | 37 | 78 | 74 | 500 | | | Output is not escaped |
| #3623 | Advanced Custom Fields: NextGEN Gallery Field add-on | 37 | 131 | 20 | 400 | | | Output is not escaped |
| #3624 | Advanced Media Offloader – Offload Media to Amazon S3, Cloudflare R2, DigitalOcean Spaces & More | 38 | 57 | 94 | 5k+ | | | error log error log |
| #3625 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #3626 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #3627 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #3628 | PO/MO Editor | 39 | 106 | 45 | 1k+ | | | Unsafe printing function |
| #3629 | SCSS WP Editor | 38 | 111 | 40 | 900 | | | Exception output is not escaped |
| #3630 | Button visually impaired | 44 | 145 | 5 | 10k+ | | | Text Domain Mismatch |
| #3631 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | | | Unsafe printing function |
| #3632 | Integration for Elementor forms – Sendinblue | 65 | 94 | 56 | 7k+ | | | Text Domain Mismatch |
| #3633 | Media Library Organizer – Folders, File Manager & Media Categories | 72 | 20 | 130 | 20k+ | | | Non-prefixed global variable |
| #3634 | Minimal Coming Soon – Coming Soon Page | 88 | 7 | 143 | 100k+ | | | Non-prefixed global variable |
| #3635 | Smart Brands for WooCommerce | 95 | | 150 | 400 | | | Non-prefixed global variable |
| #3636 | Auto Coupons for WooCommerce | 42 | 82 | 68 | 4k+ | | | Output is not escaped |
| #3637 | Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit | 49 | 5 | 145 | 1k+ | | | Missing nonce verification |
| #3638 | WP Discord Post Plus – Supports Unlimited Channels | 38 | 116 | 34 | 700 | | | Text Domain Mismatch |
| #3639 | WP Mailgun SMTP | 38 | 99 | 51 | 900 | | | Text Domain Mismatch |
| #3640 | wp-Monalisa | 48 | 56 | 94 | 700 | | | Direct Query |
| #3641 | WP Safe Mode | 38 | 95 | 55 | 2k+ | | | Output is not escaped |
| #3642 | WPTerm | 42 | 61 | 89 | 4k+ | | | Output is not escaped |
| #3643 | ACF: Google Map Extended | 41 | 141 | 8 | 700 | | | Text Domain Mismatch |
| #3644 | FastDup – Fastest WordPress Migration & Duplicator | 31 | 83 | 66 | 5k+ | | | wp function not compatible with requires wp |
| #3645 | Fix Duplicates | 39 | 76 | 73 | 800 | | | Output is not escaped |
| #3646 | Add LinkedIn Insight Tag for LinkedIn Ads | 49 | 126 | 23 | 5k+ | | | Non Singular String Literal Domain |
| #3647 | Polylang Theme Strings | 42 | 119 | 30 | 6k+ | | | Output is not escaped |
| #3648 | Széchenyi 2020 Logo | 89 | 140 | 9 | 1k+ | | | Text Domain Mismatch |
| #3649 | Theme Check | 67 | 143 | 6 | 20k+ | | | Missing Translators Comment |
| #3650 | Traffic Monitor | 39 | 6 | 143 | 1k+ | | | Direct Query |