| #3651 | Traffic Monitor | 39 | 6 | 143 | 1k+ | | | Direct Query |
| #3652 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #3653 | WP Gmail SMTP | 39 | 99 | 50 | 1k+ | | | Text Domain Mismatch |
| #3654 | WP SendGrid SMTP | 39 | 99 | 50 | 1k+ | | | Text Domain Mismatch |
| #3655 | Wppao Sitemap | 36 | 128 | 21 | 10k+ | | | Output is not escaped |
| #3656 | Advanced IP Blocker | 40 | 94 | 54 | 2k+ | | | Exception output is not escaped |
| #3657 | Ample Themes Demo Importer | 88 | 135 | 13 | 600 | | | Text Domain Mismatch |
| #3658 | Basic Interactive World Map | 40 | 94 | 54 | 1k+ | | | Text Domain Mismatch |
| #3659 | BugSnag Error Monitoring plugin | 39 | 52 | 96 | 2k+ | | | wp function not compatible with requires wp |
| #3660 | Markup by Attribute for WooCommerce | 39 | 46 | 102 | 2k+ | | | Direct Query |
| #3661 | Secondary Title | 40 | 117 | 31 | 7k+ | | | Unsafe printing function |
| #3662 | Widgets for Social Photo Feed | 91 | 1 | 147 | 10k+ | | | Non-prefixed global variable |
| #3663 | Yektanet Ecommerce | 40 | 45 | 103 | 900 | | | Request data is not unslashed |
| #3664 | Autologin Links | 38 | 73 | 74 | 8k+ | | | Output is not escaped |
| #3665 | bxSlider integration for WordPress | 48 | 126 | 21 | 500 | | | Text Domain Mismatch |
| #3666 | Dashify: WooCommerce admin dashboard theme | 40 | 16 | 131 | 900 | | | Nonce verification recommended |
| #3667 | Eazy CF Captcha | 37 | 93 | 54 | 500 | | | Text Domain Mismatch |
| #3668 | Flex Import | 39 | 15 | 132 | 500 | | | Non-prefixed global variable |
| #3669 | Paystack MemberPress | 40 | 71 | 76 | 400 | | | Output is not escaped |
| #3670 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #3671 | Podcast Player – Your Podcasting Companion | 46 | 14 | 133 | 10k+ | | | Non-prefixed global variable |
| #3672 | Slider Text Scroll | 39 | 95 | 52 | 400 | | | Text Domain Mismatch |
| #3673 | SportsPress for Baseball | 47 | 113 | 34 | 900 | | | Text Domain Mismatch |
| #3674 | TechGasp Music Master | 41 | 143 | 4 | 500 | | | Output is not escaped |
| #3675 | Website Monetization by MageNet | 33 | 60 | 87 | 20k+ | | | Output is not escaped |
| #3676 | Widgets for Social Post Feed | 91 | 1 | 146 | 400 | | | Non-prefixed global variable |
| #3677 | Amazon Pay for WooCommerce | 38 | 30 | 117 | 10k+ | | | Non-prefixed class |
| #3678 | WP WooCommerce Mailchimp | 37 | 62 | 85 | 6k+ | | | Non-prefixed hook name |
| #3679 | Kybernaut IČO DIČ | 35 | 79 | 68 | 2k+ | | | Missing nonce verification |
| #3680 | BuddyMeet | 36 | 114 | 32 | 600 | | | Unsafe printing function |
| #3681 | CleverReach Integration for Contact Form 7 | 40 | 103 | 43 | 700 | | | Text Domain Mismatch |
| #3682 | Crypto Price Widgets – CryptoWP | 40 | 103 | 43 | 600 | | | Output is not escaped |
| #3683 | ELEX WooCommerce Catalog Mode | 61 | 97 | 49 | 10k+ | | | Text Domain Mismatch |
| #3684 | AI Popup Builder & Popup Maker by OptiMonk | 35 | 81 | 65 | 4k+ | | | Text Domain Mismatch |
| #3685 | Image Cleanup | 34 | 52 | 94 | 1k+ | | | Nonce verification recommended |
| #3686 | Markup Markdown | 74 | 18 | 128 | 1k+ | | | Non-prefixed global variable |
| #3687 | Popup addon for Ninja Forms | 40 | 121 | 25 | 1k+ | | | Output is not escaped |
| #3688 | Select All Categories and Taxonomies, Change Checkbox to Radio Buttons | 40 | 116 | 30 | 3k+ | | | Output is not escaped |
| #3689 | SurveyJS: Drag & Drop Form Builder | 36 | 12 | 134 | 500 | | | Missing Version |
| #3690 | Sydney Toolbox | 39 | 84 | 62 | 50k+ | | | Unsafe printing function |
| #3691 | Termly – GDPR/CCPA Cookie Consent Banner | 38 | 54 | 92 | 80k+ | | | Non-prefixed global variable |
| #3692 | Blog Designer | 59 | 62 | 83 | 10k+ | | | Text Domain Mismatch |
| #3693 | Dynamic Visibility for Elementor | 36 | 56 | 89 | 50k+ | | | Non-prefixed hook name |
| #3694 | Easy Yandex Metrica | 38 | 97 | 48 | 900 | | | Output is not escaped |
| #3695 | GeoTargeting Lite – WordPress Geolocation | 35 | 66 | 79 | 1k+ | | | Output is not escaped |
| #3696 | Metorik – Reports & Email Automation for WooCommerce | 37 | 75 | 70 | 10k+ | | | Output is not escaped |
| #3697 | SiteOrigin CSS | 35 | 61 | 84 | 100k+ | | | Not In Footer |
| #3698 | TopList.cz | 38 | 138 | 7 | 400 | | | Output is not escaped |
| #3699 | Word Balloon | 40 | 20 | 125 | 10k+ | | | Request data is not unslashed |
| #3700 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | | | Output is not escaped |