| #3701 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | | | Output is not escaped |
| #3702 | WSB HUB3 | 35 | 36 | 109 | 1k+ | | | Missing nonce verification |
| #3703 | AffiliatePages – Pros & Cons, Notice, and CTA Blocks for Affiliates | 39 | 91 | 53 | 2k+ | | | Output is not escaped |
| #3704 | Buckets | 34 | 68 | 76 | 500 | | | Output is not escaped |
| #3705 | Directorist – WPML Integration | 43 | 10 | 134 | 400 | | | Non-prefixed hook name |
| #3706 | GTM4WP – A Google Tag Manager (GTM) plugin for WordPress | 88 | 64 | 80 | 700k+ | | | Non-prefixed global variable |
| #3707 | Extendify | 35 | 80 | 64 | 500k+ | | | Text Domain Mismatch |
| #3708 | Product Variations Swatches for WooCommerce | 67 | 8 | 136 | 10k+ | | | Non-prefixed global variable |
| #3709 | Views for WPForms – Display & Edit WPForms Entries on your site frontend | 37 | 80 | 64 | 1k+ | | | Output is not escaped |
| #3710 | Ansar Import – One Click Starter Sites – for Elementor & Themes | 48 | 27 | 116 | 10k+ | | | Non-prefixed global variable |
| #3711 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #3712 | Drag and Drop Multiple File Upload for WooCommerce | 49 | 114 | 29 | 5k+ | | | Text Domain Mismatch |
| #3713 | Pastacode | 33 | 77 | 66 | 400 | | | Non-prefixed global variable |
| #3714 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #3715 | Ultimate Member Widgets for Elementor – Login Form, Register Form & User Directory | 37 | 21 | 122 | 400 | | | Non-prefixed namespace |
| #3716 | Webo-facto | 40 | 41 | 102 | 1k+ | | | Nonce verification recommended |
| #3717 | WP DPE-GES | 92 | 84 | 59 | 600 | | | Text Domain Mismatch |
| #3718 | WP Media Categories | 38 | 40 | 103 | 800 | | | Nonce verification recommended |
| #3719 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | | | Text Domain Mismatch |
| #3720 | CC BMI Calculator | 40 | 135 | 7 | 800 | | | Output is not escaped |
| #3721 | Responsive WordPress Slider – HG Slider | 38 | 67 | 75 | 7k+ | | | Missing nonce verification |
| #3722 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | | | Missing direct file access protection |
| #3723 | Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs | 38 | 36 | 106 | 2k+ | | | Non-prefixed global variable |
| #3724 | Mail Queue | 35 | 25 | 117 | 1k+ | | | Direct Query |
| #3725 | Post Meta Data Manager | 35 | 30 | 112 | 1k+ | | | Non-prefixed global variable |
| #3726 | Product Open Pricing (Name Your Price) for WooCommerce | 50 | 105 | 37 | 6k+ | | | Text Domain Mismatch |
| #3727 | Spacious Toolkit | 35 | 48 | 94 | 700 | | | Non-prefixed global variable |
| #3728 | Swifty Image Widget | 39 | 114 | 28 | 900 | | | Output is not escaped |
| #3729 | Zoho ZeptoMail | 36 | 32 | 110 | 5k+ | | | Request data is not unslashed |
| #3730 | Unlimited Theme Addon For Elementor | 86 | 74 | 68 | 600 | | | Missing direct file access protection |
| #3731 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #3732 | Multi-Step Checkout for WooCommerce | 71 | 38 | 104 | 8k+ | | | Non-prefixed global variable |
| #3733 | Anything Order by Terms | 39 | 48 | 93 | 1k+ | | | Direct Query |
| #3734 | APG Google Video Sitemap Feed | 34 | 96 | 45 | 800 | | | Output is not escaped |
| #3735 | Mortgage Calculators WP | 73 | 18 | 123 | 3k+ | | | Non-prefixed global variable |
| #3736 | Preload LCP Image | 41 | 110 | 31 | 4k+ | | | Unsafe printing function |
| #3737 | Speed Optimizer – The All-In-One Performance-Boosting Plugin | 36 | 45 | 96 | 1m+ | | | Non-prefixed hook name |
| #3738 | Simpaisa Wallet (Jazzcash & Easypaisa) Payment Services | 39 | 67 | 74 | 1k+ | | | Interpolated Variable Text |
| #3739 | SportsPress for Football (Soccer) | 58 | 107 | 34 | 6k+ | | | Text Domain Mismatch |
| #3740 | SportsPress for Volleyball | 58 | 107 | 34 | 500 | | | Text Domain Mismatch |
| #3741 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | | Output is not escaped |
| #3742 | Stock Ticker | 39 | 92 | 49 | 2k+ | | | Output is not escaped |
| #3743 | Team Builder Member Showcase | 43 | 14 | 127 | 1k+ | | | Non-prefixed global variable |
| #3744 | Testimonial Slider – Free Testimonials Slider Plugin | 33 | 91 | 50 | 700 | | | Request data is not unslashed |
| #3745 | Ultimate Custom Cursor | 40 | 138 | 3 | 800 | | | Output is not escaped |
| #3746 | UserHeat Plugin | 39 | 121 | 20 | 6k+ | | | Non Singular String Literal Domain |
| #3747 | WooBooster Partial COD for WooCommerce | 40 | 90 | 51 | 500 | | | Text Domain Mismatch |
| #3748 | Top Image SEO | 41 | 115 | 26 | 5k+ | | | Unsafe printing function |
| #3749 | SFN Easy FAQ Manager | 92 | 127 | 14 | 2k+ | | | Text Domain Mismatch |
| #3750 | Subscribe Button by AddToAny | 40 | 93 | 47 | 900 | | | Output is not escaped |