| #2701 | SMNTCS Disable REST API User Endpoints | 35 | 8 | 0 | 7k+ | | | Hidden files included |
| #2702 | Social Sharing Block | 86 | 5 | 11 | 7k+ | | | Non-prefixed global variable |
| #2703 | Sticky Block for Gutenberg Editor | 99 | 1 | 2 | 7k+ | | | mismatched plugin name |
| #2704 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 7k+ | | | Text Domain Mismatch |
| #2705 | T4B News Ticker – Responsive News Scroller, Slider, and Animations | 65 | 20 | 10 | 7k+ | | | Output is not escaped |
| #2706 | Team Builder – Team Member Showcase With Grid and slider, Compatible With Elementor, Gutenberg | 31 | 459 | 282 | 7k+ | | | Non Singular String Literal Domain |
| #2707 | Team Members – Multi Language Supported Team Plugin | 24 | 2,081 | 11,206 | 7k+ | | | Non-prefixed global variable |
| #2708 | Termageddon: Cookie Consent & Privacy Compliance | 35 | 27 | 13 | 7k+ | | | Exception output is not escaped |
| #2709 | Theme Switcha – Easily Switch Themes for Development and Testing | 43 | 42 | 53 | 7k+ | | | Output is not escaped |
| #2710 | Theme Test Drive | 43 | 39 | 16 | 7k+ | | | Output is not escaped |
| #2711 | Themify Shortcodes | 35 | 36 | 16 | 7k+ | | | Output is not escaped |
| #2712 | TinyMCE Custom Styles | 39 | 297 | 76 | 7k+ | | | Non Singular String Literal Domain |
| #2713 | Ultimate 410 Gone Status Code | 34 | 136 | 65 | 7k+ | | | Output is not escaped |
| #2714 | VS Contact Form | 55 | 3 | 318 | 7k+ | | | Non-prefixed global variable |
| #2715 | Donation Platform for WooCommerce: Fundraising & Donation Management | 34 | 331 | 448 | 7k+ | | | Non-prefixed global variable |
| #2716 | WC Fields Factory | 28 | 194 | 369 | 7k+ | | | Nonce verification recommended |
| #2717 | WC Ukraine Shipping – Integration of Nova Poshta and Ukrposhta for WooCommerce | 35 | 504 | 164 | 7k+ | | | Text Domain Mismatch |
| #2718 | Swift SMTP (formerly Welcome Email Editor) | 51 | 12 | 62 | 7k+ | | | Missing nonce verification |
| #2719 | WhatConverts | 74 | 10 | 10 | 7k+ | | | Non-prefixed function |
| #2720 | Who Stole the Text Justify Button ?! | 98 | 1 | 3 | 7k+ | | | Non-prefixed function |
| #2721 | Extra Fees for WooCommerce | 24 | 1,113 | 1,569 | 7k+ | | | Non-prefixed global variable |
| #2722 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | | | Non-prefixed global variable |
| #2723 | Order on Mobile for WooCommerce | 84 | 14 | 1 | 7k+ | | | Output is not escaped |
| #2724 | Paysera Payment Gateway for WooCommerce | 21 | 1,866 | 195 | 7k+ | | | Exception output is not escaped |
| #2725 | Product Attachment for WooCommerce | 24 | 1,233 | 1,777 | 7k+ | | | Non-prefixed global variable |
| #2726 | Satispay for WooCommerce | 62 | 19 | 12 | 7k+ | | | Exception output is not escaped |
| #2727 | Faview – Virtual Reviews for WooCommerce | 97 | 3 | 19 | 7k+ | | | Non-prefixed constant |
| #2728 | Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers | 24 | 480 | 1,272 | 7k+ | | | Non-prefixed function |
| #2729 | Easy Accept Payments via PayPal | 35 | 322 | 128 | 7k+ | | | Text Domain Mismatch |
| #2730 | WP Auto Updater | 87 | 5 | 19 | 7k+ | | | Database parameter is not escaped |
| #2731 | WP Datepicker | 35 | 225 | 181 | 7k+ | | | Output is not escaped |
| #2732 | WP Display Header | 98 | 15 | 3 | 7k+ | | | Text Domain Mismatch |
| #2733 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | | Missing Arg Domain |
| #2734 | WP Fail2Ban Redux | 82 | 1 | 10 | 7k+ | | | trademarked term |
| #2735 | Flexible Map | 85 | 10 | 7 | 7k+ | | | Non-prefixed class |
| #2736 | WP Global Site Tag | 99 | | 4 | 7k+ | | | trademarked term |
| #2737 | WP Hotel Booking | 24 | 901 | 1,532 | 7k+ | | | Non-prefixed global variable |
| #2738 | Regions for WP Job Manager | 41 | 29 | 55 | 7k+ | | | Nonce verification recommended |
| #2739 | WP Login Form | 48 | 14 | 20 | 7k+ | | | Request data is not unslashed |
| #2740 | Logo Slider and Showcase | 84 | 2 | 15 | 7k+ | | | Missing nonce verification |
| #2741 | WP Menu Cart | 93 | 11 | 15 | 7k+ | | | Non-prefixed hook name |
| #2742 | WP-Persian | 35 | 144 | 37 | 7k+ | | | Unsafe printing function |
| #2743 | RSS Feed Retriever | 61 | 23 | 8 | 7k+ | | | wp function not compatible with requires wp |
| #2744 | WP SAML Auth | 76 | 7 | 25 | 7k+ | | | Nonce verification recommended |
| #2745 | WP Search with Algolia | 64 | 27 | 16 | 7k+ | | | Missing direct file access protection |
| #2746 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | 24 | 91 | 1,725 | 7k+ | | | Non-prefixed hook name |
| #2747 | WP Subscribe | 29 | 79 | 79 | 7k+ | | | Non-prefixed class |
| #2748 | WP Theme Test | 40 | 21 | 39 | 7k+ | | | Input is not sanitized |
| #2749 | QuadLayers TikTok Feed | 47 | 78 | 52 | 7k+ | | | Text Domain Mismatch |
| #2750 | Social Media Auto Poster – Schedule & Publish to Buffer | 58 | 23 | 211 | 7k+ | | | Dynamic hook name |