| #2851 | Page Speed Optimizer: HTTP/2 Push, Async JavaScript, and Defer CSS | 36 | 68 | 33 | 6k+ | | | Output is not escaped |
| #2852 | Hunk Companion | 23 | 2,547 | 687 | 6k+ | | | Text Domain Mismatch |
| #2853 | Ibtana – Ecommerce Product Addons | 23 | 1,547 | 1,718 | 6k+ | | | Non Singular String Literal Domain |
| #2854 | Illdy Companion | 38 | 187 | 23 | 6k+ | | | Output is not escaped |
| #2855 | Intercom | 0 | 60 | 71 | 6k+ | | | Non-prefixed function |
| #2856 | iOS images fixer | 42 | 22 | 42 | 6k+ | | | Nonce verification recommended |
| #2857 | ITRO Popup Plugin | 33 | 591 | 135 | 6k+ | | | Output is not escaped |
| #2858 | JWT Auth – WordPress JSON Web Token Authentication | 35 | 14 | 18 | 6k+ | | | Output is not escaped |
| #2859 | Kwayy HTML Sitemap | 56 | 13 | 19 | 6k+ | | | Missing nonce verification |
| #2860 | LearnPress – Prerequisites Courses | 84 | 8 | 14 | 6k+ | | | Non-prefixed constant |
| #2861 | Leira Letter Avatar | 93 | 3 | 8 | 6k+ | | | Non-prefixed hook name |
| #2862 | License Manager for WooCommerce | 23 | 129 | 797 | 6k+ | | | Nonce verification recommended |
| #2863 | Link Juice Optimizer | 82 | 12 | 6 | 6k+ | | | Output is not escaped |
| #2864 | Log Emails | 47 | 19 | 29 | 6k+ | | | Non-prefixed global variable |
| #2865 | Login Widget With Shortcode | 26 | 335 | 198 | 6k+ | | | wp function not compatible with requires wp |
| #2866 | Log in with Google | 35 | 5 | 17 | 6k+ | | | Non-prefixed global variable |
| #2867 | Logo Carousel Slider | 49 | 102 | 14 | 6k+ | | | Non Singular String Literal Domain |
| #2868 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #2869 | Shoppable Images (Lookbook) for WooCommerce | 86 | 21 | 31 | 6k+ | | | Missing direct file access protection |
| #2870 | Machete | 99 | | 7 | 6k+ | | | Direct Query |
| #2871 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 39 | 65 | 72 | 6k+ | | | block api version too low |
| #2872 | Magic Content & CTA Box Builder – Advanced Gutenberg Blocks for Flexible Page Sections, Headers, Buttons, Shape Dividers, and Layout Options | 97 | 2 | 7 | 6k+ | | | Missing Version |
| #2873 | Magic Liquidizer Responsive Table | 41 | 114 | 38 | 6k+ | | | Text Domain Mismatch |
| #2874 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | | | Non-prefixed global variable |
| #2875 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #2876 | Make Tables Responsive | 43 | 31 | 102 | 6k+ | | | Input is not validated |
| #2877 | Materialis Companion | 36 | 129 | 67 | 6k+ | | | Unsafe printing function |
| #2878 | Maven Algolia | 28 | 148 | 89 | 6k+ | | | Non Singular String Literal Domain |
| #2879 | Media Focus Point | 78 | 11 | 6 | 6k+ | | | Output is not escaped |
| #2880 | Media Library File Size | 80 | 3 | 15 | 6k+ | | | Nonce verification recommended |
| #2881 | Create | 25 | 1,637 | 764 | 6k+ | | | Text Domain Mismatch |
| #2882 | OAuth Single Sign On – SSO (OAuth Client) | 90 | 269 | 36 | 6k+ | | | wp function not compatible with requires wp |
| #2883 | Modern Footnotes | 77 | 18 | 6 | 6k+ | | | Output is not escaped |
| #2884 | Multi Image Metabox | 65 | 17 | 8 | 6k+ | | | Output is not escaped |
| #2885 | Multiple Domain Mapping on Single Site | 38 | 135 | 51 | 6k+ | | | Text Domain Mismatch |
| #2886 | Nav Menu Images | 78 | 5 | 8 | 6k+ | | | Missing nonce verification |
| #2887 | NEX-Forms – Ultimate Forms Plugin for WordPress | 24 | 2,008 | 1,195 | 6k+ | | | Text Domain Mismatch |
| #2888 | No category parents | 95 | 5 | 4 | 6k+ | | | Missing direct file access protection |
| #2889 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 599 | 6k+ | | | Request data is not unslashed |
| #2890 | Optimize Images Resizing | 83 | 12 | 4 | 6k+ | | | Unsafe printing function |
| #2891 | Options for Twenty Twenty-One | 100 | | 0 | 6k+ | | | No open findings |
| #2892 | WP Options Importer | 96 | 56 | 4 | 6k+ | | | Text Domain Mismatch |
| #2893 | Password Policy Manager | Password Manager | 99 | 1 | 1 | 6k+ | | | mismatched plugin name |
| #2894 | Pay by paynow.pl | 39 | 51 | 56 | 6k+ | | | Output is not escaped |
| #2895 | Barion Payment Gateway for WooCommerce | 32 | 67 | 152 | 6k+ | | | Non-prefixed global variable |
| #2896 | Photoswipe Masonry Gallery | 36 | 57 | 47 | 6k+ | | | Non Singular String Literal Text |
| #2897 | Polylang Theme Strings | 42 | 119 | 30 | 6k+ | | | Output is not escaped |
| #2898 | Portfolio, Gallery, Product Catalog – Grid KIT Portfolio | 31 | 61 | 329 | 6k+ | | | Non-prefixed global variable |
| #2899 | Prepare New Version | 42 | 53 | 24 | 6k+ | | | Output is not escaped |
| #2900 | Prevent XSS Vulnerability | 98 | 10 | 1 | 6k+ | | | Missing Arg Domain |