| #3001 | Gateway zibal for Woocommerce | 44 | 70 | 24 | 6k+ | | | Text Domain Mismatch |
| #3002 | Dynamic Pricing With Discount Rules for WooCommerce | 25 | 165 | 205 | 5k+ | | | Non-prefixed global variable |
| #3003 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 5k+ | | | Exception output is not escaped |
| #3004 | Admin Management Xtended | 38 | 280 | 161 | 5k+ | | | Output is not escaped |
| #3005 | Admin Slug Column | 35 | 2 | 0 | 5k+ | | | Hidden files included |
| #3006 | Admin Taxonomy Filter | 92 | 3 | 3 | 5k+ | | | Non-prefixed class |
| #3007 | Advanced CSS Editor | 76 | 25 | 6 | 5k+ | | | Output is not escaped |
| #3008 | Advanced Media Offloader | 38 | 57 | 93 | 5k+ | | | error log error log |
| #3009 | Load More Anything | 39 | 38 | 73 | 5k+ | | | Output is not escaped |
| #3010 | Allow Webp image | 97 | 4 | 7 | 5k+ | | | Non-prefixed function |
| #3011 | Amazon Web Services | 41 | 53 | 21 | 5k+ | | | Missing Translators Comment |
| #3012 | Ambrosite Next/Previous Post Link Plus | 69 | 12 | 24 | 5k+ | | | Interpolated SQL is not prepared |
| #3013 | AnyComment | 17 | 445 | 449 | 5k+ | | | Output is not escaped |
| #3014 | Archive Content with Archived Post Status | 35 | 3 | 2 | 5k+ | | | Discouraged text-domain loading |
| #3015 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #3016 | Authorizer | 65 | 3 | 54 | 5k+ | | | Nonce verification recommended |
| #3017 | Authors List | 87 | 2 | 16 | 5k+ | | | Nonce verification recommended |
| #3018 | Autopost for X (formerly Autoshare for Twitter) | 97 | 11 | 2 | 5k+ | | | Missing direct file access protection |
| #3019 | Avatar Manager | 41 | 29 | 41 | 5k+ | | | Unsafe printing function |
| #3020 | Awesome Logo Carousel Block | 99 | 1 | 0 | 5k+ | | | outdated tested upto header |
| #3021 | Bangladeshi Payment Gateways – Make Payment Using QR Code | 40 | 40 | 36 | 5k+ | | | Output is not escaped |
| #3022 | Better Aria Label Support | 99 | 3 | 0 | 5k+ | | | Missing direct file access protection |
| #3023 | Better Block Editor (BBE) | 95 | 4 | 53 | 5k+ | | | Non-prefixed global variable |
| #3024 | Better Robots.txt – AI-Ready Crawl Control & Bot Governance | 32 | 55 | 83 | 5k+ | | | error log error log |
| #3025 | Better Search – Relevant search results for WordPress | 77 | 18 | 117 | 5k+ | | | Dynamic hook name |
| #3026 | Blocks CSS: CSS Editor for Gutenberg Blocks | 99 | | 5 | 5k+ | | | trademarked term |
| #3027 | BlogLentor – Blog Designer Pack for Elementor | 74 | 743 | 29 | 5k+ | | | Text Domain Mismatch |
| #3028 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #3029 | Bootstrap Shortcodes | 71 | 21 | 11 | 5k+ | | | Missing direct file access protection |
| #3030 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | | Non-prefixed global variable |
| #3031 | BP Profile Search | 36 | 321 | 85 | 5k+ | | | Output is not escaped |
| #3032 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #3033 | Bulgarisation for WooCommerce | 36 | 135 | 594 | 5k+ | | | Nonce verification recommended |
| #3034 | Bulk Delete Comments | 41 | 15 | 61 | 5k+ | | | Direct Query |
| #3035 | Button Block – Design Stylish, Interactive, and Multi-Functional Buttons | 100 | | 2 | 5k+ | | | Non-prefixed global variable |
| #3036 | Button Generator – Easily Create Custom Buttons with Icons and Analytics | 96 | 8 | 68 | 5k+ | | | Non-prefixed global variable |
| #3037 | Quick Buy Now Button for WooCommerce | 55 | 37 | 39 | 5k+ | | | Output is not escaped |
| #3038 | Buzzsprout Podcasting | 41 | 75 | 13 | 5k+ | | | Non Singular String Literal Domain |
| #3039 | Call Now and Chat Buttons | 72 | 13 | 2 | 5k+ | | | Setting is missing a sanitization callback |
| #3040 | Canonical SEO | 98 | 2 | 0 | 5k+ | | | license mismatch |
| #3041 | Catch Themes Demo Import | 100 | | 1 | 5k+ | | | Non-prefixed class |
| #3042 | Category Checklist Tree | 98 | 3 | 0 | 5k+ | | | Missing direct file access protection |
| #3043 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #3044 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #3045 | Chatbase | 91 | 4 | 4 | 5k+ | | | Non-prefixed function |
| #3046 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 488 | 1,161 | 5k+ | | | Non-prefixed global variable |
| #3047 | UpsellWP – Upsell and Related Products Offers for WooCommerce | 100 | | 2 | 5k+ | | | trademarked term |
| #3048 | Child Pages Shortcode | 35 | 5 | 6 | 5k+ | | | Non-prefixed hook name |
| #3049 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #3050 | Colorlib 404 Customizer | 38 | 65 | 15 | 5k+ | | | Missing direct file access protection |