| #3101 | Genesis Portfolio Pro | 97 | 9 | 16 | 5k+ | | | Non-prefixed global variable |
| #3102 | Genesis Widget Column Classes | 73 | 41 | 4 | 5k+ | | | Non Singular String Literal Domain |
| #3103 | Gift Up Gift Cards for WordPress and WooCommerce | 39 | 94 | 60 | 5k+ | | | Output is not escaped |
| #3104 | Google Analytics Opt-Out | 35 | 34 | 7 | 5k+ | | | Output is not escaped |
| #3105 | Embed Files from Google Drive | 77 | 4 | 35 | 5k+ | | | Nonce verification recommended |
| #3106 | WCAG 2.0 form fields for Gravity Forms | 68 | 11 | 13 | 5k+ | | | Output is not escaped |
| #3107 | Guest Author | 98 | 6 | 1 | 5k+ | | | Missing direct file access protection |
| #3108 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | | | Missing Arg Domain |
| #3109 | Gutentools | 91 | 17 | 10 | 5k+ | | | Missing direct file access protection |
| #3110 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #3111 | HEIC Support | 100 | 1 | 0 | 5k+ | | | wp function not compatible with requires wp |
| #3112 | Heroic Table of Contents | 98 | 3 | 1 | 5k+ | | | Missing Arg Domain |
| #3113 | Hide featured image on all single page/post | 96 | 4 | 2 | 5k+ | | | Missing Version |
| #3114 | HivePress Paid Listings | 88 | 5 | 1 | 5k+ | | | Output is not escaped |
| #3115 | HTML5 Maps | 36 | 194 | 160 | 5k+ | | | Output is not escaped |
| #3116 | I Recommend This – Love/Like Button for WordPress Posts | 87 | 3 | 49 | 5k+ | | | Direct Query |
| #3117 | HTML Import 2 | 34 | 273 | 26 | 5k+ | | | Unsafe printing function |
| #3118 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #3119 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 389 | 1,266 | 5k+ | | | Non-prefixed global variable |
| #3120 | iPanorama 360 – Advanced Virtual Tour Builder | 87 | 726 | 34 | 5k+ | | | Text Domain Mismatch |
| #3121 | Jetpack Search | 45 | 925 | 426 | 5k+ | | | Text Domain Mismatch |
| #3122 | Jotform – AI Chatbot | 85 | | 8 | 5k+ | | | Input is not validated |
| #3123 | Get Use APIs – JSON Content Importer | 99 | 1 | 1 | 5k+ | | | upgrade notice limit |
| #3124 | Kama SpamBlock | 64 | 29 | 7 | 5k+ | | | Short PHP open tag found |
| #3125 | Kits, Templates and Patterns | 29 | 380 | 91 | 5k+ | | | Text Domain Mismatch |
| #3126 | Ko-fi Button | 41 | 75 | 15 | 5k+ | | | Output is not escaped |
| #3127 | Language Fallback | 99 | 2 | 1 | 5k+ | | | Missing direct file access protection |
| #3128 | Latest Posts | 63 | 27 | 1 | 5k+ | | | Output is not escaped |
| #3129 | Lead Call Buttons | 35 | 113 | 81 | 5k+ | | | Output is not escaped |
| #3130 | Lead Forensics | 93 | 1 | 5 | 5k+ | | | Non-prefixed hook name |
| #3131 | Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | 23 | 190 | 2,122 | 5k+ | | | Non-prefixed global variable |
| #3132 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | | Output is not escaped |
| #3133 | Lightweight Cookie Notice – Cookie Banner for Cookie Consent | 84 | 8 | 18 | 5k+ | | | Database parameter is not escaped |
| #3134 | Social Like Box and Page by WpDevArt | 40 | 62 | 24 | 5k+ | | | Output is not escaped |
| #3135 | List all URLs | 75 | 8 | 5 | 5k+ | | | Missing nonce verification |
| #3136 | List categories | 97 | 5 | 2 | 5k+ | | | Missing Arg Domain |
| #3137 | List Pages Shortcode | 96 | 5 | 9 | 5k+ | | | Non-prefixed hook name |
| #3138 | Add LinkedIn Insight Tag for LinkedIn Ads | 49 | 126 | 23 | 5k+ | | | Non Singular String Literal Domain |
| #3139 | Logo Manager For Enamad – لوگوی نماد الکترونیکی | 57 | 18 | 14 | 5k+ | | | Output is not escaped |
| #3140 | Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid | 25 | 656 | 1,506 | 5k+ | | | Non-prefixed global variable |
| #3141 | LuckyWP ACF Menu Field | 53 | 46 | 9 | 5k+ | | | Short PHP open tag found |
| #3142 | LocalWeb All In One | 36 | 34 | 297 | 5k+ | | | Non-prefixed global variable |
| #3143 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |
| #3144 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #3145 | Manage XML-RPC | 98 | 3 | 1 | 5k+ | | | file system operations is writable |
| #3146 | Marquee Running Text | 85 | 11 | 7 | 5k+ | | | Missing direct file access protection |
| #3147 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 5k+ | | | Non Singular String Literal Domain |
| #3148 | Midtrans-WooCommerce | 30 | 112 | 132 | 5k+ | | | Non-prefixed global variable |
| #3149 | No External Links | 85 | 7 | 26 | 5k+ | | | Database parameter is not escaped |
| #3150 | Minimum Purchase Amount For Woo Cart – For WooCommerce | 87 | 72 | 8 | 5k+ | | | Text Domain Mismatch |