| #3351 | Block Manager | 35 | 33 | 26 | 4k+ | | | Text Domain Mismatch |
| #3352 | Blogger Importer Extended | 39 | 55 | 45 | 4k+ | | | Output is not escaped |
| #3353 | Bluehost Site Migrator | 35 | 11 | 18 | 4k+ | | | Missing direct file access protection |
| #3354 | Bold pagos en linea | 89 | 4 | 32 | 4k+ | | | Non-prefixed global variable |
| #3355 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #3356 | BuddyPress Xprofile Custom Field Types | 41 | 39 | 189 | 4k+ | | | Missing nonce verification |
| #3357 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #3358 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 36 | 1 | 574 | 4k+ | | | Request data is not unslashed |
| #3359 | Calendar | 99 | 1 | 3 | 4k+ | | | Non-prefixed constant |
| #3360 | Gallery Carousel Without JetPack | 49 | 56 | 35 | 4k+ | | | Text Domain Mismatch |
| #3361 | CartPops – High Converting Add To Cart Popup For WooCommerce | 33 | 63 | 188 | 4k+ | | | Non-prefixed global variable |
| #3362 | CCM19 Integration | 67 | 14 | 13 | 4k+ | | | Nonce verification recommended |
| #3363 | Contact Form 7 Spam Killer | 87 | 1 | 21 | 4k+ | | | Missing nonce verification |
| #3364 | Change Quantity on Checkout for WooCommerce | 35 | 270 | 32 | 4k+ | | | wp function not compatible with requires wp |
| #3365 | Change Username | 35 | 7 | 10 | 4k+ | | | Direct Query |
| #3366 | chat-me-now | 75 | 15 | 5 | 4k+ | | | Output is not escaped |
| #3367 | CHIP for WooCommerce | 100 | | 0 | 4k+ | | | No open findings |
| #3368 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | | | Non-prefixed function |
| #3369 | Cities Shipping Zones for WooCommerce | 42 | 94 | 44 | 4k+ | | | Text Domain Mismatch |
| #3370 | Classic Blog Grid | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #3371 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | | | Non-prefixed global variable |
| #3372 | Clear Autoptimize Cache Automatically | 93 | 3 | 9 | 4k+ | | | Request data is not unslashed |
| #3373 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #3374 | Clicky by Yoast | 95 | 10 | 7 | 4k+ | | | Missing direct file access protection |
| #3375 | Code Widget | 44 | 60 | 33 | 4k+ | | | Text Domain Mismatch |
| #3376 | Coinbase Commerce Payment Gateway for WooCommerce | 94 | 21 | 5 | 4k+ | | | Missing Arg Domain |
| #3377 | Collapsing Categories | 68 | 29 | 8 | 4k+ | | | Missing direct file access protection |
| #3378 | Advanced Comment Form | 64 | 68 | 6 | 4k+ | | | Output is not escaped |
| #3379 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | | | Unsafe printing function |
| #3380 | Kit (formerly ConvertKit) for WooCommerce | 35 | 213 | 18 | 4k+ | | | Text Domain Mismatch |
| #3381 | Countdown Block | 81 | 14 | 10 | 4k+ | | | wp function not compatible with requires wp |
| #3382 | CubeWP Forms | 97 | 8 | 3 | 4k+ | | | wp function not compatible with requires wp |
| #3383 | CubeWP Framework | 35 | 114 | 71 | 4k+ | | | wp function not compatible with requires wp |
| #3384 | Custom Layouts – Post + Product grids made easy | 89 | 23 | 22 | 4k+ | | | Missing Translators Comment |
| #3385 | Custom Share Buttons with Floating Sidebar | 65 | 164 | 20 | 4k+ | | | Text Domain Mismatch |
| #3386 | Customize Admin | 99 | 8 | 0 | 4k+ | | | Missing Arg Domain |
| #3387 | Dashboard Widgets Suite | 36 | 206 | 124 | 4k+ | | | Output is not escaped |
| #3388 | Date Picker For Contact Form 7 | 78 | 3 | 8 | 4k+ | | | Missing nonce verification |
| #3389 | DCO Insert Analytics Code | 93 | 2 | 0 | 4k+ | | | Setting is missing a sanitization callback |
| #3390 | Exclude Image Thumbnails From UpdraftPlus Backups | 98 | 2 | 1 | 4k+ | | | no stable tag |
| #3391 | Delete All Products for WooCommerce | 99 | 1 | 5 | 4k+ | | | slow db query meta query |
| #3392 | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 24 | 845 | 2,643 | 4k+ | | | Non-prefixed global variable |
| #3393 | DHL Shipping Germany for WooCommerce | Pending | - | - | 4k+ | | | Pending scan |
| #3394 | Different Menu in Different Pages – Conditional Menu | 36 | 167 | 113 | 4k+ | | | Text Domain Mismatch |
| #3395 | Disable Flamingo Addressbook | 99 | 1 | 1 | 4k+ | | | outdated tested upto header |
| #3396 | Disable New User Notification Emails | 97 | 2 | 6 | 4k+ | | | Non-prefixed hook name |
| #3397 | PiWeb Disable payment method / Partial payment for WooCommerce | 35 | 55 | 221 | 4k+ | | | Non-prefixed class |
| #3398 | Disable Site | 50 | 26 | 3 | 4k+ | | | Output is not escaped |
| #3399 | Document Library Lite | 34 | 149 | 85 | 4k+ | | | Text Domain Mismatch |
| #3400 | Doneren met Mollie | 36 | 420 | 351 | 4k+ | | | SQL query is not prepared |