| #3501 | Microsoft Advertising Universal Event Tracking (UET) | 99 | 1 | 3 | 4k+ | | | trademarked term |
| #3502 | Mobile Call Now & Map Buttons | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #3503 | Mortgage Calculator | 55 | 98 | 16 | 4k+ | | | Text Domain Mismatch |
| #3504 | mPDF add-on for RTL and Unicode Support | 99 | 9 | 1 | 4k+ | | | wp function not compatible with requires wp |
| #3505 | MultiParcels Shipping For WooCommerce | 23 | 197 | 389 | 4k+ | | | Mixed line endings |
| #3506 | Multisite Language Switcher | 98 | 4 | 21 | 4k+ | | | Dynamic hook name |
| #3507 | WPS Bookings for WooCommerce | 88 | 26 | 249 | 4k+ | | | Non-prefixed global variable |
| #3508 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #3509 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |
| #3510 | Nelio Content – Editorial Calendar & Social Media Auto-Posting | 100 | 1 | 0 | 4k+ | | | Missing direct file access protection |
| #3511 | Album Gallery for Photo & Video | 78 | 7 | 8 | 4k+ | | | wp function not compatible with requires wp |
| #3512 | Image Gallery | 74 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #3513 | Social Media Icon Widget – Social Profile Links with Gutenberg Block | 94 | 1 | 2 | 4k+ | | | Output is not escaped |
| #3514 | News Kit Addons For Elementor | 23 | 69 | 419 | 4k+ | | | Post Not In exclude |
| #3515 | News Ticker Widget for Elementor | 98 | 2 | 2 | 4k+ | | | Non-prefixed constant |
| #3516 | No CAPTCHA reCAPTCHA | 40 | 112 | 26 | 4k+ | | | Text Domain Mismatch |
| #3517 | Notification for Telegram | 28 | 189 | 93 | 4k+ | | | Output is not escaped |
| #3518 | NOWPayments for WooCommerce – Crypto Payment Gateway | 25 | 534 | 1,306 | 4k+ | | | Non-prefixed global variable |
| #3519 | NS Featured Posts | 86 | 2 | 15 | 4k+ | | | Nonce verification recommended |
| #3520 | oEmbed Plus | 98 | 3 | 1 | 4k+ | | | Missing direct file access protection |
| #3521 | Ollie Menu Designer | 91 | | 45 | 4k+ | | | Non-prefixed global variable |
| #3522 | One Click Close Comments | 99 | 1 | 2 | 4k+ | | | unexpected markdown file |
| #3523 | WP All Export – Order Export for WooCommerce | 37 | 109 | 111 | 4k+ | | | Text Domain Mismatch |
| #3524 | Organic Builder Widgets – Simple WordPress Page Builder | 26 | 1,034 | 125 | 4k+ | | | Output is not escaped |
| #3525 | OSS Aliyun | 41 | 19 | 40 | 4k+ | | | Request data is not unslashed |
| #3526 | OTF Regenerate Thumbnails | 98 | 3 | 1 | 4k+ | | | Missing direct file access protection |
| #3527 | PagBank / PagSeguro Connect para WooCommerce | 22 | 505 | 757 | 4k+ | | | Non-prefixed global variable |
| #3528 | Bulk Page Generator and Mass Page Builder – Page Generator | 87 | 26 | 87 | 4k+ | | | Non-prefixed global variable |
| #3529 | PayPlug for WooCommerce (Official) | Pending | - | - | 4k+ | | | Pending scan |
| #3530 | PDF Embed Block – Embed PDF Files in Posts or Pages | 100 | | 0 | 4k+ | | | No open findings |
| #3531 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | | Output is not escaped |
| #3532 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | | | SQL query is not prepared |
| #3533 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | | | Exception output is not escaped |
| #3534 | Pluginception | 56 | 7 | 29 | 4k+ | | | Request data is not unslashed |
| #3535 | Podcast Importer SecondLine | 28 | 356 | 169 | 4k+ | | | Text Domain Mismatch |
| #3536 | Podlove Web Player | 97 | 8 | 4 | 4k+ | | | Missing direct file access protection |
| #3537 | TS Poll – Survey, Versus Poll, Image Poll, Video Poll | 32 | 570 | 171 | 4k+ | | | Text Domain Mismatch |
| #3538 | Preload LCP Image | 41 | 110 | 31 | 4k+ | | | Unsafe printing function |
| #3539 | Preserve Editor Scroll Position | 83 | 2 | 6 | 4k+ | | | Missing nonce verification |
| #3540 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #3541 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 56 | 437 | 4k+ | | | Non-prefixed global variable |
| #3542 | Product Blocks for WooCommerce | 35 | 4 | 3 | 4k+ | | | slow db query tax query |
| #3543 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | | | Non-prefixed function |
| #3544 | QR Redirector | 39 | 48 | 54 | 4k+ | | | Output is not escaped |
| #3545 | Quiz Cat – WordPress Quiz Plugin | 40 | 151 | 69 | 4k+ | | | Output is not escaped |
| #3546 | Quotes for WooCommerce | 90 | 186 | 265 | 4k+ | | | Text Domain Mismatch |
| #3547 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | | | Text Domain Mismatch |
| #3548 | reCAPTCHA for Asgaros Forum | 45 | 21 | 36 | 4k+ | | | Input is not validated |
| #3549 | Recent Posts by Category Widget | 63 | 24 | 0 | 4k+ | | | Output is not escaped |
| #3550 | ReCrawler | 49 | 10 | 40 | 4k+ | | | Direct Query |