| #3701 | Add-on Contact Form 7 – MailPoet 3 | 41 | 88 | 12 | 3k+ | | | Output is not escaped |
| #3702 | Add to Calendar Button | 35 | 31 | 9 | 3k+ | | | Output is not escaped |
| #3703 | Admin Bar Editor – Toolbar Customization with User Role based access & Custom menus | 38 | 56 | 46 | 3k+ | | | Output is not escaped |
| #3704 | Admin Bar & Dashboard Access Control | 38 | 94 | 37 | 3k+ | | | Text Domain Mismatch |
| #3705 | Admin Menu Search | 97 | 5 | 0 | 3k+ | | | Missing Translators Comment |
| #3706 | Admin Tools | 38 | 189 | 10 | 3k+ | | | Unsafe printing function |
| #3707 | Ads.txt File Manager By Magicbid | 100 | | 0 | 3k+ | | | No open findings |
| #3708 | Advanced Appointment Booking & Scheduling | 83 | 11 | 13 | 3k+ | | | Text Domain Mismatch |
| #3709 | Advanced Forms for ACF | 33 | 169 | 278 | 3k+ | | | Non-prefixed hook name |
| #3710 | Zorem Local Pickup | 99 | | 5 | 3k+ | | | Non-prefixed class |
| #3711 | Advanced Posts Listing – Show Post List Easily | 98 | 31 | 5 | 3k+ | | | Missing Arg Domain |
| #3712 | Advanced Posts/Page | 91 | 16 | 2 | 3k+ | | | Text Domain Mismatch |
| #3713 | Advanced Rich Text Tools for Gutenberg | 97 | 3 | 4 | 3k+ | | | trademarked term |
| #3714 | Advanced Twenty Seventeen | 34 | 247 | 98 | 3k+ | | | Text Domain Mismatch |
| #3715 | Advanced WooCommerce Product Gallery Slider | 40 | 42 | 48 | 3k+ | | | Non-prefixed global variable |
| #3716 | Affiliate Links – Link Cloaking and Management | 39 | 23 | 113 | 3k+ | | | Non-prefixed global variable |
| #3717 | AffiliateWP – Affiliate Area Tabs | 39 | 86 | 26 | 3k+ | | | Output is not escaped |
| #3718 | AForms — Form Builder for Price Calculator & Cost Estimation | 28 | 564 | 95 | 3k+ | | | Text Domain Mismatch |
| #3719 | AI WP Writer – SEO content generator, chatGPT, Gemini | 33 | 581 | 531 | 3k+ | | | Text Domain Mismatch |
| #3720 | AIKTP | 99 | 1 | 1 | 3k+ | | | Mixed line endings |
| #3721 | AJAX Login and Registration modal popup + inline form | 28 | 157 | 261 | 3k+ | | | Output is not escaped |
| #3722 | Pulsating Chat Button | 95 | 29 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #3723 | Animated Floating Chat Button | 93 | | 5 | 3k+ | | | Nonce verification recommended |
| #3724 | AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations | 84 | 88 | 20 | 3k+ | | | Text Domain Mismatch |
| #3725 | Announcement Bar | 38 | 192 | 61 | 3k+ | | | Non Singular String Literal Domain |
| #3726 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #3727 | AnsPress – Question and answer | 35 | 22 | 778 | 3k+ | | | Non-prefixed function |
| #3728 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #3729 | AppScenic – Smart AI Dropshipping | 70 | 16 | 41 | 3k+ | | | Dynamic hook name |
| #3730 | Aqua Page Builder | 32 | 320 | 114 | 3k+ | | | Output is not escaped |
| #3731 | Aquila Admin Theme | 35 | 151 | 329 | 3k+ | | | Non-prefixed global variable |
| #3732 | Arile Super | 32 | 328 | 351 | 3k+ | | | Non-prefixed global variable |
| #3733 | Ashe Extra | 38 | 109 | 54 | 3k+ | | | Text Domain Mismatch |
| #3734 | atec Cache APCu | 81 | 41 | 21 | 3k+ | | | wp function not compatible with requires wp |
| #3735 | Athemes Toolbox | 40 | 254 | 58 | 3k+ | | | Text Domain Mismatch |
| #3736 | Attachment Importer | 40 | 24 | 76 | 3k+ | | | Input is not sanitized |
| #3737 | CP Media Player – Audio Player and Video Player | 66 | 224 | 48 | 3k+ | | | Text Domain Mismatch |
| #3738 | Australia Post WooCommerce Extension | 39 | 99 | 12 | 3k+ | | | Text Domain Mismatch |
| #3739 | Auto Copyright Year Updater | 98 | 3 | 0 | 3k+ | | | Missing direct file access protection |
| #3740 | Auto iFrame | 81 | 2 | 11 | 3k+ | | | Input is not sanitized |
| #3741 | Autoload Checker | 100 | | 0 | 3k+ | | | No open findings |
| #3742 | Automatic NBSP | 42 | 24 | 16 | 3k+ | | | Output is not escaped |
| #3743 | Autoremove Attachments | 98 | 2 | 5 | 3k+ | | | Non-prefixed function |
| #3744 | AWEOS Google Maps iframe load per click | 81 | 11 | 7 | 3k+ | | | Text Domain Mismatch |
| #3745 | AWSM Team – Team Showcase Plugin | 95 | 7 | 34 | 3k+ | | | Non-prefixed global variable |
| #3746 | Backlinks Saver | 85 | 3 | 5 | 3k+ | | | Deprecated parameter value found |
| #3747 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | | | Output is not escaped |
| #3748 | Basic URL ShortCodes | 97 | 3 | 2 | 3k+ | | | mismatched plugin name |
| #3749 | Bazz CallBack widget | 42 | 55 | 28 | 3k+ | | | Unsafe printing function |
| #3750 | Before After Image Comparison – Visual Comparison for Two Images | 77 | 18 | 16 | 3k+ | | | Text Domain Mismatch |