| #2001 | Better Blockquotes | 98 | 1 | 2 | 400 | | | Non-prefixed hook name |
| #2002 | Social Intents – Live Chat | 63 | 42 | 11 | 400 | | | Non Singular String Literal Domain |
| #2003 | Eli's PHP Compatibility Scanner | 80 | 1 | 22 | 400 | | | Missing nonce verification |
| #2004 | Smart Send Logistics | 37 | 92 | 81 | 400 | | | Output is not escaped |
| #2005 | AI Product Search for WooCommerce – Motive Commerce Search | 35 | 70 | 82 | 400 | | | Missing direct file access protection |
| #2006 | Social Media Feed for WordPress | 99 | 1 | 2 | 400 | | | mismatched plugin name |
| #2007 | Product categories search admin for woocommerce | 99 | 3 | 1 | 400 | | | Missing direct file access protection |
| #2008 | ACF YouTube Picker | 85 | 82 | 7 | 400 | | | Text Domain Mismatch |
| #2009 | Reusable Blocks Admin Menu Option | 98 | 2 | 3 | 400 | | | Non-prefixed global variable |
| #2010 | Upload Converter for WebP | 95 | 1 | 3 | 400 | | | Input is not sanitized |
| #2011 | WP-Stateless – Gravity Forms Addon | 97 | 2 | 9 | 400 | | | Non-prefixed hook name |
| #2012 | AffiliateWP – Store Credit | 48 | 47 | 21 | 400 | | | Output is not escaped |
| #2013 | Edit Image Thumbnails Separately | 98 | 2 | 1 | 400 | | | Missing direct file access protection |
| #2014 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #2015 | iGen SEO | 96 | 5 | 10 | 600 | | | Non-prefixed hook name |
| #2016 | Featured image to All-Posts | 86 | 6 | 5 | 400 | | | Nonce verification recommended |
| #2017 | Hide Text Shortcode | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #2018 | Slider Text Scroll | 39 | 95 | 52 | 400 | | | Text Domain Mismatch |
| #2019 | Check Pincode For WooCommerce | 52 | | 55 | 400 | | | Direct Query |
| #2020 | m1.DownloadList | 89 | 2 | 6 | 400 | | | Nonce verification recommended |
| #2021 | Remove Archive Label | 98 | 3 | 1 | 400 | | | Missing direct file access protection |
| #2022 | Sublium Subscriptions – Subscriptions for WooCommerce – Recurring Payments, Subscription Plans & Installments | 74 | 35 | 22 | 500 | | | wp function not compatible with requires wp |
| #2023 | WP Publication Archive | 36 | 197 | 64 | 400 | | | Text Domain Mismatch |
| #2024 | WP Logout Redirect | 67 | 20 | 5 | 400 | | | Unsafe printing function |
| #2025 | Simple Lightbox for WordPress | 94 | 11 | 7 | 400 | | | Non Enqueued Script |
| #2026 | qTranslate META | 38 | 88 | 26 | 400 | | | Output is not escaped |
| #2027 | Advanced Custom Fields: Number Slider | 47 | 99 | 4 | 400 | | | Output is not escaped |
| #2028 | BuddyPress & BuddyBoss Member Profile Forms | 34 | 154 | 121 | 400 | | | Text Domain Mismatch |
| #2029 | Spectre Icons | 97 | | 1 | 500 | | | Input is not sanitized |
| #2030 | Cache Buster | 84 | 5 | 6 | 400 | | | Input is not sanitized |
| #2031 | Blocks for Products | 79 | 18 | 13 | 400 | | | Non Singular String Literal Domain |
| #2032 | Russian Currency | 54 | 52 | 6 | 400 | | | Output is not escaped |
| #2033 | Contact Form 7 – email body TinyMCE editor | 91 | 4 | 6 | 400 | | | Nonce verification recommended |
| #2034 | Grabber for QQWorld Auto Save Images | 79 | 17 | 3 | 600 | | | Non Singular String Literal Domain |
| #2035 | My Post Order | 37 | 100 | 114 | 400 | | | Output is not escaped |
| #2036 | Topic Progression Using Storyline/Captivate for LearnDash | 35 | 382 | 25 | 400 | | | Text Domain Mismatch |
| #2037 | Consent Mode Banner | 85 | 3 | 7 | 400 | | | Missing Version |
| #2038 | Coding Chicken – JetEngine Importer | 38 | 55 | 29 | 400 | | | Missing direct file access protection |
| #2039 | Crafthemes Demo Import | 99 | 2 | 1 | 400 | | | Not In Footer |
| #2040 | NGG Smart Image Search | 35 | 298 | 155 | 400 | | | Output is not escaped |
| #2041 | ShareLite: Zero-Bloat Social Sharing | 98 | 3 | 1 | 400 | | | Missing Translators Comment |
| #2042 | Gravity Forms Multi Currency | 74 | 6 | 12 | 400 | | | Output is not escaped |
| #2043 | Smart JavaScript Auto Loader | 44 | 83 | 2 | 400 | | | Output is not escaped |
| #2044 | Advanced Datepicker – Restricts Date for Contact Form 7 | 72 | 228 | 11 | 400 | | | wp function not compatible with requires wp |
| #2045 | WPC Variation Duplicator for WooCommerce | 93 | | 18 | 400 | | | Non-prefixed class |
| #2046 | Send link to friend | 41 | 81 | 47 | 400 | | | Output is not escaped |
| #2047 | FancyBox Gallery | 97 | 4 | 5 | 400 | | | Missing Version |
| #2048 | Simple Calendar – Advanced Custom Fields | 67 | 18 | 6 | 400 | | | Output is not escaped |
| #2049 | BuddyPress Default Data | 71 | 8 | 21 | 400 | | | Interpolated SQL is not prepared |
| #2050 | WP-Markdown | 35 | 31 | 39 | 400 | | | Output is not escaped |