| #2101 | morkva Liqpay Extended | 98 | 3 | 4 | 400 | | | Non-prefixed class |
| #2102 | Scroll Magic Addon for Elementor | 77 | 344 | 7 | 400 | | | Text Domain Mismatch |
| #2103 | Export Orders for WooCommerce – CSV, Excel, XML, JSON & PDF Export | 85 | 24 | 9 | 400 | | | wp function not compatible with requires wp |
| #2104 | WP Clone any post type | 100 | | 3 | 400 | | | trademarked term |
| #2105 | Fathom Analytics Conversions | 59 | 14 | 47 | 400 | | | Non-prefixed function |
| #2106 | Add to Cart Redirect for WooCommerce | 93 | 4 | 5 | 400 | | | Nonce verification recommended |
| #2107 | Netgíró Payment Gateway for WooCommerce | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #2108 | Remove WP Logo from Admin Bar | 98 | 2 | 3 | 400 | | | trademarked term |
| #2109 | BuddyPress Groups Extras | 50 | 30 | 51 | 400 | | | Missing direct file access protection |
| #2110 | country-redirect | 38 | 58 | 19 | 400 | | | Text Domain Mismatch |
| #2111 | WPQiNiu七牛云对象存储 | 19 | 138 | 612 | 400 | | | Non-prefixed global variable |
| #2112 | CSS Class Manager – An advanced autocomplete additional css class control for your blocks | 99 | 1 | 2 | 400 | | | Discouraged text-domain loading |
| #2113 | WP Permastructure | 79 | 14 | 6 | 400 | | | Missing Arg Domain |
| #2114 | WP Show Stats | 37 | 197 | 103 | 400 | | | Output is not escaped |
| #2115 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #2116 | Show Menu Shortcode | 97 | 5 | 0 | 400 | | | Missing direct file access protection |
| #2117 | Shamor | 53 | 55 | 12 | 400 | | | wp function not compatible with requires wp |
| #2118 | TopList.cz | 38 | 138 | 7 | 400 | | | Output is not escaped |
| #2119 | Interactive US Map | 40 | 136 | 54 | 400 | | | Text Domain Mismatch |
| #2120 | PDF Importer for WPForms | 25 | 332 | 329 | 400 | | | Non-prefixed global variable |
| #2121 | Swifty Bar, sticky bar by WPGens | 37 | 112 | 81 | 400 | | | Output is not escaped |
| #2122 | AK Featured Post Widget | 38 | 135 | 4 | 400 | | | Output is not escaped |
| #2123 | Falang for Elementor Lite | 80 | 8 | 1 | 400 | | | Exception output is not escaped |
| #2124 | Products Restricted Users for WooCommerce | 61 | 31 | 24 | 400 | | | wp function not compatible with requires wp |
| #2125 | Pk Google Analytics | 92 | 3 | 1 | 400 | | | Output is not escaped |
| #2126 | Display your Checkatrade | 72 | 19 | 3 | 400 | | | Output is not escaped |
| #2127 | Hesabfa Accounting | 22 | 467 | 718 | 400 | | | Text Domain Mismatch |
| #2128 | Access Areas for WordPress | 35 | 17 | 95 | 400 | | | Direct Query |
| #2129 | Metadata Viewer | 35 | 2 | 11 | 400 | | | Non-prefixed global variable |
| #2130 | Eazy Login Logo | 91 | 4 | 2 | 400 | | | Missing direct file access protection |
| #2131 | Humans TXT | 37 | 159 | 86 | 400 | | | Output is not escaped |
| #2132 | Quick Drafts Access | 99 | 1 | 2 | 400 | | | unexpected markdown file |
| #2133 | Interactive Globes – 3D World Maps | 51 | 24 | 104 | 400 | | | Non-prefixed global variable |
| #2134 | ActBlue Contributions | 98 | 2 | 3 | 400 | | | Missing direct file access protection |
| #2135 | WP Login Door | 64 | 19 | 11 | 400 | | | Output is not escaped |
| #2136 | Social Comments | 37 | 59 | 32 | 400 | | | Output is not escaped |
| #2137 | Debug Bar Actions and Filters Addon | 86 | 6 | 4 | 400 | | | Forbidden PHP function found |
| #2138 | Taxonomy Checklist Tree | 35 | 3 | 1 | 400 | | | Hidden files included |
| #2139 | Service Box | 41 | 150 | 230 | 400 | | | Missing nonce verification |
| #2140 | Tumblr Widget | 40 | 106 | 1 | 400 | | | Output is not escaped |
| #2141 | Serviceform Pixel | 40 | 18 | 22 | 400 | | | Output is not escaped |
| #2142 | JAMP Notes (Just Another Memo Plugin) | 85 | 170 | 183 | 400 | | | Text Domain Mismatch |
| #2143 | Bangla Fonts Collection | 50 | 47 | 3 | 400 | | | Text Domain Mismatch |
| #2144 | Get Chat App | 62 | 10 | 62 | 400 | | | Request data is not unslashed |
| #2145 | Shortcodes in Sidebar | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #2146 | Menu Backup & Restore + Import/Export | 99 | 7 | 0 | 400 | | | wp function not compatible with requires wp |
| #2147 | GamiPress – Reset User | 51 | 14 | 27 | 400 | | | Interpolated SQL is not prepared |
| #2148 | Termin-Kalender | 100 | | 0 | 400 | | | No open findings |
| #2149 | WPArtisan Filename Sanitizer | 97 | 2 | 5 | 400 | | | trademarked term |
| #2150 | EMI Calculator | 63 | 37 | 1 | 400 | | | Setting is missing a sanitization callback |