| #2601 | Woo Button Text | 39 | 53 | 21 | 500 | | | Output is not escaped |
| #2602 | Simply Excerpts | 74 | 12 | 1 | 500 | | | Setting is missing a sanitization callback |
| #2603 | Unique Submissions for Elementor Forms | 99 | 1 | 2 | 500 | | | No Caching |
| #2604 | Uptime Monitoring for WordPress – My Website is Online | 78 | 18 | 7 | 500 | | | Text Domain Mismatch |
| #2605 | Infinite Ajax Scrolling Lite For Woocommerce | 41 | 33 | 28 | 500 | | | Output is not escaped |
| #2606 | Coming soon Page | 40 | 24 | 18 | 500 | | | Text Domain Mismatch |
| #2607 | Cloudflare Page Cache | 98 | 2 | 4 | 500 | | | trademarked term |
| #2608 | Responsive Mailform ( Plugin Version ) – easy, responsive, contact, mailform | 38 | 120 | 107 | 500 | | | Output is not escaped |
| #2609 | Always Use Open Graph with Jetpack | 98 | 2 | 1 | 500 | | | Missing direct file access protection |
| #2610 | Webling | 30 | 147 | 313 | 500 | | | Input is not validated |
| #2611 | PS User Login Count | 91 | 7 | 7 | 400 | | | Missing Arg Domain |
| #2612 | F2 Tag Cloud Widget | 54 | 66 | 2 | 500 | | | Output is not escaped |
| #2613 | Card Elements for WPBakery | 90 | 1 | 208 | 500 | | | Non-prefixed global variable |
| #2614 | Charla Live Chat | 43 | 33 | 13 | 500 | | | Output is not escaped |
| #2615 | Classic Editor Plus – WordPress Classic Editor plugin by Felix | 38 | 83 | 42 | 500 | | | Text Domain Mismatch |
| #2616 | Front-end Editor | 38 | 78 | 62 | 500 | | | Output is not escaped |
| #2617 | Nav Menu Item Duplicator | 90 | 16 | 4 | 500 | | | wp function not compatible with requires wp |
| #2618 | WPSSO Schema Product Metadata for WooCommerce | 60 | 33 | 23 | 500 | | | Missing Translators Comment |
| #2619 | Cart links for WooCommerce | 67 | 13 | 16 | 500 | | | Text Domain Mismatch |
| #2620 | Power Boost for Gravity Forms | 97 | 7 | 10 | 500 | | | wp function not compatible with requires wp |
| #2621 | Quran multilanguage Text & Audio | 35 | 177 | 166 | 500 | | | Output is not escaped |
| #2622 | Comment Reply Email | 42 | 21 | 23 | 500 | | | Unsafe printing function |
| #2623 | Disable RSS | 90 | 8 | 0 | 500 | | | Missing Arg Domain |
| #2624 | Order Delivery Date Time & Pickup for WooCommerce | 29 | 667 | 244 | 500 | | | Output is not escaped |
| #2625 | WebConnex Form Management | 97 | 3 | 13 | 500 | | | Missing Version |
| #2626 | Deployer for Git | 24 | 541 | 1,336 | 500 | | | Non-prefixed global variable |
| #2627 | En Spam | 75 | 21 | 6 | 500 | | | wp function not compatible with requires wp |
| #2628 | Customize Twenty Sixteen | 75 | 32 | 11 | 500 | | | Text Domain Mismatch |
| #2629 | Oxyplug Preload | 79 | 7 | 9 | 500 | | | Output is not escaped |
| #2630 | Free customer chat solution | 55 | 18 | 10 | 500 | | | Output is not escaped |
| #2631 | SEO Meta Description Updater | 99 | 2 | 0 | 400 | | | outdated tested upto header |
| #2632 | Security Header Generator | 87 | 10 | 20 | 500 | | | Non Singular String Literal Text |
| #2633 | Term Taxonomy Converter | 95 | 57 | 3 | 500 | | | Text Domain Mismatch |
| #2634 | Stock Market News | 38 | 71 | 11 | 500 | | | Output is not escaped |
| #2635 | Embed Block for TikTok | 99 | 1 | 2 | 500 | | | Non-prefixed hook name |
| #2636 | Alerts for Beaver Builder | 61 | 42 | 1 | 500 | | | Output is not escaped |
| #2637 | Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam | 41 | 21 | 53 | 500 | | | Missing nonce verification |
| #2638 | GamiPress – Multimedia Content | 49 | 11 | 25 | 500 | | | Nonce verification recommended |
| #2639 | Trusona for WordPress | 55 | 8 | 34 | 500 | | | Non-prefixed function |
| #2640 | Custom Author Byline | 66 | 11 | 8 | 500 | | | Output is not escaped |
| #2641 | Tag Cloud Shortcode | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #2642 | Webcomic | 25 | 593 | 308 | 600 | | | Output is not escaped |
| #2643 | Comment Form WP – Customize Default Comment Form | 61 | 39 | 7 | 600 | | | Output is not escaped |
| #2644 | Custom Post Template By Templatic | 52 | 19 | 14 | 700 | | | Text Domain Mismatch |
| #2645 | EditorFontsize | 96 | 5 | 2 | 500 | | | Missing direct file access protection |
| #2646 | Contador de Visitas | 42 | 37 | 25 | 500 | | | SQL query is not prepared |
| #2647 | OTP Login With Phone Number, OTP Verification | 92 | 3 | 23 | 900 | | | Non-prefixed hook name |
| #2648 | LocaliQ – Tracking Code | 85 | 11 | 11 | 2k+ | | | Non-prefixed function |
| #2649 | Dr. Flex | 34 | 83 | 51 | 1k+ | | | Output is not escaped |
| #2650 | Block Plugin Update | 73 | 9 | 10 | 6k+ | | | Missing direct file access protection |