| #2901 | wpDirAuth | 32 | 250 | 135 | 500 | | | wp function not compatible with requires wp |
| #2902 | Whitelist IP For Limit Login Attempts | 48 | 18 | 12 | 500 | | | Output is not escaped |
| #2903 | NoFollow Link | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #2904 | Contact Form 7 to Mailjet | 40 | 70 | 39 | 600 | | | Output is not escaped |
| #2905 | Sticky Add To Cart Bar For WooCommerce | 42 | 46 | 54 | 500 | | | Output is not escaped |
| #2906 | Custom Fields Permalink 2 | 96 | 4 | 9 | 500 | | | Non-prefixed global variable |
| #2907 | No Right Click, Content Copy Protection, Disable Right Click by RB | 66 | 23 | 2 | 600 | | | Unsafe printing function |
| #2908 | CiviCRM Profile Sync | 35 | 31 | 140 | 600 | | | Non-prefixed global variable |
| #2909 | Mobile Menu Builder for WordPress | 36 | 81 | 33 | 600 | | | Output is not escaped |
| #2910 | Nudgify Social Proof | 80 | 3 | 12 | 500 | | | Discouraged PHP function |
| #2911 | FCM Push Notification from WP | 42 | 43 | 16 | 500 | | | Non Singular String Literal Domain |
| #2912 | Collapsible Categories in the Dashboard | 98 | 3 | 0 | 600 | | | Missing direct file access protection |
| #2913 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 600 | | | Output is not escaped |
| #2914 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 500 | | | Missing Arg Domain |
| #2915 | WP Team – WordPress Team Member Plugin | 38 | 537 | 36 | 500 | | | Text Domain Mismatch |
| #2916 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #2917 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #2918 | I Agree! Popups | 40 | 54 | 46 | 500 | | | Output is not escaped |
| #2919 | Panda Pods Repeater Field | 37 | 9 | 260 | 600 | | | Non-prefixed global variable |
| #2920 | Ceylon Extra | 77 | 89 | 41 | 500 | | | Text Domain Mismatch |
| #2921 | Anti-Spambot | 97 | 3 | 2 | 500 | | | Missing direct file access protection |
| #2922 | Leartes TRY Exchange Rates | 36 | 250 | 27 | 500 | | | Text Domain Mismatch |
| #2923 | NextGEN Gallery Sidebar Widget | 40 | 59 | 10 | 500 | | | Output is not escaped |
| #2924 | N360 | Splash Screen | 46 | 32 | 13 | 500 | | | Output is not escaped |
| #2925 | Serbian Addons for WooCommerce | 91 | 34 | 13 | 600 | | | Text Domain Mismatch |
| #2926 | Aplazame | 38 | 34 | 39 | 600 | | | Non-prefixed global variable |
| #2927 | Custom Branding for WooCommerce | 94 | 1 | 6 | 600 | | | Non-prefixed hook name |
| #2928 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | | | Non-prefixed global variable |
| #2929 | TZ Flickr Widget | 40 | 67 | 7 | 500 | | | Output is not escaped |
| #2930 | Floating Side Tab | 34 | 94 | 153 | 600 | | | Non-prefixed global variable |
| #2931 | Aruba Migration Tool | 100 | | 1 | 600 | | | trademarked term |
| #2932 | Integrate Firebase | 64 | 26 | 7 | 500 | | | Output is not escaped |
| #2933 | Advanced Custom Fields – Widget Relationship Field add-on | 73 | 18 | 7 | 500 | | | Output is not escaped |
| #2934 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 500 | | | Non-prefixed class |
| #2935 | Tabs Block – Responsive Gutenberg Tabs for Block Editor | 99 | | 20 | 600 | | | Non-prefixed global variable |
| #2936 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #2937 | Easy!Appointments | 44 | 47 | 6 | 600 | | | Unsafe printing function |
| #2938 | Cudazi Scroll to Top | 88 | 7 | 4 | 500 | | | Missing Version |
| #2939 | Staffer | 42 | 88 | 42 | 600 | | | Output is not escaped |
| #2940 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | | | Text Domain Mismatch |
| #2941 | WP Responsive Auto Fit Text | 97 | 11 | 6 | 600 | | | wp function not compatible with requires wp |
| #2942 | Bitly URL Shortener | 79 | 65 | 22 | 600 | | | Text Domain Mismatch |
| #2943 | AFS Analytics | 34 | 194 | 98 | 600 | | | Text Domain Mismatch |
| #2944 | Star Rating Block for Block Editor | 98 | 4 | 1 | 600 | | | Missing direct file access protection |
| #2945 | Simpliest Social Share | 42 | 37 | 22 | 600 | | | Unsafe printing function |
| #2946 | Slimbox Plugin | 89 | 9 | 2 | 500 | | | Non Enqueued Script |
| #2947 | Default Media Uploader View | 98 | 3 | 1 | 600 | | | Missing direct file access protection |
| #2948 | Crowdfundly | 31 | 594 | 402 | 500 | | | Output is not escaped |
| #2949 | TechGasp Sound Master | 41 | 136 | 4 | 500 | | | Output is not escaped |
| #2950 | Websitescanner Custom Schema | 65 | 28 | 19 | 600 | | | wp function not compatible with requires wp |