| #2951 | Input Masks for Elementor Forms | 95 | 84 | 5 | 600 | | | wp function not compatible with requires wp |
| #2952 | Comment Blacklist Manager | 64 | 14 | 8 | 600 | | | Output is not escaped |
| #2953 | Content Filter – Censor All Offensive Content From Your Site | 96 | 17 | 6 | 500 | | | Text Domain Mismatch |
| #2954 | Stock Quotes List | 38 | 72 | 13 | 600 | | | Output is not escaped |
| #2955 | Black Bar | 69 | 78 | 39 | 500 | | | Short PHP open tag found |
| #2956 | Simple Slider Block – Create Sliders From Core Blocks | 87 | 6 | 34 | 600 | | | Non-prefixed global variable |
| #2957 | Ni WooCommerce Admin Order Columns | 79 | 15 | 4 | 600 | | | Output is not escaped |
| #2958 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #2959 | SweepPress: Website Cleanup and Optimization | 35 | 71 | 176 | 500 | | | Non-prefixed global variable |
| #2960 | Widget Contact Now | 42 | 69 | 6 | 500 | | | Output is not escaped |
| #2961 | QR Code PicPay for WooCommerce | 61 | 15 | 25 | 600 | | | Non-prefixed global variable |
| #2962 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 500 | | | Output is not escaped |
| #2963 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |
| #2964 | Add & Replace Affiliate Links for Amazon | 40 | 39 | 52 | 600 | | | Output is not escaped |
| #2965 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 600 | | | Missing nonce verification |
| #2966 | Archive Posts Sort Customize | 33 | 338 | 97 | 600 | | | Output is not escaped |
| #2967 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | | | Text Domain Mismatch |
| #2968 | Reoon Email Verifier | 43 | 22 | 38 | 600 | | | Missing nonce verification |
| #2969 | Campo RUT para CF7 | 84 | 6 | 7 | 600 | | | Missing nonce verification |
| #2970 | Custom Error Pages | 45 | 51 | 16 | 600 | | | Output is not escaped |
| #2971 | Remove Admin Toolbar | 35 | 13 | 7 | 600 | | | Missing direct file access protection |
| #2972 | WSW – Shopify WooCommerce / WordPress Integration and Migration | 23 | 1,449 | 1,612 | 600 | | | Non-prefixed global variable |
| #2973 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 600 | | | Text Domain Mismatch |
| #2974 | Header Enhancement | 100 | | 0 | 600 | | | No open findings |
| #2975 | MetaTag | 67 | 7 | 13 | 600 | | | Input is not validated |
| #2976 | ActiveTrail – Contact Form 7 | 42 | 18 | 85 | 600 | | | Missing nonce verification |
| #2977 | WP Easy Uploader | 31 | 202 | 113 | 600 | | | Non Singular String Literal Domain |
| #2978 | AffiliateWP – Allow Own Referrals | 78 | 37 | 10 | 500 | | | Text Domain Mismatch |
| #2979 | Cool Author Box – For Widget and Post Content | 25 | 853 | 1,379 | 600 | | | Non-prefixed global variable |
| #2980 | 404 Image Redirection (Replace Broken Images) | 47 | 118 | 85 | 600 | | | Text Domain Mismatch |
| #2981 | Telegram Bot & Channel | 33 | 182 | 113 | 600 | | | Unsafe printing function |
| #2982 | Member Swipe for BuddyPress | 68 | 9 | 13 | 500 | | | Missing direct file access protection |
| #2983 | Card Transfer Gateway | 98 | 2 | 2 | 600 | | | Discouraged text-domain loading |
| #2984 | New Recent Posts Select Categories By Thao Marky | 64 | 33 | 1 | 500 | | | Text Domain Mismatch |
| #2985 | Post Ratings | 40 | 160 | 32 | 600 | | | Output is not escaped |
| #2986 | XML Feed for Skroutz & BestPrice for WooCommerce | 57 | 12 | 50 | 600 | | | Input is not sanitized |
| #2987 | Allow Cyrillic Usernames | 98 | 3 | 0 | 600 | | | Missing direct file access protection |
| #2988 | Posts and Users Stats | 82 | | 183 | 600 | | | Non-prefixed global variable |
| #2989 | Easy Replace Image | 99 | 1 | 5 | 600 | | | Non-prefixed constant |
| #2990 | Wishlist for WooCommerce | 29 | 610 | 296 | 600 | | | Output is not escaped |
| #2991 | Clean Archives Reloaded | 55 | 25 | 6 | 600 | | | Unsafe printing function |
| #2992 | ZZAZZ | 98 | 8 | 2 | 500 | | | Missing direct file access protection |
| #2993 | Beauty Form Styler for Gravity Forms | 38 | 70 | 93 | 600 | | | Output is not escaped |
| #2994 | EDD Hide Download | 65 | 13 | 13 | 600 | | | Output is not escaped |
| #2995 | Mailster Live | 48 | 22 | 37 | 600 | | | Missing Translators Comment |
| #2996 | Disable Gutenberg | 98 | 2 | 2 | 600 | | | trademarked term |
| #2997 | SAML IDP (Identity Provider) – Login with Website Users | 35 | 13 | 326 | 600 | | | Non-prefixed global variable |
| #2998 | Remove/Hide Admin Toolbar | 97 | 2 | 3 | 600 | | | outdated tested upto header |
| #2999 | Theater for WordPress | 26 | 348 | 344 | 600 | | | Output is not escaped |
| #3000 | Text Expander | 67 | 50 | 15 | 600 | | | wp function not compatible with requires wp |