| #3101 | Really Simple Under Construction Page | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #3102 | eSewa – Nepal First Payment Gateway | 77 | 48 | 9 | 600 | | | Text Domain Mismatch |
| #3103 | Login Widget for Ultimate Member | 78 | 10 | 10 | 600 | | | Input is not sanitized |
| #3104 | TinyMCE Recover | 96 | 5 | 1 | 600 | | | Missing direct file access protection |
| #3105 | PixelCraft with WebP | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #3106 | User Last Login | 65 | 27 | 5 | 600 | | | Output is not escaped |
| #3107 | Widget Manager Light | 30 | 233 | 83 | 600 | | | Text Domain Mismatch |
| #3108 | Unlimited Background Slider | 39 | 66 | 53 | 600 | | | Output is not escaped |
| #3109 | Wicked Block Conditions | 82 | 6 | 6 | 600 | | | Nonce verification recommended |
| #3110 | HyperPay Payments | 98 | 4 | 0 | 600 | | | Missing direct file access protection |
| #3111 | Private Store for WooCommerce B2B & Wholesale by B2BKing | 70 | 86 | 8 | 600 | | | Text Domain Mismatch |
| #3112 | fitness calculators | 70 | 94 | 25 | 600 | | | Missing Arg Domain |
| #3113 | Simple Footnotes | 87 | 11 | 1 | 600 | | | wp function not compatible with requires wp |
| #3114 | Remove Comment Website/URL Box | 98 | 2 | 1 | 600 | | | outdated tested upto header |
| #3115 | Vast Demo Import | 42 | 180 | 113 | 600 | | | Text Domain Mismatch |
| #3116 | AMS Post And Page Duplicator | 62 | 14 | 13 | 600 | | | Text Domain Mismatch |
| #3117 | Portfolio Toolkit | 98 | 3 | 3 | 600 | | | Non-prefixed function |
| #3118 | Easy HTML Sitemap | 45 | 75 | 8 | 600 | | | Text Domain Mismatch |
| #3119 | Code Block Syntax Highlighter for Elementor | 78 | 344 | 3 | 600 | | | Non Singular String Literal Domain |
| #3120 | PHP Browser Detection | 28 | 68 | 49 | 600 | | | Non-prefixed function |
| #3121 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #3122 | Storefront Online Ordering by DoorDash | 42 | 76 | 10 | 600 | | | Output is not escaped |
| #3123 | Video Tab For WooCommerce | 68 | 7 | 13 | 600 | | | Missing nonce verification |
| #3124 | WP Extended – The Ultimate WordPress Toolkit | 21 | 1,253 | 398 | 600 | | | Non Singular String Literal Domain |
| #3125 | Fetchify | 85 | 154 | 19 | 600 | | | Text Domain Mismatch |
| #3126 | HREFLANG Tags Management By Webnow | 83 | 2 | 34 | 600 | | | Non-prefixed global variable |
| #3127 | bbPress Login Register Links On Forum Topic Pages | 38 | 142 | 36 | 600 | | | Text Domain Mismatch |
| #3128 | Iconic Copy Text Blocks | 99 | 1 | 1 | 600 | | | Non-prefixed class |
| #3129 | Smart Keywords Tool – 智能关键词插件 | 31 | 361 | 33 | 600 | | | Non Singular String Literal Domain |
| #3130 | Custom Currency Sign | 99 | 3 | 0 | 600 | | | Text Domain Mismatch |
| #3131 | VikRentItems Flexible Rental Management System | 24 | 4,755 | 4,639 | 600 | | | Non-prefixed global variable |
| #3132 | TinyMCE Advanced Language Pack | 98 | 4 | 0 | 600 | | | Missing direct file access protection |
| #3133 | Emails Catch All | 99 | | 10 | 600 | | | Non-prefixed constant |
| #3134 | Happierleads – Identify your B2B website visitors even if they work remotely | 63 | 32 | 7 | 600 | | | wp function not compatible with requires wp |
| #3135 | Video Gallery | 35 | 336 | 178 | 600 | | | Output is not escaped |
| #3136 | Page Management Dropdown | 97 | 3 | 3 | 600 | | | Direct Query |
| #3137 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #3138 | Highcompress Image Compressor | 41 | 106 | 69 | 600 | | | Text Domain Mismatch |
| #3139 | Unlimited Theme Addon For Elementor | 86 | 74 | 68 | 600 | | | Missing direct file access protection |
| #3140 | bbPress Enable TinyMCE Visual Tab | 87 | 12 | 4 | 600 | | | Text Domain Mismatch |
| #3141 | Helpful – Article Feedback Plugin | 86 | 8 | 17 | 600 | | | Database parameter is not escaped |
| #3142 | ACF Enhanced Message Field | 71 | 29 | 1 | 600 | | | Text Domain Mismatch |
| #3143 | Lead Generation Form | 35 | 21 | 63 | 600 | | | Non-prefixed global variable |
| #3144 | Comment Email Reply | 98 | 6 | 2 | 600 | | | Text Domain Mismatch |
| #3145 | RestaurantPress | 26 | 265 | 518 | 600 | | | Output is not escaped |
| #3146 | Easy Sticky Buttons | 71 | 21 | 16 | 600 | | | Short PHP open tag found |
| #3147 | Smartslider | 83 | 13 | 0 | 600 | | | Output is not escaped |
| #3148 | Lordicon | 98 | 2 | 2 | 600 | | | Non-prefixed function |
| #3149 | Blockenberg — 600+ Advanced Gutenberg Blocks for WordPress Block Editor | 91 | 4 | 6 | 700 | | | block api version too low |
| #3150 | BP Group Documents | 36 | 27 | 195 | 600 | | | Non-prefixed global variable |