| #3151 | WP Flexslider | 35 | 15 | 7 | 600 | | | Unsafe printing function |
| #3152 | SSL Certificate Manager | 61 | 14 | 7 | 600 | | | Output is not escaped |
| #3153 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 600 | | | Non-prefixed global variable |
| #3154 | TinyMCE Smiley Button | 97 | 3 | 3 | 600 | | | Missing Version |
| #3155 | WP User Groups | 49 | 44 | 32 | 600 | | | Missing Translators Comment |
| #3156 | PVB Contact Form 7 Calculator | 99 | 4 | 3 | 600 | | | Missing direct file access protection |
| #3157 | getLaw WP API Client | 91 | 11 | 4 | 600 | | | curl curl setopt |
| #3158 | Contact Form 7 Leads Tracking | 72 | 3 | 23 | 600 | | | Input is not sanitized |
| #3159 | All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier | 32 | 325 | 102 | 600 | | | Missing Arg Domain |
| #3160 | Swift Switcher — Bulk & Custom Post Type Converter | 98 | 1 | 5 | 600 | | | Direct Query |
| #3161 | SimpleMaps | 88 | 81 | 19 | 600 | | | wp function not compatible with requires wp |
| #3162 | Stop Pinging Yourself | 49 | 47 | 8 | 600 | | | Non Singular String Literal Domain |
| #3163 | Alligator Menu Popup | 87 | 4 | 1 | 600 | | | Missing Arg Domain |
| #3164 | GF Upload to Email Attachment | 96 | 6 | 5 | 600 | | | error log print r |
| #3165 | IntelliWidget Per Page Custom Menus and Dynamic Content | 36 | 586 | 162 | 600 | | | Output is not escaped |
| #3166 | WP Wrapper | 57 | 13 | 29 | 600 | | | Input is not validated |
| #3167 | Query Loop Load More | 91 | 2 | 6 | 700 | | | Post Not In exclude |
| #3168 | Slug or PostID | 87 | 3 | 4 | 600 | | | Missing nonce verification |
| #3169 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | | | Non-prefixed global variable |
| #3170 | MASS Users Password Reset | 100 | | 0 | 600 | | | No open findings |
| #3171 | WPFrom Email | 51 | 44 | 12 | 600 | | | Output is not escaped |
| #3172 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #3173 | Uptime Robot Plugin for WordPress | 35 | 398 | 324 | 600 | | | Text Domain Mismatch |
| #3174 | Checkout Upsell Funnel for WooCommerce | 44 | 6 | 244 | 600 | | | Non-prefixed global variable |
| #3175 | HLS Player | 99 | 1 | 1 | 600 | | | Non-prefixed class |
| #3176 | uCalc | 35 | 78 | 8 | 600 | | | Text Domain Mismatch |
| #3177 | ShareThis Reaction Buttons | 35 | 1 | 7 | 600 | | | Non-prefixed global variable |
| #3178 | Lazy Load XT | 41 | 87 | 7 | 600 | | | Non Singular String Literal Domain |
| #3179 | Ship to a Different Address Checked/Unchecked for WooCommerce | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #3180 | Fusion Page Builder : Extension – Gallery | 42 | 29 | 30 | 600 | | | Output is not escaped |
| #3181 | Parcel Pro | 26 | 171 | 220 | 600 | | | Output is not escaped |
| #3182 | Preserved HTML Editor Markup | 53 | 12 | 22 | 600 | | | Output is not escaped |
| #3183 | Slimbox | 97 | 4 | 1 | 600 | | | Missing direct file access protection |
| #3184 | Visual Slider | 92 | 3 | 266 | 600 | | | Non-prefixed function |
| #3185 | Darkify – Dark Mode & Night Mode for Website & Admin (Dark Theme Included) | 38 | 38 | 183 | 600 | | | Non-prefixed global variable |
| #3186 | Disable Responsive Images | 97 | 5 | 0 | 600 | | | Forbidden PHP function found |
| #3187 | remarketable | 30 | 281 | 93 | 600 | | | Output is not escaped |
| #3188 | WC MyParcel Belgium | 86 | 340 | 79 | 600 | | | Text Domain Mismatch |
| #3189 | WPBean Form Popup for WPForms and Contact Form 7 – Create Popup Forms Easily | 94 | | 22 | 600 | | | Direct Query |
| #3190 | Run SQL Query | 78 | 13 | 8 | 600 | | | Non-prefixed global variable |
| #3191 | OtFm Gutenberg Spoiler – (or FAQ) collapse block | 35 | 6 | 9 | 600 | | | trademarked term |
| #3192 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | | | Output is not escaped |
| #3193 | Dynamic Pricing and Discount Rules for WooCommerce | 25 | 531 | 1,569 | 600 | | | Non-prefixed global variable |
| #3194 | WPTurbo -WordPress性能优化插件 | 38 | 20 | 34 | 700 | | | Output is not escaped |
| #3195 | Popupsmart | 79 | 28 | 2 | 600 | | | Output is not escaped |
| #3196 | PHP Info | 84 | 8 | 5 | 600 | | | Output is not escaped |
| #3197 | Change Currency Symbol for WooCommerce | 97 | 6 | 1 | 600 | | | Text Domain Mismatch |
| #3198 | Wider Gravity Forms Stop Entries | 87 | 22 | 0 | 600 | | | Text Domain Mismatch |
| #3199 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #3200 | WonderPush – Web Push Notifications – WooCommerce Abandoned Cart – GDPR | 30 | 152 | 192 | 600 | | | Missing direct file access protection |