| #3201 | xili-language | 24 | 1,501 | 523 | 600 | | | Output is not escaped |
| #3202 | Gabfire Widget Pack | 31 | 1,041 | 60 | 600 | | | Output is not escaped |
| #3203 | AI Image Alt Text Generator | 94 | | 7 | 600 | | | Nonce verification recommended |
| #3204 | AI for Home Services | 86 | 8 | 5 | 700 | | | Setting is missing a sanitization callback |
| #3205 | Easy Actions Scheduler Cleaner | 99 | 2 | 3 | 700 | | | wp function not compatible with requires wp |
| #3206 | Integrate Ecomail and Elementor Forms | 96 | 28 | 4 | 600 | | | Text Domain Mismatch |
| #3207 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #3208 | Order Weight for WooCommerce | 61 | 24 | 34 | 600 | | | Text Domain Mismatch |
| #3209 | Exif Caption | 97 | 3 | 25 | 600 | | | Non-prefixed global variable |
| #3210 | JustTables – WooCommerce Product Table | 26 | 534 | 652 | 600 | | | Non-prefixed global variable |
| #3211 | Postname Permalink Auto Redirect | 95 | 2 | 3 | 600 | | | Missing direct file access protection |
| #3212 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #3213 | Better Section Navigation | 97 | 12 | 10 | 600 | | | Post Not In exclude |
| #3214 | Chap Secure Password Login | 72 | 13 | 7 | 600 | | | Input is not validated |
| #3215 | Maintenance Switch | 35 | 12 | 59 | 700 | | | Non-prefixed function |
| #3216 | Speed Up – Optimize CSS Delivery | 89 | 4 | 1 | 600 | | | Output is not escaped |
| #3217 | MisterPlan – Booking Engines | 38 | 73 | 138 | 700 | | | Nonce verification recommended |
| #3218 | Secure Downloads | 28 | 616 | 406 | 600 | | | Output is not escaped |
| #3219 | WP Gravity Forms Constant Contact Plugin | 31 | 684 | 164 | 600 | | | Text Domain Mismatch |
| #3220 | WEN Skill Charts | 73 | | 23 | 600 | | | Request data is not unslashed |
| #3221 | Divi Styling Add-On for Gravity Forms | 97 | 2 | 5 | 600 | | | trademarked term |
| #3222 | Draft – Tailwind CSS for WordPress. | 88 | 10 | 5 | 600 | | | Text Domain Mismatch |
| #3223 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #3224 | Constructor for SiteOrigin | 61 | 29 | 6 | 600 | | | Output is not escaped |
| #3225 | NEX-Forms ADD ON – Digital Signatures | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #3226 | Premmerce User Roles | 26 | 597 | 1,357 | 600 | | | Non-prefixed global variable |
| #3227 | Blockly – Gutenberg Blocks | 86 | 6 | 17 | 600 | | | Non-prefixed constant |
| #3228 | AdSimple Cookie Consent Banner | 65 | 55 | 109 | 600 | | | wp function not compatible with requires wp |
| #3229 | Razorpay Subscriptions for WooCommerce | 44 | 28 | 35 | 600 | | | Exception output is not escaped |
| #3230 | Deliver via Shipos for WooCommerce | 35 | 11 | 78 | 600 | | | Nonce verification recommended |
| #3231 | Notix – Web Push Notifications | 44 | 22 | 41 | 600 | | | Non-prefixed global variable |
| #3232 | Voice Search | 99 | 2 | 1 | 600 | | | Missing direct file access protection |
| #3233 | Memory Meter | 35 | 2 | 3 | 600 | | | Request data is not unslashed |
| #3234 | CodePen Embed Block | 82 | 8 | 3 | 600 | | | Text Domain Mismatch |
| #3235 | Surbma | Divi Remove Project CPT & Taxonomies | 98 | 1 | 3 | 600 | | | Discouraged text-domain loading |
| #3236 | Shipping Live Rates for DHL Express for WooCommerce | 93 | 4 | 11 | 600 | | | Non-prefixed global variable |
| #3237 | Hidden Password Protected Pages | 99 | | 3 | 600 | | | Non-prefixed class |
| #3238 | The Excerpt re-reloaded | 85 | 7 | 0 | 600 | | | Output is not escaped |
| #3239 | BuddyPress Notification Widget | 39 | 54 | 31 | 600 | | | Output is not escaped |
| #3240 | WPC Force Sells for WooCommerce | 40 | 38 | 97 | 600 | | | Output is not escaped |
| #3241 | Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program | 34 | 131 | 352 | 600 | | | Missing nonce verification |
| #3242 | WP DPE-GES | 92 | 84 | 59 | 600 | | | Text Domain Mismatch |
| #3243 | Easy Basic Authentication – Add basic auth to site or admin area | 46 | 14 | 28 | 600 | | | Input is not sanitized |
| #3244 | RDFa Breadcrumb | 53 | 27 | 13 | 600 | | | Output is not escaped |
| #3245 | Mail Baby SMTP | 22 | 385 | 699 | 600 | | | SQL query is not prepared |
| #3246 | AC Advanced Flamingo Settings | 66 | 6 | 32 | 700 | | | Nonce verification recommended |
| #3247 | Responsive Videos by Angie Makes | 97 | 5 | 2 | 600 | | | Missing direct file access protection |
| #3248 | Steady for WordPress | 35 | 6 | 13 | 600 | | | Non-prefixed global variable |
| #3249 | lazysizes | 86 | 12 | 3 | 600 | | | wp function not compatible with requires wp |
| #3250 | Toolbox for Beaver Builder | 90 | 8 | 7 | 600 | | | Missing Version |