| #3301 | Category Archives Block | 98 | 14 | 5 | 900 | | | Missing Arg Domain |
| #3302 | Meks Easy Maps | 82 | 13 | 13 | 900 | | | Input is not sanitized |
| #3303 | Address Autocomplete Anything | 40 | 94 | 32 | 900 | | | Unsafe printing function |
| #3304 | Easy Flash Embed | 83 | 9 | 1 | 900 | | | Output is not escaped |
| #3305 | Webmention | 33 | 64 | 89 | 900 | | | Output is not escaped |
| #3306 | Dashboard Commander | 69 | 13 | 2 | 900 | | | Output is not escaped |
| #3307 | Bulk Order Form for WooCommerce | 81 | 8 | 98 | 900 | | | Non-prefixed hook name |
| #3308 | Church Admin | 23 | 1,643 | 4,202 | 900 | | | Direct Query |
| #3309 | Links shortcode | 40 | 73 | 13 | 900 | | | Unsafe printing function |
| #3310 | Copyscape Premium | 40 | 148 | 133 | 800 | | | SQL query is not prepared |
| #3311 | 12 Step Meeting List | 22 | 156 | 593 | 900 | | | Non-prefixed global variable |
| #3312 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #3313 | Simple Sticky Header on Scroll | 70 | 31 | 8 | 900 | | | Output is not escaped |
| #3314 | Yandex.Metrika | 42 | 15 | 20 | 900 | | | Unsafe printing function |
| #3315 | Medialist | 98 | 1 | 4 | 900 | | | Missing Version |
| #3316 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #3317 | SEOPress for MainWP | 61 | 240 | 106 | 900 | | | Text Domain Mismatch |
| #3318 | onepay Payment Gateway For WooCommerce | 70 | 49 | 13 | 900 | | | Text Domain Mismatch |
| #3319 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | | | Output is not escaped |
| #3320 | Clone Woo Orders – Free by WP Masters | 73 | 13 | 8 | 900 | | | Output is not escaped |
| #3321 | Autocomplete For Relevanssi | 35 | 30 | 9 | 900 | | | Unsafe printing function |
| #3322 | Delay Redirects | 75 | 5 | 8 | 900 | | | Request data is not unslashed |
| #3323 | Nelio Popups | 99 | 5 | 0 | 900 | | | Missing direct file access protection |
| #3324 | Auto Ping Booster Free | 50 | 18 | 21 | 900 | | | Setting is missing a sanitization callback |
| #3325 | Slider Revolution Search Replace | 65 | 5 | 14 | 900 | | | Input is not validated |
| #3326 | Zeffy Donate Button | 90 | 3 | 0 | 900 | | | Output is not escaped |
| #3327 | VRTs – Visual Regression Tests | 58 | 61 | 118 | 900 | | | Database parameter is not escaped |
| #3328 | Smart Attachment Page Remove | 44 | 82 | 3 | 900 | | | Output is not escaped |
| #3329 | WPZOOM Beaver Builder Templates | 35 | 3 | 5 | 900 | | | trademarked term |
| #3330 | Autopay dla WooCommerce | 32 | 95 | 83 | 900 | | | Output is not escaped |
| #3331 | Use Administrator Password | 93 | 2 | 4 | 900 | | | Non-prefixed hook name |
| #3332 | WP Theme Changelogs | 68 | 13 | 18 | 900 | | | Nonce verification recommended |
| #3333 | Photospace Responsive Gallery | 83 | 115 | 14 | 900 | | | Text Domain Mismatch |
| #3334 | WC Moneris Payment Gateway | 35 | 104 | 28 | 900 | | | Text Domain Mismatch |
| #3335 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | | | Output is not escaped |
| #3336 | FV Antispam | 26 | 332 | 239 | 900 | | | Output is not escaped |
| #3337 | WP Mailgun SMTP | 38 | 99 | 51 | 900 | | | Text Domain Mismatch |
| #3338 | Display Tweets | 29 | 135 | 135 | 900 | | | Non-prefixed global variable |
| #3339 | Quick Child Theme Generator | 40 | 22 | 74 | 900 | | | Request data is not unslashed |
| #3340 | WP Geo | 35 | 180 | 84 | 900 | | | Output is not escaped |
| #3341 | Formsite | Embed online forms to collect orders, registrations, leads, and surveys | 98 | 3 | 2 | 900 | | | Missing direct file access protection |
| #3342 | Hide Archive Label | 100 | | 0 | 900 | | | No open findings |
| #3343 | Elmo | 91 | 6 | 2 | 900 | | | Missing direct file access protection |
| #3344 | Mini Ajax Cart for WooCommerce | 35 | 297 | 240 | 900 | | | Text Domain Mismatch |
| #3345 | Block Guide Lines | 91 | 6 | 3 | 900 | | | Non-prefixed function |
| #3346 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #3347 | Widgets for Thumbtack Reviews | 96 | | 349 | 900 | | | Non-prefixed global variable |
| #3348 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #3349 | Simple Sticky Add To Cart For WooCommerce | 33 | 401 | 70 | 900 | | | Text Domain Mismatch |
| #3350 | mosparo Integration | 35 | 114 | 301 | 900 | | | Missing nonce verification |