| #3851 | Media Vault | 34 | 115 | 150 | 800 | | | Output is not escaped |
| #3852 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | | | Text Domain Mismatch |
| #3853 | Widgets Control | 40 | 92 | 47 | 800 | | | Output is not escaped |
| #3854 | Reset Customizer | 100 | | 1 | 800 | | | Non-prefixed class |
| #3855 | IdeaPush | 28 | 283 | 298 | 700 | | | Output is not escaped |
| #3856 | CiviCRM Member Sync | 76 | 8 | 70 | 800 | | | Non-prefixed global variable |
| #3857 | Nirweb support | 23 | 254 | 617 | 800 | | | Request data is not unslashed |
| #3858 | WP fail2ban Add-on for Contact Form 7 | 85 | 10 | 18 | 800 | | | Non-prefixed constant |
| #3859 | Extra Shipping Rates for WooCommerce | 74 | 15 | 19 | 800 | | | Non-prefixed global variable |
| #3860 | Tabbed Contents Block – Display Content in Tabbed Layout | 90 | 4 | 36 | 800 | | | Non-prefixed global variable |
| #3861 | reCAPTCHA for bbPress | 75 | 14 | 19 | 700 | | | Non-prefixed function |
| #3862 | Pro Categories Widget | 43 | 59 | 9 | 800 | | | Output is not escaped |
| #3863 | Pushover Integration for WooCommerce | 77 | 107 | 7 | 800 | | | Text Domain Mismatch |
| #3864 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | | | Nonce verification recommended |
| #3865 | Page Meta | 66 | 26 | 14 | 700 | | | Missing Arg Domain |
| #3866 | Product Image Hover Effects WOOC – WPSHARE247 | 37 | 161 | 94 | 800 | | | Output is not escaped |
| #3867 | Square Thumbnails | 35 | 43 | 317 | 800 | | | error log error log |
| #3868 | ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System | 28 | 1,013 | 239 | 800 | | | Unsafe printing function |
| #3869 | Show User ID | 97 | 4 | 3 | 800 | | | Non-prefixed function |
| #3870 | Auto Subpage Menu | 85 | 5 | 6 | 800 | | | Database parameter is not escaped |
| #3871 | Raffle Play Woocommerce | 31 | 151 | 199 | 800 | | | Output is not escaped |
| #3872 | Scroll Down Arrow | 69 | 30 | 30 | 800 | | | Missing Arg Domain |
| #3873 | Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms | 48 | 34 | 14 | 800 | | | Non Singular String Literal Domain |
| #3874 | Dynamic Copyright Year | 36 | 972 | 43 | 800 | | | Output is not escaped |
| #3875 | A Random Number | 89 | 3 | 5 | 800 | | | Non-prefixed function |
| #3876 | Popup for Contact Form 7 | 73 | 13 | 7 | 800 | | | Setting is missing a sanitization callback |
| #3877 | TP Education | 33 | 186 | 303 | 800 | | | Unsafe printing function |
| #3878 | Import Shopify To WP | 93 | 7 | 5 | 1k+ | | | Missing Translators Comment |
| #3879 | Posts Columns Manager | 56 | 47 | 2 | 800 | | | Output is not escaped |
| #3880 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | | | Short PHP open tag found |
| #3881 | WP Multisite Content Copier/Updater | 40 | 19 | 144 | 800 | | | Interpolated SQL is not prepared |
| #3882 | ProScores – Live Scores | 88 | 12 | 4 | 800 | | | wp function not compatible with requires wp |
| #3883 | Live Simple Clock | 62 | 23 | 1 | 800 | | | Output is not escaped |
| #3884 | Webdzier Companion | 32 | 539 | 89 | 800 | | | Text Domain Mismatch |
| #3885 | Admin Menu Groups | 60 | 26 | 10 | 800 | | | Output is not escaped |
| #3886 | Express Checkout via PayPal for WooCommerce | 31 | 158 | 200 | 800 | | | Nonce verification recommended |
| #3887 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | | | Input is not validated |
| #3888 | Product Category Slider for WooCommerce | 68 | 21 | 104 | 800 | | | Non-prefixed hook name |
| #3889 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #3890 | Protect schema.org markup in HTML editor | 98 | 3 | 0 | 800 | | | Missing direct file access protection |
| #3891 | Ultimate Custom Cursor | 40 | 138 | 3 | 800 | | | Output is not escaped |
| #3892 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #3893 | Eazy XMLRPC Pingback Disable | 97 | 4 | 1 | 800 | | | Missing direct file access protection |
| #3894 | Custom Background Extended | 48 | 13 | 23 | 800 | | | Input is not validated |
| #3895 | WPLMS MyCred AddOn | 34 | 383 | 73 | 800 | | | Text Domain Mismatch |
| #3896 | WP-KaTeX | 35 | 14 | 8 | 800 | | | Missing direct file access protection |
| #3897 | Payment Integration Wompi – El Salvador | 55 | 50 | 27 | 800 | | | Text Domain Mismatch |
| #3898 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #3899 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | | | curl curl setopt |
| #3900 | Sharing buttons shortcode for Jetpack | 98 | 3 | 2 | 800 | | | Missing direct file access protection |