| #2001 | JetWidgets for Elementor and WooCommerce | 33 | 187 | 146 | 7k+ | | | Text Domain Mismatch |
| #2002 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | | | Output is not escaped |
| #2003 | Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid | 33 | 274 | 106 | 3k+ | | | Text Domain Mismatch |
| #2004 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #2005 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #2006 | MailUp for WordPress – Email and Newsletter Subscription Form | 33 | 251 | 100 | 2k+ | | | Text Domain Mismatch |
| #2007 | MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics | 33 | 26 | 279 | 7k+ | | | Non-prefixed global variable |
| #2008 | MAS Companies For WP Job Manager | 33 | 62 | 308 | 1k+ | | | Non-prefixed hook name |
| #2009 | MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | 33 | 2 | 503 | 700 | | | Non-prefixed function |
| #2010 | Membership For WooCommerce | 33 | 40 | 659 | 900 | | | Non-prefixed global variable |
| #2011 | Merge + Minify + Refresh | 33 | 78 | 26 | 4k+ | | | date date |
| #2012 | Mollie Payments for WooCommerce | 33 | 70 | 123 | 100k+ | | | Dynamic hook name |
| #2013 | Molongui Post Contributors: Multi-Role Contributor Attribution | 33 | 240 | 162 | 500 | | | Output is not escaped |
| #2014 | More Types | 33 | 227 | 198 | 800 | | | Non-prefixed global variable |
| #2015 | Newebpay Payment | 33 | 146 | 115 | 600 | | | Text Domain Mismatch |
| #2016 | News Announcement Scroll | 33 | 237 | 259 | 2k+ | | | Non-prefixed global variable |
| #2017 | GDPR CCPA Compliance & Cookie Consent Banner | 33 | 622 | 87 | 1k+ | | | Non Singular String Literal Domain |
| #2018 | Nomad World Map | 33 | 424 | 191 | 700 | | | Text Domain Mismatch |
| #2019 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #2020 | Offen | 33 | 313 | 115 | 500 | | | Output is not escaped |
| #2021 | Pastacode | 33 | 77 | 66 | 400 | | | Non-prefixed global variable |
| #2022 | Payflex Payment Gateway | 33 | 181 | 61 | 1k+ | | | Text Domain Mismatch |
| #2023 | Payoneer Checkout | 33 | 168 | 45 | 5k+ | | | Exception output is not escaped |
| #2024 | PeproDev WooCommerce Receipt Uploader | 33 | 325 | 49 | 1k+ | | | Non Singular String Literal Domain |
| #2025 | پینوا | Pinova | 33 | 171 | 75 | 500 | | | Output is not escaped |
| #2026 | Plugin Organizer | 33 | 325 | 257 | 10k+ | | | Output is not escaped |
| #2027 | Podcast Subscribe Buttons | 33 | 552 | 39 | 5k+ | | | Text Domain Mismatch |
| #2028 | FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor | 33 | 356 | 271 | 500 | | | Output is not escaped |
| #2029 | Post Lists View Custom | 33 | 462 | 150 | 2k+ | | | Missing Arg Domain |
| #2030 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | | Missing Translators Comment |
| #2031 | QNAP NAS Backup | 33 | 374 | 70 | 2k+ | | | Non Singular String Literal Domain |
| #2032 | Quick Restaurant Reservations | 33 | 654 | 179 | 500 | | | Text Domain Mismatch |
| #2033 | Frisbii Pay | 33 | 91 | 292 | 1k+ | | | Non-prefixed global variable |
| #2034 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | | | Output is not escaped |
| #2035 | Review Slider for WooCommerce | 33 | 160 | 422 | 400 | | | Non-prefixed global variable |
| #2036 | Reviews Plus | 33 | 223 | 378 | 1k+ | | | Non-prefixed function |
| #2037 | RTMKit | 33 | 11 | 388 | 50k+ | | | Non-prefixed global variable |
| #2038 | RSS Feed Pro | 33 | 484 | 16 | 500 | | | Output is not escaped |
| #2039 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #2040 | Save as PDF Plugin by PDFCrowd | 33 | 299 | 254 | 1k+ | | | Non-prefixed global variable |
| #2041 | Schema & Structured Data for WP & AMP | 33 | 63 | 246 | 100k+ | | | Non-prefixed global variable |
| #2042 | Service Box – Icon Box Showcase | 33 | 385 | 230 | 3k+ | | | Non Singular String Literal Domain |
| #2043 | Sessions | 33 | 196 | 103 | 900 | | | Output is not escaped |
| #2044 | ShopPress – Shop Builder for Elementor and WooCommerce | 33 | 11 | 879 | 500 | | | Non-prefixed global variable |
| #2045 | TaxCloud for WooCommerce | 33 | 23 | 261 | 500 | | | Non-prefixed function |
| #2046 | Slider Path for Elementor | 33 | 329 | 100 | 700 | | | Text Domain Mismatch |
| #2047 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #2048 | Social Rocket – Social Sharing Plugin | 33 | 1,016 | 255 | 1k+ | | | Unsafe printing function |
| #2049 | Spiffy Calendar | 33 | 473 | 243 | 3k+ | | | Output is not escaped |
| #2050 | Spin Wheel – Interactive spinning wheel that offers coupons | 33 | 680 | 313 | 500 | | | Unsafe printing function |