| #2101 | Affilia – Affiliate Program | 34 | 80 | 170 | 500 | | | Nonce verification recommended |
| #2102 | affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display | 34 | 326 | 75 | 2k+ | | | Output is not escaped |
| #2103 | AGCA – Custom Dashboard & Login Page | 34 | 350 | 44 | 20k+ | | | Unsafe printing function |
| #2104 | All In One Favicon | 34 | 214 | 62 | 60k+ | | | Output is not escaped |
| #2105 | All-in-One WP Migration and Backup | 34 | 47 | 69 | 5m+ | | | Missing nonce verification |
| #2106 | Arconix Shortcodes | 34 | 129 | 108 | 4k+ | | | Output is not escaped |
| #2107 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | | | Exception output is not escaped |
| #2108 | Audit Trail | 34 | 90 | 107 | 10k+ | | | Unsafe printing function |
| #2109 | Auto Listings – Car Listings & Car Dealership Plugin for WordPress | 34 | 80 | 318 | 2k+ | | | Non-prefixed global variable |
| #2110 | Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels | 34 | 86 | 255 | 9k+ | | | Direct Query |
| #2111 | AyeCode Connect | 34 | 178 | 253 | 10k+ | | | Nonce verification recommended |
| #2112 | Bayarcash WooCommerce | 34 | 148 | 138 | 700 | | | Non Singular String Literal Domain |
| #2113 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 600 | | | SQL query is not prepared |
| #2114 | Blog-in-Blog | 34 | 64 | 93 | 800 | | | Non-prefixed function |
| #2115 | BoldGrid Easy SEO – Simple and Effective SEO | 34 | 149 | 104 | 40k+ | | | Text Domain Mismatch |
| #2116 | Buckets | 34 | 68 | 76 | 500 | | | Output is not escaped |
| #2117 | BuddyPress & BuddyBoss Member Profile Forms | 34 | 154 | 121 | 400 | | | Text Domain Mismatch |
| #2118 | Cache Master | 34 | 371 | 27 | 400 | | | Output is not escaped |
| #2119 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #2120 | SMS Abandoned Cart Recovery ✦ CartBoss | 34 | 67 | 72 | 400 | | | SQL query is not prepared |
| #2121 | Checkout Field Editor for WooCommerce – Checkout Manager | 34 | 122 | 64 | 20k+ | | | Text Domain Mismatch |
| #2122 | Clean Testimonials | 34 | 127 | 87 | 400 | | | Output is not escaped |
| #2123 | CM Search And Replace – Optimize content edits with a powerful search and replace tool | 34 | 286 | 111 | 2k+ | | | Output is not escaped |
| #2124 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #2125 | Cornerstone | 34 | 161 | 174 | 30k+ | | | Nonce verification recommended |
| #2126 | CSS JS Manager, Async JavaScript, Defer Render Blocking CSS | 34 | 76 | 106 | 1k+ | | | Input is not validated |
| #2127 | Custom Login Page by SeedProd | 34 | 330 | 125 | 500 | | | Output is not escaped |
| #2128 | Custom Post Type Attachment | 34 | 153 | 49 | 800 | | | wp function not compatible with requires wp |
| #2129 | Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager | 34 | 32 | 307 | 100k+ | | | Non-prefixed global variable |
| #2130 | Datafeedr API | 34 | 307 | 48 | 6k+ | | | Output is not escaped |
| #2131 | DD Last Viewed | 34 | 193 | 132 | 500 | | | Output is not escaped |
| #2132 | Debug Log Manager Tool | 34 | 44 | 143 | 3k+ | | | Nonce verification recommended |
| #2133 | Document Library Lite | 34 | 149 | 85 | 4k+ | | | Text Domain Mismatch |
| #2134 | Download After Email – Subscribe & Download Form Plugin | 34 | 22 | 356 | 7k+ | | | Input is not validated |
| #2135 | Dr. Flex | 34 | 83 | 51 | 1k+ | | | Output is not escaped |
| #2136 | Delisho – Recipe Widgets and Blocks | 34 | 60 | 355 | 1k+ | | | Input is not sanitized |
| #2137 | Easy Social Sharing | 34 | 16 | 240 | 1k+ | | | Non-prefixed global variable |
| #2138 | EasyIndex | 34 | 74 | 135 | 1k+ | | | Missing nonce verification |
| #2139 | Edit Flow | 34 | 103 | 227 | 4k+ | | | Non-prefixed hook name |
| #2140 | Einsatzverwaltung | 34 | 152 | 128 | 1k+ | | | Output is not escaped |
| #2141 | ECS – Ele Custom Skin for Elementor | 34 | 99 | 205 | 100k+ | | | Text Domain Mismatch |
| #2142 | Enhanced Text Widget | 34 | 101 | 58 | 30k+ | | | Output is not escaped |
| #2143 | ePayco Plugin for WooCommerce | 34 | 155 | 136 | 3k+ | | | Text Domain Mismatch |
| #2144 | Essential Classy Addons for Elementor – 150+ Widgets, Templates & Performance Tools | 34 | 283 | 186 | 500 | | | Output is not escaped |
| #2145 | Estimated Delivery for WooCommerce | 34 | 301 | 70 | 1k+ | | | Short PHP open tag found |
| #2146 | Event Calendar Newsletter | 34 | 96 | 167 | 600 | | | Non-prefixed hook name |
| #2147 | Event Post | 34 | 329 | 99 | 1k+ | | | Output is not escaped |
| #2148 | Evento | 34 | 583 | 60 | 1k+ | | | Text Domain Mismatch |
| #2149 | Export Customers Data | 34 | 109 | 49 | 500 | | | Text Domain Mismatch |
| #2150 | Social LikeBox & Feed | 34 | 393 | 141 | 10k+ | | | Non Singular String Literal Domain |