| #2201 | Optima Express IDX | 34 | 71 | 237 | 10k+ | | | Non-prefixed class |
| #2202 | Child Theme Creator by Orbisius | 34 | 86 | 39 | 10k+ | | | Output is not escaped |
| #2203 | Team Members Profile – Employee Directory & Staff Showcase | 34 | 339 | 90 | 600 | | | Output is not escaped |
| #2204 | OwnerRez | 34 | 79 | 56 | 700 | | | Unsafe printing function |
| #2205 | MW Font Changer | 34 | 463 | 75 | 7k+ | | | Text Domain Mismatch |
| #2206 | PDF Invoices and Packing Slips For WooCommerce | 34 | 108 | 284 | 1k+ | | | Non-prefixed global variable |
| #2207 | PhonePe Payment Solutions | 34 | 77 | 106 | 10k+ | | | Missing direct file access protection |
| #2208 | PiWeb Delivery & Pickup Date Time for WooCommerce | 34 | 380 | 175 | 500 | | | Text Domain Mismatch |
| #2209 | Podigee WordPress Quick Publish – now with Gutenberg support! | 34 | 108 | 95 | 700 | | | Text Domain Mismatch |
| #2210 | Progress Bar & Skill Bar | 34 | 175 | 179 | 1k+ | | | Non Singular String Literal Domain |
| #2211 | PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget | 34 | 46 | 298 | 9k+ | | | Missing nonce verification |
| #2212 | PW WooCommerce Bulk Edit | 34 | 219 | 149 | 20k+ | | | Unsafe printing function |
| #2213 | PW WooCommerce Gift Cards | 34 | 238 | 185 | 20k+ | | | Output is not escaped |
| #2214 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | | | Text Domain Mismatch |
| #2215 | Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | 34 | 261 | 863 | 20k+ | | | Non-prefixed global variable |
| #2216 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | | | Output is not escaped |
| #2217 | Responsive Menu – Create Mobile-Friendly Menu | 34 | 68 | 40 | 70k+ | | | Nonce verification recommended |
| #2218 | Event Timeline – Vertical Timeline | 34 | 26 | 684 | 1k+ | | | Non-prefixed global variable |
| #2219 | RTMForm Builder | 34 | 188 | 209 | 30k+ | | | Text Domain Mismatch |
| #2220 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #2221 | Saphali Woocommerce Lite | 34 | 376 | 313 | 10k+ | | | Non-prefixed global variable |
| #2222 | Search Engine Insights for Google Search Console | 34 | 174 | 113 | 2k+ | | | Output is not escaped |
| #2223 | Search Meter | 34 | 191 | 94 | 20k+ | | | Output is not escaped |
| #2224 | Security Safe | 34 | 193 | 164 | 700 | | | Missing Translators Comment |
| #2225 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | | Output is not escaped |
| #2226 | Shift8 CDN | 34 | 81 | 25 | 600 | | | Output is not escaped |
| #2227 | Student Result or Employee Database | 34 | 89 | 98 | 1k+ | | | Direct Query |
| #2228 | Social Integration for BlueSky | 34 | 98 | 147 | 700 | | | Non-prefixed global variable |
| #2229 | Software License Manager | 34 | 69 | 289 | 900 | | | Nonce verification recommended |
| #2230 | Subscribe to Download Lite – Email Before Download Plugin | 34 | 106 | 157 | 400 | | | Non-prefixed global variable |
| #2231 | SuperFrete | 34 | 84 | 242 | 1k+ | | | Request data is not unslashed |
| #2232 | Swiftype Site Search Plugin for WordPress | 34 | 250 | 50 | 400 | | | Output is not escaped |
| #2233 | Tab Ultimate | 34 | 107 | 138 | 1k+ | | | Output is not escaped |
| #2234 | TaxJar – Sales Tax Automation for WooCommerce | 34 | 236 | 170 | 5k+ | | | Text Domain Mismatch |
| #2235 | Testimonial Slider | 34 | 448 | 262 | 3k+ | | | Unsafe printing function |
| #2236 | Easy Mega Menu for WordPress – ThemeHunk | 34 | 480 | 256 | 1k+ | | | Text Domain Mismatch |
| #2237 | Throws SPAM Away | 34 | 327 | 123 | 10k+ | | | Missing Arg Domain |
| #2238 | Tidio – Live Chat & AI Chatbots | 34 | 52 | 19 | 80k+ | | | curl curl setopt |
| #2239 | Travel Agency Companion – Create Tour & Travel Website Using WP Travel Engine | 34 | 128 | 211 | 4k+ | | | Non-prefixed global variable |
| #2240 | Tools for Twitter | 34 | 135 | 87 | 1k+ | | | Output is not escaped |
| #2241 | Ultimate 410 Gone Status Code | 34 | 136 | 65 | 7k+ | | | Output is not escaped |
| #2242 | Ultra Companion – Companion plugin for WPoperation Themes | 34 | 73 | 116 | 1k+ | | | Missing direct file access protection |
| #2243 | Useful Blocks | 34 | 214 | 22 | 20k+ | | | Output is not escaped |
| #2244 | Visual Form Builder | 34 | 82 | 329 | 20k+ | | | Direct Query |
| #2245 | Abandoned Cart Reports For WooCommerce | 34 | 133 | 163 | 1k+ | | | Output is not escaped |
| #2246 | Donation Platform for WooCommerce: Fundraising & Donation Management | 34 | 331 | 448 | 7k+ | | | Non-prefixed global variable |
| #2247 | DPD SK for WooCommerce | 34 | 130 | 165 | 700 | | | Output is not escaped |
| #2248 | Pix Automático com Pagarme para WooCommerce | 34 | 68 | 66 | 500 | | | Non-prefixed global variable |
| #2249 | Weaver Xtreme Theme Support | 34 | 1,625 | 43 | 9k+ | | | Text Domain Mismatch |
| #2250 | PagHiper Boleto e PIX para WooCommerce | 34 | 29 | 138 | 1k+ | | | Missing nonce verification |