| #2301 | Ad Widget for WordPress | 35 | 68 | 14 | 2k+ | | | Output is not escaped |
| #2302 | Add to Calendar Button | 35 | 31 | 9 | 3k+ | | | Output is not escaped |
| #2303 | Admin Color Schemer | 35 | 166 | 20 | 1k+ | | | Exception output is not escaped |
| #2304 | Admin Slug Column | 35 | 2 | 0 | 5k+ | | | Hidden files included |
| #2305 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #2306 | CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress | 35 | 20 | 10 | 100k+ | | | Missing Arg Domain |
| #2307 | Advanced Permalinks | 35 | 94 | 76 | 400 | | | wp function not compatible with requires wp |
| #2308 | Advanced Reporting for Woocommerce | 35 | 296 | 101 | 400 | | | Output is not escaped |
| #2309 | Advanced Scrollbar – Custom Scrollbar Styling and Behavior | 35 | 2 | 0 | 700 | | | Hidden files included |
| #2310 | Affiliate Link Marker | 35 | 31 | 4 | 400 | | | Text Domain Mismatch |
| #2311 | AfterSalesPro Plugin | 35 | 24 | 111 | 400 | | | Nonce verification recommended |
| #2312 | Air WP Sync – Airtable to WordPress | 35 | 37 | 45 | 1k+ | | | Non-prefixed hook name |
| #2313 | AJAX Heartbeat Tool | 35 | 6 | 1 | 400 | | | Hidden files included |
| #2314 | Akismet Anti-spam: Spam Protection | 35 | 33 | 99 | 5m+ | | | Non-prefixed global variable |
| #2315 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | | | Non Singular String Literal Domain |
| #2316 | Amministrazione Trasparente | 35 | 80 | 46 | 1k+ | | | Output is not escaped |
| #2317 | Analytics Tracker | 35 | 4 | 5 | 1k+ | | | Hidden files included |
| #2318 | Animate In View | 35 | 12 | 0 | 1k+ | | | Hidden files included |
| #2319 | AnsPress – Question and answer | 35 | 22 | 778 | 3k+ | | | Non-prefixed function |
| #2320 | Antideo Email Validator | 35 | 38 | 98 | 800 | | | Missing nonce verification |
| #2321 | Tuskcode Map Pro for Bing Maps | 35 | 59 | 359 | 600 | | | Direct Query |
| #2322 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #2323 | Aquila Admin Theme | 35 | 151 | 329 | 3k+ | | | Non-prefixed global variable |
| #2324 | Archive Content with Archived Post Status | 35 | 3 | 2 | 5k+ | | | Discouraged text-domain loading |
| #2325 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | | | Non-prefixed global variable |
| #2326 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #2327 | Authors Widget | 35 | 170 | 19 | 1k+ | | | Output is not escaped |
| #2328 | Auto Login for Sakura Rental Server | 35 | 3 | 3 | 10k+ | | | Hidden files included |
| #2329 | Autocomplete For Relevanssi | 35 | 30 | 9 | 900 | | | Unsafe printing function |
| #2330 | Automatic Internal Links for SEO by Pagup | 35 | 30 | 166 | 1k+ | | | error log error log |
| #2331 | Avif Express | 35 | 26 | 167 | 400 | | | Input is not validated |
| #2332 | Awin – Advertiser Tracking for WooCommerce | 35 | 46 | 39 | 1k+ | | | Non Singular String Literal Domain |
| #2333 | Axeptio – Cookie Banner – GDPR Consent & Compliance with a friendly touch | 35 | 5 | 13 | 8k+ | | | Database parameter is not escaped |
| #2334 | AXP Cyrillic to Latin | 35 | 21 | 3 | 1k+ | | | Output is not escaped |
| #2335 | BabyLoveGrowth Integration | 35 | 2 | 10 | 1k+ | | | Direct Query |
| #2336 | BackWPup – WordPress Backup & Restore Plugin | 35 | 11 | 779 | 500k+ | | | Non-prefixed global variable |
| #2337 | BASE Item List | 35 | 4 | 13 | 800 | | | error log error log |
| #2338 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | | | Output is not escaped |
| #2339 | bbPress Notify (No-Spam) | 35 | 62 | 66 | 2k+ | | | wp function not compatible with requires wp |
| #2340 | Before After Image Comparison Slider for WPBakery Page Builder | 35 | 58 | 59 | 1k+ | | | Output is not escaped |
| #2341 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #2342 | Better Plugin Compatibility Control | 35 | 7 | 4 | 4k+ | | | trademarked term |
| #2343 | Better Recent Comments | 35 | 127 | 29 | 2k+ | | | Text Domain Mismatch |
| #2344 | Bicycles by falbar | 35 | 426 | 65 | 600 | | | Output is not escaped |
| #2345 | Lord of the Files: Enhanced Upload Security | 35 | 62 | 42 | 1k+ | | | Non-prefixed global variable |
| #2346 | Block Comment Spam Bots | 35 | 31 | 17 | 800 | | | Output is not escaped |
| #2347 | CTC Masonry Gallery 🎨 | 35 | 6 | 3 | 1k+ | | | Hidden files included |
| #2348 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | | | Hidden files included |
| #2349 | Block Manager | 35 | 33 | 26 | 4k+ | | | Text Domain Mismatch |
| #2350 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 20k+ | | | Text Domain Mismatch |