| #2951 | WP Updates Notifier | 35 | 23 | 4 | 30k+ | | | Missing Translators Comment |
| #2952 | WP-ViperGB | 35 | 127 | 68 | 400 | | | Output is not escaped |
| #2953 | Integration for WooCommerce and QuickBooks | 35 | 263 | 125 | 1k+ | | | Output is not escaped |
| #2954 | WP-Yomigana | 35 | 17 | 15 | 2k+ | | | Output is not escaped |
| #2955 | WPC Badge Management for WooCommerce | 35 | 13 | 81 | 2k+ | | | Missing nonce verification |
| #2956 | WPCore Plugin Manager | 35 | 118 | 38 | 9k+ | | | Text Domain Mismatch |
| #2957 | WPD Beaver Builder Additions | 35 | 406 | 35 | 600 | | | Non Singular String Literal Domain |
| #2958 | WP Views Counter | 35 | 81 | 42 | 2k+ | | | Output is not escaped |
| #2959 | WPFront User Role Editor | 35 | 333 | 578 | 30k+ | | | Output is not escaped |
| #2960 | WPGraphQL for ACF | 35 | 6 | 18 | 10k+ | | | Output is not escaped |
| #2961 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | | | Text Domain Mismatch |
| #2962 | wpLingua – Automatic translation – Translate and make website multilingual | 35 | 79 | 167 | 2k+ | | | Nonce verification recommended |
| #2963 | Memory Meter | 35 | 2 | 3 | 600 | | | Request data is not unslashed |
| #2964 | WPPerformanceTester | 35 | 94 | 44 | 1k+ | | | Output is not escaped |
| #2965 | WPZOOM Beaver Builder Templates | 35 | 3 | 5 | 900 | | | trademarked term |
| #2966 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |
| #2967 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #2968 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | | | Non-prefixed global variable |
| #2969 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | | | trademarked term |
| #2970 | Writesonic | 35 | 14 | 16 | 1k+ | | | Non-prefixed global variable |
| #2971 | WSB HUB3 | 35 | 36 | 109 | 1k+ | | | Missing nonce verification |
| #2972 | xili-tidy-tags | 35 | 224 | 157 | 1k+ | | | Output is not escaped |
| #2973 | XServer Migrator | 35 | 39 | 53 | 10k+ | | | Interpolated SQL is not prepared |
| #2974 | TypeSquare Webfonts for エックスサーバー | 35 | 183 | 98 | 100k+ | | | Missing Arg Domain |
| #2975 | XT Event Widget for Social Events | 35 | 3 | 55 | 800 | | | Non-prefixed global variable |
| #2976 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 35 | 48 | 114 | 5k+ | | | Non-prefixed hook name |
| #2977 | Yes/No Chart | 35 | 136 | 139 | 2k+ | | | Unsafe printing function |
| #2978 | YML for Yandex Market | 35 | 18 | 288 | 10k+ | | | Non-prefixed global variable |
| #2979 | Year Make Model Search for WooCommerce | 35 | 188 | 162 | 1k+ | | | Output is not escaped |
| #2980 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | | | Text Domain Mismatch |
| #2981 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #2982 | Yotpo: Product & Photo Reviews for WooCommerce | 35 | 24 | 189 | 2k+ | | | Non-prefixed function |
| #2983 | Embeds for YouTube | 35 | 255 | 307 | 10k+ | | | Non-prefixed global variable |
| #2984 | ZI Hide Featured Image | 35 | 8 | 3 | 700 | | | Hidden files included |
| #2985 | Ziina | 35 | 10 | 25 | 2k+ | | | Input is not sanitized |
| #2986 | 2C2P Redirect API for WooCommerce | 36 | 136 | 62 | 900 | | | wp function not compatible with requires wp |
| #2987 | 3B Meteo | 36 | 50 | 76 | 1k+ | | | Output is not escaped |
| #2988 | Product Labels For Woocommerce (Sale Badges) | 36 | 90 | 48 | 10k+ | | | Output is not escaped |
| #2989 | Admin Customizer | 36 | 143 | 64 | 1k+ | | | Output is not escaped |
| #2990 | Advanced Export for WP & WPMU | 36 | 124 | 55 | 700 | | | Output is not escaped |
| #2991 | Age Verification for your checkout page. Verify your customer's identity | 36 | 155 | 238 | 500 | | | Output is not escaped |
| #2992 | SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | 36 | 4 | 342 | 2k+ | | | Nonce verification recommended |
| #2993 | Awesome GDPR Compliant Cookie Consent and Notice | 36 | 653 | 201 | 500 | | | Text Domain Mismatch |
| #2994 | Bard Extra | 36 | 159 | 75 | 700 | | | Text Domain Mismatch |
| #2995 | Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | 36 | 3 | 322 | 10k+ | | | Nonce verification recommended |
| #2996 | Black Widgets For Elementor | 36 | 2,608 | 19 | 800 | | | Text Domain Mismatch |
| #2997 | Blaze Demo Importer | 36 | 101 | 94 | 8k+ | | | Output is not escaped |
| #2998 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #2999 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |
| #3000 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |