| #3001 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |
| #3002 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #3003 | BP Group Documents | 36 | 27 | 195 | 600 | | | Non-prefixed global variable |
| #3004 | BP Profile Search | 36 | 321 | 85 | 5k+ | | | Output is not escaped |
| #3005 | bpost shipping | 36 | 97 | 43 | 700 | | | Output is not escaped |
| #3006 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | | | Non Singular String Literal Domain |
| #3007 | BuddyMeet | 36 | 114 | 32 | 700 | | | Unsafe printing function |
| #3008 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 36 | 1 | 574 | 4k+ | | | Request data is not unslashed |
| #3009 | Bulk Post Update Date | 36 | 96 | 66 | 10k+ | | | Unsafe printing function |
| #3010 | Bus Ticket Booking with Seat Reservation | 36 | 145 | 192 | 800 | | | Non-prefixed global variable |
| #3011 | Better WordPress Recent Comments | 36 | 319 | 69 | 600 | | | Text Domain Mismatch |
| #3012 | Carousel Ultimate | 36 | 450 | 284 | 700 | | | Text Domain Mismatch |
| #3013 | Carousel Horizontal Posts Content Slider | 36 | 271 | 59 | 2k+ | | | Text Domain Mismatch |
| #3014 | Cashflows for WooCommerce | 36 | 118 | 36 | 600 | | | Text Domain Mismatch |
| #3015 | Simple SEO | 36 | 164 | 113 | 10k+ | | | Non Singular String Literal Domain |
| #3016 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | | | Short PHP open tag found |
| #3017 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #3018 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #3019 | CloudPayments Gateway for WooCommerce | 36 | 205 | 70 | 500 | | | Text Domain Mismatch |
| #3020 | CLP – Custom Login Page by NiteoThemes | 36 | 240 | 49 | 700 | | | Output is not escaped |
| #3021 | CM Header and Footer – Add custom scripts and styles to your header and footer with ease | 36 | 230 | 198 | 1k+ | | | Output is not escaped |
| #3022 | CMB2 | 36 | 148 | 19 | 300k+ | | | Output is not escaped |
| #3023 | Code Snippets | 36 | 34 | 203 | 1m+ | | | Nonce verification recommended |
| #3024 | ColorMeShop WordPress Plugin | 36 | 392 | 37 | 600 | | | Exception output is not escaped |
| #3025 | Coming Soon, Under Construction & Maintenance Mode By Dazzler | 36 | 173 | 132 | 7k+ | | | Text Domain Mismatch |
| #3026 | Conditional Payments for WooCommerce | 36 | 292 | 184 | 10k+ | | | Text Domain Mismatch |
| #3027 | Conditional Shipping for WooCommerce | 36 | 93 | 196 | 10k+ | | | Non-prefixed global variable |
| #3028 | Continuous Image Carousel With Lightbox | 36 | 255 | 129 | 1k+ | | | Output is not escaped |
| #3029 | CP Blocks | 36 | 46 | 38 | 1k+ | | | wp function not compatible with requires wp |
| #3030 | Crelly Slider | 36 | 421 | 185 | 10k+ | | | Unsafe printing function |
| #3031 | CSH Login | 36 | 126 | 41 | 500 | | | Output is not escaped |
| #3032 | Custom Database Applications by Caspio | 36 | 32 | 63 | 400 | | | Input is not sanitized |
| #3033 | Custom PHP Settings | 36 | 153 | 76 | 10k+ | | | Output is not escaped |
| #3034 | Custom Category Post Order | 36 | 80 | 83 | 500 | | | Text Domain Mismatch |
| #3035 | Dashboard Widgets Suite | 36 | 206 | 124 | 4k+ | | | Output is not escaped |
| #3036 | Depicter — Popup & Slider Builder | 36 | 130 | 121 | 80k+ | | | Exception output is not escaped |
| #3037 | Desktop Mode | 36 | 1 | 587 | 2k+ | | | Direct Query |
| #3038 | DeveloPress Sticky Footer Bar | 36 | 165 | 49 | 400 | | | Output is not escaped |
| #3039 | Different Menu in Different Pages – Conditional Menu | 36 | 167 | 113 | 4k+ | | | Text Domain Mismatch |
| #3040 | Doneren met Mollie | 36 | 420 | 351 | 4k+ | | | SQL query is not prepared |
| #3041 | Drag and Drop Multiple File Upload for Contact Form 7 | 36 | 82 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #3042 | Duitku Payment Gateway | 36 | 507 | 107 | 700 | | | Text Domain Mismatch |
| #3043 | Duplicate Post – duplicate pages, copy content, clone posts | 36 | 76 | 81 | 5k+ | | | wp function not compatible with requires wp |
| #3044 | Dynamic Copyright Year | 36 | 972 | 43 | 800 | | | Output is not escaped |
| #3045 | Dynamic Front-End Heartbeat Control | 36 | 217 | 111 | 1k+ | | | Text Domain Mismatch |
| #3046 | Dynamic Visibility for Elementor | 36 | 56 | 89 | 50k+ | | | Non-prefixed hook name |
| #3047 | WP CTA – Call Now Button, Sticky Button & Call to Action Builder | 36 | 1 | 433 | 2k+ | | | Non-prefixed global variable |
| #3048 | Easy Support Videos – Embed videos in the admin | 36 | 160 | 95 | 500 | | | Output is not escaped |
| #3049 | Product Carousel Slider for Elementor | 36 | 148 | 63 | 1k+ | | | Text Domain Mismatch |
| #3050 | Email Before Download | 36 | 89 | 29 | 6k+ | | | Unsafe printing function |