| #3051 | Email Before Download | 36 | 89 | 29 | 6k+ | | | Unsafe printing function |
| #3052 | Endora | 36 | 53 | 72 | 1k+ | | | Output is not escaped |
| #3053 | Enhanced Media Library | 36 | 361 | 117 | 60k+ | | | Unsafe printing function |
| #3054 | Enormail Sign Up Forms | 36 | 133 | 126 | 400 | | | Output is not escaped |
| #3055 | Envo's Templates & Widgets for Elementor and WooCommerce | 36 | 1,065 | 54 | 10k+ | | | Text Domain Mismatch |
| #3056 | Events Manager and WPML Compatibility | 36 | 101 | 177 | 1k+ | | | Direct Query |
| #3057 | Export Variable Products | 36 | 79 | 49 | 400 | | | Text Domain Mismatch |
| #3058 | Happy WooCommerce FAQs – Ultimate Product FAQ Plugin | 36 | 65 | 119 | 1k+ | | | Nonce verification recommended |
| #3059 | FreePay for WooCommerce | 36 | 114 | 102 | 400 | | | Output is not escaped |
| #3060 | Friendly Functions for Welcart | 36 | 311 | 83 | 1k+ | | | Non Singular String Literal Domain |
| #3061 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #3062 | GetPaid > Wallet | 36 | 149 | 174 | 700 | | | Text Domain Mismatch |
| #3063 | Google SEO Pressor for Rich snippets | 36 | 51 | 160 | 400 | | | Missing nonce verification |
| #3064 | Google Webfont Optimizer | 36 | 45 | 49 | 700 | | | Output is not escaped |
| #3065 | Gutena Kit – Gutenberg Blocks and Templates | 36 | 39 | 87 | 1k+ | | | Nonce verification recommended |
| #3066 | Header Footer Script Adder – Insert Code in Header, Body & Footer | 36 | 203 | 78 | 1k+ | | | Text Domain Mismatch |
| #3067 | Header Footer Code Manager | 36 | 81 | 180 | 600k+ | | | Non-prefixed global variable |
| #3068 | Optimize Social Share | 36 | 203 | 61 | 3k+ | | | Unsafe printing function |
| #3069 | HTML Forms – Simple WordPress Forms Plugin | 36 | 231 | 166 | 10k+ | | | Output is not escaped |
| #3070 | HTML5 Maps | 36 | 194 | 160 | 5k+ | | | Output is not escaped |
| #3071 | HTTP Requests Manager | 36 | 98 | 90 | 1k+ | | | Output is not escaped |
| #3072 | Page Speed Optimizer: HTTP/2 Push, Async JavaScript, and Defer CSS | 36 | 68 | 33 | 6k+ | | | Output is not escaped |
| #3073 | If-So Geolocation | 36 | 50 | 57 | 1k+ | | | Non-prefixed global variable |
| #3074 | Insert Headers and Footers Code – HT Script | 36 | 391 | 34 | 7k+ | | | Text Domain Mismatch |
| #3075 | IntelliWidget Per Page Custom Menus and Dynamic Content | 36 | 586 | 162 | 600 | | | Output is not escaped |
| #3076 | Italy Cookie Choices (for EU Cookie Law & Cookie Notice) | 36 | 115 | 77 | 10k+ | | | Unsafe printing function |
| #3077 | Just TinyMCE Custom Styles | 36 | 112 | 28 | 1k+ | | | Missing Arg Domain |
| #3078 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | | | Unsafe printing function |
| #3079 | Leartes TRY Exchange Rates | 36 | 250 | 27 | 500 | | | Text Domain Mismatch |
| #3080 | Legal Text Connector of the IT-Recht Kanzlei | 36 | 45 | 46 | 10k+ | | | Exception output is not escaped |
| #3081 | Libro de Reclamaciones y Quejas | 36 | 266 | 124 | 4k+ | | | Text Domain Mismatch |
| #3082 | Linkable Title Html and Php Widget | 36 | 108 | 31 | 600 | | | Output is not escaped |
| #3083 | Login as User | 36 | 101 | 64 | 30k+ | | | Output is not escaped |
| #3084 | LONG URL MAKER | 36 | 39 | 71 | 1k+ | | | Direct Query |
| #3085 | LocalWeb All In One | 36 | 34 | 297 | 5k+ | | | Non-prefixed global variable |
| #3086 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #3087 | Manage Notification E-mails | 36 | 129 | 98 | 100k+ | | | Non-prefixed function |
| #3088 | Materialis Companion | 36 | 129 | 67 | 6k+ | | | Unsafe printing function |
| #3089 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #3090 | Microsoft Clarity | 36 | 48 | 163 | 200k+ | | | Nonce verification recommended |
| #3091 | Mobile Menu Builder for WordPress | 36 | 81 | 33 | 600 | | | Output is not escaped |
| #3092 | Motors VIN Decoder | 36 | 87 | 88 | 400 | | | Output is not escaped |
| #3093 | 코드엠샵 마이사이트 – MSHOP MY SITE | 36 | 58 | 55 | 800 | | | Output is not escaped |
| #3094 | Multiple Sidebars | 36 | 109 | 75 | 600 | | | Non Singular String Literal Domain |
| #3095 | WP Sticky Sidebar – Floating Sidebar On Scroll for Any Theme | 36 | 93 | 84 | 10k+ | | | Non-prefixed global variable |
| #3096 | News Manager | 36 | 134 | 57 | 600 | | | Output is not escaped |
| #3097 | News Ticker for Elementor | 36 | 76 | 57 | 2k+ | | | Text Domain Mismatch |
| #3098 | NextGEN Custom Fields | 36 | 215 | 131 | 1k+ | | | SQL query is not prepared |
| #3099 | MailerLite – Signup forms (official) | 36 | 430 | 158 | 100k+ | | | Output is not escaped |
| #3100 | We’re Open! | 36 | 273 | 187 | 5k+ | | | Unsafe printing function |