| #3101 | Order Status History for WooCommerce | 36 | 210 | 171 | 1k+ | | | Output is not escaped |
| #3102 | Ovation Elements | 36 | 23 | 399 | 10k+ | | | Non-prefixed global variable |
| #3103 | Ozh' Admin Drop Down Menu | 36 | 125 | 43 | 3k+ | | | Output is not escaped |
| #3104 | PayPal Currency Converter BASIC for WooCommerce | 36 | 348 | 20 | 400 | | | Output is not escaped |
| #3105 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #3106 | PDF Forms Filler for CF7 | 36 | 185 | 79 | 3k+ | | | Text Domain Mismatch |
| #3107 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #3108 | Peter’s Post Notes | 36 | 224 | 102 | 3k+ | | | Output is not escaped |
| #3109 | Photonic Gallery & Lightbox for Flickr, SmugMug & Others | 36 | 180 | 117 | 10k+ | | | Missing Translators Comment |
| #3110 | Photoswipe Masonry Gallery | 36 | 57 | 47 | 6k+ | | | Non Singular String Literal Text |
| #3111 | Plugins Garbage Collector (Database Cleanup) | 36 | 32 | 51 | 10k+ | | | Missing nonce verification |
| #3112 | Post Views Stats Counter | 36 | 142 | 241 | 700 | | | Non-prefixed global variable |
| #3113 | ActiveCampaign Postmark for WordPress | 36 | 47 | 75 | 50k+ | | | Text Domain Mismatch |
| #3114 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 56 | 437 | 4k+ | | | Non-prefixed global variable |
| #3115 | افزونه رسمی ترب | 36 | 42 | 86 | 20k+ | | | Exception output is not escaped |
| #3116 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #3117 | Quick 301 Redirects | 36 | 89 | 120 | 5k+ | | | Non-prefixed global variable |
| #3118 | Direct Checkout – Quick View – Buy Now For WooCommerce | 36 | 90 | 112 | 2k+ | | | Missing nonce verification |
| #3119 | Rara One Click Demo Import | 36 | 122 | 98 | 20k+ | | | Missing Translators Comment |
| #3120 | Better Find and Replace – AI-Powered Suggestions | 36 | 67 | 129 | 40k+ | | | Missing direct file access protection |
| #3121 | Recent Posts | 36 | 106 | 30 | 500 | | | Text Domain Mismatch |
| #3122 | Responsive Testimonials | 36 | 252 | 32 | 500 | | | Text Domain Mismatch |
| #3123 | Optimize Database after Deleting Revisions | 36 | 644 | 127 | 60k+ | | | Output is not escaped |
| #3124 | Search & Replace | 36 | 50 | 53 | 100k+ | | | Missing nonce verification |
| #3125 | Search Everything | 36 | 165 | 77 | 10k+ | | | Text Domain Mismatch |
| #3126 | Speed Optimizer – The All-In-One Performance-Boosting Plugin | 36 | 45 | 96 | 1m+ | | | Non-prefixed hook name |
| #3127 | Shadowbox JS | 36 | 246 | 14 | 1k+ | | | Unsafe printing function |
| #3128 | ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution | 36 | 63 | 669 | 100k+ | | | Non-prefixed global variable |
| #3129 | Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website | 36 | 216 | 50 | 50k+ | | | Output is not escaped |
| #3130 | SMTP for SendGrid – YaySMTP | 36 | 27 | 96 | 1k+ | | | Non-prefixed global variable |
| #3131 | StaticPress | 36 | 88 | 79 | 500 | | | Output is not escaped |
| #3132 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |
| #3133 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #3134 | Supplier Order Email | 36 | 54 | 105 | 400 | | | Output is not escaped |
| #3135 | Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder | 36 | 162 | 40 | 200k+ | | | Output is not escaped |
| #3136 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 7k+ | | | Text Domain Mismatch |
| #3137 | SurveyJS: Drag & Drop Form Builder | 36 | 12 | 134 | 500 | | | Missing Version |
| #3138 | Sync QCloud COS | 36 | 63 | 109 | 600 | | | Non-prefixed function |
| #3139 | Bulk Product Editor plugin allows you to create and edit your WooCommerce products and categories with Google Sheets. | 36 | 50 | 105 | 400 | | | Direct Query |
| #3140 | Advance Side Cart, Ajax Cart & Floating Cart for WooCommerce | 36 | 37 | 121 | 6k+ | | | Non-prefixed global variable |
| #3141 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | | | Non-prefixed hook name |
| #3142 | Toolbox for Asgaros Forum | 36 | 150 | 84 | 1k+ | | | Output is not escaped |
| #3143 | Plugin Name: Traffic Counter Widget Plugin | 36 | 71 | 107 | 600 | | | Output is not escaped |
| #3144 | Zoho ZeptoMail | 36 | 32 | 110 | 5k+ | | | Request data is not unslashed |
| #3145 | TrustMate.io – WooCommerce integration | 36 | 255 | 101 | 3k+ | | | Output is not escaped |
| #3146 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #3147 | Ubigeo de Perú para Woocommerce y WordPress | 36 | 191 | 235 | 4k+ | | | Non-prefixed function |
| #3148 | Uji Countdown | 36 | 284 | 98 | 4k+ | | | Text Domain Mismatch |
| #3149 | Slider Ultimate | 36 | 294 | 80 | 500 | | | Output is not escaped |
| #3150 | underConstruction | 36 | 98 | 60 | 40k+ | | | Unsafe printing function |