| #3151 | Quantity Plus Minus Button for WooCommerce | 36 | 83 | 84 | 10k+ | | | Output is not escaped |
| #3152 | Shipping with Venipak for WooCommerce | 36 | 239 | 61 | 1k+ | | | Text Domain Mismatch |
| #3153 | When Last Login | 36 | 52 | 123 | 50k+ | | | Non-prefixed global variable |
| #3154 | Widget Indicadores Económicos (Chile) | 36 | 53 | 20 | 500 | | | Output is not escaped |
| #3155 | Disable Payment Methods based on cart conditions for WooCommerce | 36 | 158 | 57 | 1k+ | | | Non Singular String Literal Domain |
| #3156 | Custom Add to Cart Button Label and Link for WooCommerce | 36 | 371 | 112 | 3k+ | | | Text Domain Mismatch |
| #3157 | Guaranteed Reviews Company (Société des Avis Garantis) | 36 | 369 | 197 | 1k+ | | | Output is not escaped |
| #3158 | Viva Payments – Viva Wallet WooCommerce Payment Gateway | 36 | 97 | 32 | 1k+ | | | Non Singular String Literal Domain |
| #3159 | Rabo Smart Pay for WooCommerce | 36 | 147 | 54 | 600 | | | Text Domain Mismatch |
| #3160 | Extended Coupon Features for WooCommerce FREE | 36 | 219 | 63 | 10k+ | | | Text Domain Mismatch |
| #3161 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 36 | 165 | 69 | 5k+ | | | Text Domain Mismatch |
| #3162 | Eway Payments for Woo | 36 | 525 | 40 | 3k+ | | | Text Domain Mismatch |
| #3163 | SuperFaktura WooCommerce | 36 | 60 | 116 | 2k+ | | | Nonce verification recommended |
| #3164 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #3165 | WP Better Permalinks | 36 | 110 | 59 | 1k+ | | | Output is not escaped |
| #3166 | WP-Cleanup | 36 | 79 | 29 | 400 | | | Output is not escaped |
| #3167 | Export Themes | 36 | 122 | 90 | 2k+ | | | Non-prefixed constant |
| #3168 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #3169 | WP Counter | 36 | 86 | 43 | 800 | | | Output is not escaped |
| #3170 | WP Custom Cursors | WordPress Cursor Plugin | 36 | 691 | 390 | 9k+ | | | Text Domain Mismatch |
| #3171 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #3172 | WP Header Images | 36 | 174 | 133 | 6k+ | | | Unsafe printing function |
| #3173 | WP Hotel Booking WooCommerce | 36 | 93 | 99 | 1k+ | | | Output is not escaped |
| #3174 | WP LaTeX | 36 | 103 | 12 | 700 | | | Output is not escaped |
| #3175 | WP Mail | 36 | 202 | 201 | 500 | | | Output is not escaped |
| #3176 | Payment Button for PayPal | 36 | 155 | 86 | 4k+ | | | Unsafe printing function |
| #3177 | WP Publication Archive | 36 | 197 | 64 | 400 | | | Text Domain Mismatch |
| #3178 | WP Responsive Menu | 36 | 295 | 139 | 30k+ | | | Text Domain Mismatch |
| #3179 | WP Hardening (discontinued) | 36 | 230 | 85 | 10k+ | | | Text Domain Mismatch |
| #3180 | WP Show Posts | 36 | 107 | 102 | 70k+ | | | Output is not escaped |
| #3181 | WP Socializer – Simple & Easy Social Media Share Icons | 36 | 214 | 51 | 10k+ | | | Output is not escaped |
| #3182 | WP Sort Order | 36 | 134 | 211 | 6k+ | | | Direct Query |
| #3183 | WP Stripe Checkout | 36 | 198 | 118 | 1k+ | | | Unsafe printing function |
| #3184 | WP Super Edit | 36 | 35 | 185 | 2k+ | | | Nonce verification recommended |
| #3185 | Yandex.Metrica | 36 | 76 | 30 | 60k+ | | | Output is not escaped |
| #3186 | WPAvatar | 36 | 425 | 45 | 700 | | | Unsafe printing function |
| #3187 | WP fail2ban Blocklist | 36 | 61 | 63 | 3k+ | | | SQL query is not prepared |
| #3188 | WPLMS H5P | 36 | 111 | 106 | 1k+ | | | Text Domain Mismatch |
| #3189 | Wppao Sitemap | 36 | 128 | 21 | 9k+ | | | Output is not escaped |
| #3190 | wpShopGermany IT-RECHT KANZLEI | 36 | 37 | 47 | 500 | | | Input is not sanitized |
| #3191 | Database Snapshots – WPvivid | 36 | 66 | 108 | 1k+ | | | Direct Query |
| #3192 | YayExtra – WooCommerce Extra Product Options | 36 | 11 | 472 | 1k+ | | | Non-prefixed global variable |
| #3193 | Visual CSS Style Editor | 36 | 283 | 233 | 40k+ | | | Output is not escaped |
| #3194 | Custom Product Tabs for WooCommerce | 36 | 87 | 81 | 80k+ | | | Output is not escaped |
| #3195 | Zarinpal Gateway | 36 | 151 | 55 | 50k+ | | | Non Singular String Literal Domain |
| #3196 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 500 | | | Text Domain Mismatch |
| #3197 | 360 Javascript Viewer | 37 | 144 | 22 | 1k+ | | | Output is not escaped |
| #3198 | Redirectioner | 37 | 234 | 410 | 1k+ | | | Output is not escaped |
| #3199 | ACF: TablePress | 37 | 160 | 45 | 1k+ | | | Text Domain Mismatch |
| #3200 | Adapta RGPD | 37 | 349 | 72 | 40k+ | | | Text Domain Mismatch |