| #3251 | PiWeb Conditional cart fee / Extra charge rule for WooCommerce | 37 | 164 | 214 | 2k+ | | | Text Domain Mismatch |
| #3252 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #3253 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #3254 | CorvusPay WooCommerce Payment Gateway | 37 | 29 | 141 | 1k+ | | | Missing nonce verification |
| #3255 | Crafty Social Buttons | 37 | 279 | 27 | 1k+ | | | Non Singular String Literal Domain |
| #3256 | Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter | 37 | 151 | 61 | 600 | | | Output is not escaped |
| #3257 | Simple Custom CSS and JS | 37 | 168 | 69 | 600k+ | | | Output is not escaped |
| #3258 | Custom CSS Manager | 37 | 55 | 20 | 1k+ | | | Output is not escaped |
| #3259 | Custom Post Template | 37 | 48 | 30 | 10k+ | | | Output is not escaped |
| #3260 | Customer Email Verification for WooCommerce | 37 | 165 | 164 | 2k+ | | | Nonce verification recommended |
| #3261 | Debug Log Viewer | 37 | 26 | 83 | 1k+ | | | Missing nonce verification |
| #3262 | Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments | 37 | 103 | 977 | 800 | | | Non-prefixed global variable |
| #3263 | Disclaimer Popup | 37 | 313 | 53 | 1k+ | | | Text Domain Mismatch |
| #3264 | Donation Block For PayPal | 37 | 23 | 106 | 600 | | | Input is not validated |
| #3265 | DSGVO/GDPR Cookies, DSE, Impressum & Google Fonts Proxy | 37 | 391 | 25 | 700 | | | Text Domain Mismatch |
| #3266 | Duo Two-Factor Authentication | 37 | 44 | 61 | 3k+ | | | Missing nonce verification |
| #3267 | Easy Photo Album | 37 | 360 | 43 | 1k+ | | | Text Domain Mismatch |
| #3268 | Pricing Table WordPress Plugin – Easy Pricing Tables | 37 | 332 | 161 | 10k+ | | | Output is not escaped |
| #3269 | Easy Profile Widget | 37 | 157 | 20 | 400 | | | Output is not escaped |
| #3270 | Easy Testimonial Slider and Form | 37 | 14 | 144 | 700 | | | Request data is not unslashed |
| #3271 | EasyMe Connect | 37 | 130 | 45 | 500 | | | Text Domain Mismatch |
| #3272 | Eazy CF Captcha | 37 | 93 | 54 | 500 | | | Text Domain Mismatch |
| #3273 | WP eBay Product Feeds | 37 | 136 | 31 | 700 | | | Output is not escaped |
| #3274 | Email Encoder – Protect Email Addresses and Phone Numbers | 37 | 10 | 150 | 90k+ | | | Non-prefixed global variable |
| #3275 | Encyclopedia / Glossary / Wiki | 37 | 263 | 48 | 1k+ | | | Output is not escaped |
| #3276 | Excerpt Editor | 37 | 170 | 142 | 500 | | | Unsafe printing function |
| #3277 | Exploit Scanner | 37 | 25 | 130 | 8k+ | | | Non-prefixed global variable |
| #3278 | Facturare WooCommerce | 37 | 158 | 106 | 3k+ | | | Text Domain Mismatch |
| #3279 | Furgonetka.pl: Przesyłki & Narzędzia e-commerce | 37 | 66 | 48 | 7k+ | | | Exception output is not escaped |
| #3280 | Get Custom Field Values | 37 | 40 | 44 | 1k+ | | | Output is not escaped |
| #3281 | 果果推送 | 37 | 31 | 56 | 1k+ | | | Nonce verification recommended |
| #3282 | Gmail SMTP | 37 | 85 | 71 | 10k+ | | | Unsafe printing function |
| #3283 | GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM | 37 | 59 | 269 | 600 | | | Direct Query |
| #3284 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #3285 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | | Exception output is not escaped |
| #3286 | XML Sitemap Generator for Google | 37 | 43 | 79 | 1m+ | | | Input is not validated |
| #3287 | GoPay for WooCommerce | 37 | 66 | 103 | 1k+ | | | Non-prefixed global variable |
| #3288 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #3289 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #3290 | HandL UTM Grabber / Tracker | 37 | 27 | 141 | 10k+ | | | Missing nonce verification |
| #3291 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #3292 | Horizontal scrolling announcements | 37 | 215 | 140 | 8k+ | | | Output is not escaped |
| #3293 | HT Builder – WordPress Theme Builder for Elementor | 37 | 142 | 41 | 900 | | | Output is not escaped |
| #3294 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 300 | 60 | 3k+ | | | Text Domain Mismatch |
| #3295 | .htaccess Site Access Control | 37 | 54 | 67 | 800 | | | Input is not sanitized |
| #3296 | Humans TXT | 37 | 159 | 86 | 400 | | | Output is not escaped |
| #3297 | Image Optimizer by 10web – Image Optimizer and Compression plugin | 37 | 244 | 45 | 3k+ | | | Text Domain Mismatch |
| #3298 | Image Widget Deluxe | 37 | 190 | 1 | 1k+ | | | Output is not escaped |
| #3299 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #3300 | Images to WebP | 37 | 39 | 50 | 9k+ | | | curl curl setopt |