| #3251 | Contact Zalo Report SW | 37 | 44 | 39 | 900 | | | Missing Arg Domain |
| #3252 | Delivery Date Time & Pickup for WooCommerce | 37 | 148 | 216 | 400 | | | Output is not escaped |
| #3253 | Cache Warmer | 37 | 32 | 220 | 1k+ | | | Interpolated SQL is not prepared |
| #3254 | Call Now Button – The #1 Click to Call Button for WordPress | 37 | 1,273 | 5 | 200k+ | | | Exception output is not escaped |
| #3255 | Carousel Upsells and Related Product for Woocommerce | 37 | 173 | 35 | 1k+ | | | Output is not escaped |
| #3256 | Catalog Booster & Product Catalog Mode for WooCommerce | 37 | 106 | 168 | 1k+ | | | Non-prefixed function |
| #3257 | CDEKDelivery | 37 | 98 | 75 | 2k+ | | | Exception output is not escaped |
| #3258 | Checkout for PayPal | 37 | 134 | 67 | 600 | | | Unsafe printing function |
| #3259 | Clearpay Gateway for WooCommerce | 37 | 185 | 63 | 1k+ | | | Text Domain Mismatch |
| #3260 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | | | Non-prefixed class |
| #3261 | ClickRank – Ai SEO Automation | 37 | 10 | 226 | 1k+ | | | Direct Query |
| #3262 | CodePeople Post Map for Google Maps | 37 | 257 | 31 | 3k+ | | | Unsafe printing function |
| #3263 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | | Non-prefixed global variable |
| #3264 | Lightweight Subscribe To Comments | 37 | 105 | 70 | 1k+ | | | Unsafe printing function |
| #3265 | PiWeb Conditional cart fee / Extra charge rule for WooCommerce | 37 | 164 | 214 | 2k+ | | | Text Domain Mismatch |
| #3266 | Constant Contact Forms by MailMunch | 37 | 135 | 91 | 2k+ | | | Output is not escaped |
| #3267 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #3268 | CorvusPay WooCommerce Payment Gateway | 37 | 29 | 141 | 1k+ | | | Missing nonce verification |
| #3269 | Crafty Social Buttons | 37 | 279 | 27 | 1k+ | | | Non Singular String Literal Domain |
| #3270 | CryptAPI Payment Gateway for WooCommerce | 37 | 187 | 29 | 400 | | | Text Domain Mismatch |
| #3271 | Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter | 37 | 151 | 61 | 700 | | | Output is not escaped |
| #3272 | Simple Custom CSS and JS | 37 | 168 | 69 | 600k+ | | | Output is not escaped |
| #3273 | Custom CSS Manager | 37 | 55 | 20 | 1k+ | | | Output is not escaped |
| #3274 | Custom Post Template | 37 | 48 | 30 | 10k+ | | | Output is not escaped |
| #3275 | Customer Email Verification for WooCommerce | 37 | 165 | 164 | 2k+ | | | Nonce verification recommended |
| #3276 | Debug Log Viewer | 37 | 26 | 83 | 1k+ | | | Missing nonce verification |
| #3277 | Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments | 37 | 103 | 977 | 800 | | | Non-prefixed global variable |
| #3278 | Disclaimer Popup | 37 | 313 | 53 | 1k+ | | | Text Domain Mismatch |
| #3279 | Donation Block For PayPal | 37 | 23 | 106 | 600 | | | Input is not validated |
| #3280 | DSGVO/GDPR Cookies, DSE, Impressum & Google Fonts Proxy | 37 | 391 | 25 | 700 | | | Text Domain Mismatch |
| #3281 | Duo Two-Factor Authentication | 37 | 44 | 61 | 3k+ | | | Missing nonce verification |
| #3282 | Easy Photo Album | 37 | 360 | 43 | 1k+ | | | Text Domain Mismatch |
| #3283 | Pricing Table WordPress Plugin – Easy Pricing Tables | 37 | 332 | 161 | 10k+ | | | Output is not escaped |
| #3284 | Easy Profile Widget | 37 | 157 | 20 | 400 | | | Output is not escaped |
| #3285 | Easy Testimonial Slider and Form | 37 | 14 | 144 | 700 | | | Request data is not unslashed |
| #3286 | EasyMe Connect | 37 | 130 | 45 | 500 | | | Text Domain Mismatch |
| #3287 | Eazy CF Captcha | 37 | 93 | 54 | 500 | | | Text Domain Mismatch |
| #3288 | WP eBay Product Feeds | 37 | 136 | 31 | 700 | | | Output is not escaped |
| #3289 | Email Encoder – Protect Email Addresses and Phone Numbers | 37 | 10 | 150 | 90k+ | | | Non-prefixed global variable |
| #3290 | Encyclopedia / Glossary / Wiki | 37 | 263 | 48 | 1k+ | | | Output is not escaped |
| #3291 | Excerpt Editor | 37 | 170 | 142 | 500 | | | Unsafe printing function |
| #3292 | Exploit Scanner | 37 | 25 | 130 | 8k+ | | | Non-prefixed global variable |
| #3293 | Facturare WooCommerce | 37 | 158 | 106 | 3k+ | | | Text Domain Mismatch |
| #3294 | Favorites | 37 | 204 | 121 | 10k+ | | | Unsafe printing function |
| #3295 | Get Custom Field Values | 37 | 40 | 44 | 1k+ | | | Output is not escaped |
| #3296 | 果果推送 | 37 | 31 | 56 | 1k+ | | | Nonce verification recommended |
| #3297 | Gmail SMTP | 37 | 84 | 73 | 10k+ | | | Unsafe printing function |
| #3298 | GHL Gravity Bridge – Send Gravity Forms leads to GHL CRM | 37 | 59 | 269 | 600 | | | Direct Query |
| #3299 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #3300 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | | Exception output is not escaped |