| #3301 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #3302 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | | Exception output is not escaped |
| #3303 | XML Sitemap Generator for Google | 37 | 43 | 79 | 1m+ | | | Input is not validated |
| #3304 | GoPay for WooCommerce | 37 | 66 | 103 | 1k+ | | | Non-prefixed global variable |
| #3305 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #3306 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #3307 | HandL UTM Grabber / Tracker | 37 | 27 | 141 | 10k+ | | | Missing nonce verification |
| #3308 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #3309 | Horizontal scrolling announcements | 37 | 215 | 140 | 8k+ | | | Output is not escaped |
| #3310 | HT Builder – WordPress Theme Builder for Elementor | 37 | 142 | 41 | 900 | | | Output is not escaped |
| #3311 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 300 | 60 | 3k+ | | | Text Domain Mismatch |
| #3312 | .htaccess Site Access Control | 37 | 54 | 67 | 800 | | | Input is not sanitized |
| #3313 | Humans TXT | 37 | 159 | 86 | 400 | | | Output is not escaped |
| #3314 | Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs | 37 | 37 | 102 | 1k+ | | | Non-prefixed global variable |
| #3315 | Image Optimizer by 10web – Image Optimizer and Compression plugin | 37 | 244 | 45 | 3k+ | | | Text Domain Mismatch |
| #3316 | Image Widget Deluxe | 37 | 190 | 1 | 1k+ | | | Output is not escaped |
| #3317 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #3318 | Images to WebP | 37 | 39 | 50 | 9k+ | | | curl curl setopt |
| #3319 | Jock On Air Now (JOAN) | 37 | 123 | 224 | 400 | | | Output is not escaped |
| #3320 | Job Manager & Career – Manage job board listings, and recruitments | 37 | 112 | 205 | 2k+ | | | Missing nonce verification |
| #3321 | JS Help Desk – AI-Powered Support & Ticketing System | 37 | 17 | 406 | 7k+ | | | Missing nonce verification |
| #3322 | JVM Rich Text Icons | 37 | 87 | 34 | 3k+ | | | Output is not escaped |
| #3323 | Language Switcher | 37 | 81 | 105 | 1k+ | | | Missing Translators Comment |
| #3324 | LearnPress – Course Review | 37 | 67 | 43 | 20k+ | | | Output is not escaped |
| #3325 | LH Archived Post Status | 37 | 150 | 64 | 3k+ | | | Text Domain Mismatch |
| #3326 | Lightbox with PhotoSwipe | 37 | 179 | 24 | 20k+ | | | Output is not escaped |
| #3327 | PiWeb Live sales notification for WooCommerce | 37 | 289 | 77 | 30k+ | | | Text Domain Mismatch |
| #3328 | LiveAgent – Omnichannel Help Desk & Live Chat Software | 37 | 125 | 142 | 400 | | | Non Singular String Literal Domain |
| #3329 | LiveJournal Importer | 37 | 86 | 67 | 8k+ | | | Output is not escaped |
| #3330 | Local Time Clock | 37 | 105 | 11 | 1k+ | | | Output is not escaped |
| #3331 | Localendar Calendar for WordPress | 37 | 241 | 6 | 400 | | | Output is not escaped |
| #3332 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | | | Output is not escaped |
| #3333 | MailMunch – Grow your Email List | 37 | 82 | 84 | 6k+ | | | Output is not escaped |
| #3334 | Maintenance Page | 37 | 62 | 33 | 3k+ | | | Output is not escaped |
| #3335 | Media Sweep – WordPress Media Cleaner | 37 | 54 | 134 | 1k+ | | | Interpolated SQL is not prepared |
| #3336 | Max Mega Menu | 37 | 249 | 174 | 300k+ | | | Output is not escaped |
| #3337 | Meks Video Importer | 37 | 62 | 239 | 2k+ | | | Input is not sanitized |
| #3338 | Metorik – Reports & Email Automation for WooCommerce | 37 | 75 | 70 | 10k+ | | | Output is not escaped |
| #3339 | Monobank WP Payment | 37 | 78 | 41 | 1k+ | | | Text Domain Mismatch |
| #3340 | My Post Order | 37 | 100 | 114 | 400 | | | Output is not escaped |
| #3341 | Nearby Now Reviews and Audio Testimonials | 37 | 66 | 67 | 1k+ | | | wp function not compatible with requires wp |
| #3342 | news ticker benaceur | 37 | 1,097 | 31 | 1k+ | | | Output is not escaped |
| #3343 | NextGEN Scroll Gallery | 37 | 33 | 28 | 1k+ | | | Output is not escaped |
| #3344 | Ninja Van (MY) | 37 | 21 | 258 | 1k+ | | | Non-prefixed global variable |
| #3345 | Off-Canvas Sidebars & Menus (Slidebars) | 37 | 457 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #3346 | Sendle Shipping Plugin | 37 | 91 | 64 | 800 | | | wp function not compatible with requires wp |
| #3347 | Oliver POS – WooCommerce POS for iPhone, iPad & Android | 37 | 15 | 242 | 800 | | | Interpolated SQL is not prepared |
| #3348 | Optin Forms – Simple List Building Plugin for WordPress | 37 | 647 | 22 | 3k+ | | | Output is not escaped |
| #3349 | WP All Export – Order Export for WooCommerce | 37 | 109 | 111 | 3k+ | | | Text Domain Mismatch |
| #3350 | OSM – OpenStreetMap | 37 | 130 | 64 | 10k+ | | | Output is not escaped |