| #3551 | Maintenance Redirect | 38 | 244 | 132 | 10k+ | | | Missing Arg Domain |
| #3552 | Jock On Air Now (JOAN) | 38 | 121 | 224 | 500 | | | Output is not escaped |
| #3553 | jQuery Pin It Button for Images | 38 | 129 | 36 | 10k+ | | | Output is not escaped |
| #3554 | Jupiter X Core | 38 | 71 | 767 | 70k+ | | | Non-prefixed global variable |
| #3555 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 3 | 252 | 10k+ | | | Dynamic hook name |
| #3556 | Lana Downloads Manager | 38 | 146 | 78 | 3k+ | | | Unsafe printing function |
| #3557 | Lightning Advanced Unit | 38 | 189 | 27 | 3k+ | | | Output is not escaped |
| #3558 | Log Deprecated Notices | 38 | 92 | 73 | 900 | | | Text Domain Mismatch |
| #3559 | LuckyWP Scripts Control | 38 | 186 | 23 | 3k+ | | | Output is not escaped |
| #3560 | LWS Cleaner | 38 | 81 | 129 | 20k+ | | | Direct Query |
| #3561 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 115 | 46 | 3k+ | | | Output is not escaped |
| #3562 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | | Non-prefixed hook name |
| #3563 | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 38 | 2 | 457 | 3k+ | | | Input is not sanitized |
| #3564 | Mega Elements – Addons for Elementor | 38 | 170 | 57 | 10k+ | | | Output is not escaped |
| #3565 | Auto SEO META keywords (META tags keywords) optimization + WooCommerce | 38 | 63 | 34 | 700 | | | Output is not escaped |
| #3566 | Migrate Store: Export and Import WooCommerce Settings | 38 | 37 | 33 | 1k+ | | | Non-prefixed global variable |
| #3567 | MimeTypes Link Icons | 38 | 53 | 34 | 8k+ | | | Output is not escaped |
| #3568 | Group chat for WordPress – Minnit Chat | 38 | 39 | 65 | 500 | | | Non-prefixed global variable |
| #3569 | MisterPlan – Booking Engines | 38 | 73 | 138 | 700 | | | Nonce verification recommended |
| #3570 | Monetag Official Plugin | 38 | 133 | 32 | 5k+ | | | Text Domain Mismatch |
| #3571 | Most And Least Read Posts Widget | 38 | 130 | 24 | 1k+ | | | Output is not escaped |
| #3572 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #3573 | Multiple Domain Mapping on Single Site | 38 | 135 | 51 | 6k+ | | | Text Domain Mismatch |
| #3574 | MX Time Zone Clocks | 38 | 219 | 41 | 1k+ | | | Output is not escaped |
| #3575 | Customize My Account for WooCommerce – Custom Tabs, Login, Registration, 2FA & Design | 38 | 78 | 172 | 800 | | | Non-prefixed global variable |
| #3576 | Name Directory | 38 | 520 | 309 | 3k+ | | | Output is not escaped |
| #3577 | Contact Form Widget | 38 | 54 | 107 | 1k+ | | | Request data is not unslashed |
| #3578 | Note – A live edit text widget | 38 | 118 | 49 | 1k+ | | | Output is not escaped |
| #3579 | One Click Demo Import | 38 | 22 | 84 | 1m+ | | | Non-prefixed global variable |
| #3580 | One Click Order Re-Order | 38 | 139 | 63 | 1k+ | | | Non Singular String Literal Domain |
| #3581 | OneSignal – Web Push Notifications | 38 | 53 | 64 | 70k+ | | | Output is not escaped |
| #3582 | Open Graphite | 38 | 380 | 204 | 3k+ | | | Unsafe printing function |
| #3583 | Ozh' Better Feed | 38 | 45 | 35 | 600 | | | Heredoc Output Not Escaped |
| #3584 | Page Links To | 38 | 31 | 40 | 100k+ | | | Unsafe printing function |
| #3585 | YAPE A1 Tiendas | 38 | 24 | 43 | 900 | | | Missing nonce verification |
| #3586 | PayTR Taksit Tablosu – WooCommerce | 38 | 67 | 39 | 3k+ | | | Non Singular String Literal Domain |
| #3587 | PDF Catalog for WooCommerce | 38 | 30 | 46 | 1k+ | | | Nonce verification recommended |
| #3588 | Podlove Subscribe button | 38 | 148 | 45 | 2k+ | | | Output is not escaped |
| #3589 | Polaroid Gallery | 38 | 105 | 20 | 1k+ | | | Unsafe printing function |
| #3590 | PopCash Code Integration Tool | 38 | 77 | 109 | 400 | | | Nonce verification recommended |
| #3591 | Popular Posts by Webline | 38 | 256 | 8 | 1k+ | | | Output is not escaped |
| #3592 | Popular Widget | 38 | 61 | 30 | 700 | | | Unsafe printing function |
| #3593 | Post Slider For WPBakery Page Builder | 38 | 201 | 14 | 1k+ | | | Output is not escaped |
| #3594 | Post views Stats | 38 | 37 | 51 | 1k+ | | | Non-prefixed global variable |
| #3595 | PostLinks | 38 | 107 | 10 | 700 | | | Output is not escaped |
| #3596 | qTranslate META | 38 | 88 | 26 | 400 | | | Output is not escaped |
| #3597 | qTranslate X Cleanup and WPML Import | 38 | 167 | 102 | 800 | | | Text Domain Mismatch |
| #3598 | Quick Download Button | 38 | 34 | 123 | 2k+ | | | Non-prefixed global variable |
| #3599 | RDP Wiki Embed | 38 | 69 | 26 | 400 | | | Output is not escaped |
| #3600 | Recent Posts Plus | 38 | 111 | 4 | 1k+ | | | Output is not escaped |