| #3651 | Trash Duplicate and 301 Redirect | 38 | 13 | 103 | 1k+ | | | Nonce verification recommended |
| #3652 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #3653 | Sidebar Login Widget | 38 | 90 | 16 | 700 | | | Output is not escaped |
| #3654 | Twenty Eleven Theme Extensions | 38 | 35 | 30 | 3k+ | | | Output is not escaped |
| #3655 | Twiget Twitter Widget | 38 | 147 | 36 | 500 | | | Output is not escaped |
| #3656 | Twitter for WordPress | 38 | 47 | 24 | 1k+ | | | Output is not escaped |
| #3657 | TypePad emoji for TinyMCE | 38 | 100 | 24 | 8k+ | | | Text Domain Mismatch |
| #3658 | Termly – GDPR/CCPA Cookie Consent Banner | 38 | 54 | 92 | 80k+ | | | Non-prefixed global variable |
| #3659 | Ultimate Member Widgets for Elementor – Login Form, Register Form & User Directory | 38 | 17 | 110 | 400 | | | Non-prefixed namespace |
| #3660 | Unconfirmed | 38 | 20 | 79 | 1k+ | | | Nonce verification recommended |
| #3661 | User Specific Content | 38 | 143 | 19 | 1k+ | | | Text Domain Mismatch |
| #3662 | VdoCipher: Secure Video Player and Hosting | 38 | 37 | 54 | 2k+ | | | Non-prefixed function |
| #3663 | Vertical News Scroller | 38 | 118 | 60 | 5k+ | | | Output is not escaped |
| #3664 | FancyTube – Video Gallery, Video Slider, and Playlist Slider for YouTube | 38 | 358 | 34 | 1k+ | | | Text Domain Mismatch |
| #3665 | VidShop – Shoppable Videos for WooCommerce | 38 | 49 | 144 | 1k+ | | | Database parameter is not escaped |
| #3666 | Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend | 38 | 84 | 49 | 1k+ | | | Output is not escaped |
| #3667 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | | | Output is not escaped |
| #3668 | Visual Admin Customizer | 38 | 20 | 51 | 500 | | | Input is not sanitized |
| #3669 | W2S – Migrate WooCommerce to Shopify | 38 | 33 | 132 | 1k+ | | | Non-prefixed global variable |
| #3670 | Chatbox Manager | 38 | 855 | 78 | 400 | | | Output is not escaped |
| #3671 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |
| #3672 | Shipping Packages for WooCommerce – Dropship from multiple locations like AliExpress, eBay, Amazon, Etsy | 38 | 94 | 26 | 900 | | | Non Singular String Literal Domain |
| #3673 | SSLCommerz Payment Gateway | 38 | 21 | 132 | 2k+ | | | Non-prefixed global variable |
| #3674 | WDV About Me Widget | 38 | 150 | 8 | 900 | | | Output is not escaped |
| #3675 | Affiliate Sales in Google Analytics and other tools | 38 | 23 | 84 | 1k+ | | | Request data is not unslashed |
| #3676 | White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard | 38 | 205 | 31 | 10k+ | | | Output is not escaped |
| #3677 | WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | 38 | 33 | 181 | 2k+ | | | Non-prefixed global variable |
| #3678 | WishSuite – Wishlist for WooCommerce | 38 | 76 | 133 | 1k+ | | | Output is not escaped |
| #3679 | Products Coming Soon for WooCommerce | 38 | 151 | 62 | 700 | | | Output is not escaped |
| #3680 | Photo Reviews for WooCommerce | 38 | 26 | 222 | 10k+ | | | Request data is not unslashed |
| #3681 | Show Stock Status for WooCommerce | 38 | 30 | 19 | 1k+ | | | Output is not escaped |
| #3682 | Vietnam Checkout for WooCommerce | 38 | 93 | 137 | 10k+ | | | Nonce verification recommended |
| #3683 | Wholesale for WooCommerce | 38 | 541 | 22 | 1k+ | | | Output is not escaped |
| #3684 | Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance | 38 | 23 | 104 | 1k+ | | | Direct Query |
| #3685 | WooSwipe WooCommerce Gallery | 38 | 88 | 82 | 3k+ | | | Non-prefixed global variable |
| #3686 | WP Hebrew Date | 38 | 102 | 13 | 600 | | | Output is not escaped |
| #3687 | WP 404 Auto Redirect to Similar Post | 38 | 166 | 48 | 30k+ | | | Text Domain Mismatch |
| #3688 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #3689 | WP-Ban | 38 | 99 | 108 | 8k+ | | | Unsafe printing function |
| #3690 | WP-CommentNavi | 38 | 68 | 46 | 700 | | | Output is not escaped |
| #3691 | WP Content Copy Protection with Color Design | 38 | 96 | 61 | 5k+ | | | Non Singular String Literal Domain |
| #3692 | WP Discord Post Plus – Supports Unlimited Channels | 38 | 116 | 34 | 700 | | | Text Domain Mismatch |
| #3693 | WP-DraftsForFriends | 38 | 141 | 71 | 1k+ | | | Output is not escaped |
| #3694 | WP Mail SMTP SendGrid Edition | 38 | 102 | 19 | 500 | | | Text Domain Mismatch |
| #3695 | WP Mailgun SMTP | 38 | 99 | 51 | 900 | | | Text Domain Mismatch |
| #3696 | WP Maintenance Mode & Site Under Construction | 38 | 72 | 57 | 3k+ | | | Output is not escaped |
| #3697 | WP Media Categories | 38 | 40 | 103 | 800 | | | Nonce verification recommended |
| #3698 | mb.miniAudioPlayer – an HTML5 audio player for your mp3 files | 38 | 204 | 6 | 4k+ | | | Unsafe printing function |
| #3699 | Native PHP Sessions | 38 | 30 | 92 | 10k+ | | | Direct Query |
| #3700 | Real-Time Post Statistics for WordPress | 38 | 63 | 68 | 1k+ | | | SQL query is not prepared |