| #4001 | ACF RGBA Color Picker | 66 | 37 | 3 | 6k+ | | | Text Domain Mismatch |
| #4002 | ACF: Rus-To-Lat | 66 | 15 | 11 | 2k+ | | | Output is not escaped |
| #4003 | CP Media Player – Audio Player and Video Player | 66 | 224 | 48 | 3k+ | | | Text Domain Mismatch |
| #4004 | WPAdmin AWS CDN | 66 | 161 | 42 | 500 | | | Text Domain Mismatch |
| #4005 | Password Reset with Code for WordPress REST API | 66 | 24 | 8 | 900 | | | Exception output is not escaped |
| #4006 | Black Ribbon | 66 | 29 | 5 | 500 | | | Output is not escaped |
| #4007 | Bopo – WooCommerce Product Bundle Builder | 66 | 137 | 135 | 1k+ | | | Text Domain Mismatch |
| #4008 | Bulk Term Generator – Import multiple tags, categories, and taxonomies easily | 66 | 8 | 31 | 2k+ | | | Request data is not unslashed |
| #4009 | Calculated fields for ACF | 66 | 5 | 18 | 1k+ | | | Non-prefixed global variable |
| #4010 | Social comments by WpDevArt | 66 | 9 | 19 | 8k+ | | | Missing Version |
| #4011 | Cookie Warning | 66 | 14 | 15 | 700 | | | Non-prefixed function |
| #4012 | Custom Author Byline | 66 | 11 | 8 | 500 | | | Output is not escaped |
| #4013 | Custom Login Page Templates – Change Logo, Background and CSS | 66 | 25 | 5 | 2k+ | | | Missing Arg Domain |
| #4014 | Custom Posts Per Page | 66 | 20 | 2 | 900 | | | Unsafe printing function |
| #4015 | Custom Posts Per Page Reloaded | 66 | 40 | 3 | 700 | | | Text Domain Mismatch |
| #4016 | Debug Log Manager – Conveniently Monitor and Inspect Errors | 66 | 33 | 44 | 10k+ | | | Input is not validated |
| #4017 | No Right Click, Content Copy Protection, Disable Right Click by RB | 66 | 23 | 2 | 600 | | | Unsafe printing function |
| #4018 | Duplicate Menu | 66 | 11 | 7 | 100k+ | | | Unsafe printing function |
| #4019 | Easy PHP Settings | 66 | 34 | 48 | 1k+ | | | Missing Translators Comment |
| #4020 | Elementic | 66 | 22 | 9 | 900 | | | Text Domain Mismatch |
| #4021 | Estatik Mortgage Calculator | 66 | 22 | 6 | 1k+ | | | Output is not escaped |
| #4022 | Export Categories | 66 | 22 | 13 | 1k+ | | | Output is not escaped |
| #4023 | FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | 66 | 26 | 30 | 6k+ | | | Missing direct file access protection |
| #4024 | Font Size | 66 | 17 | 1 | 600 | | | Unsafe printing function |
| #4025 | Goaffpro Affiliate Marketing | 66 | 6 | 28 | 4k+ | | | Nonce verification recommended |
| #4026 | Hide Title | 66 | 13 | 6 | 30k+ | | | Output is not escaped |
| #4027 | HiFi (Head Injection, Foot Injection) | 66 | 13 | 11 | 2k+ | | | Output is not escaped |
| #4028 | Icon Widget | 66 | 14 | 9 | 4k+ | | | Output is not escaped |
| #4029 | IranDargah Payment Gateway for Woocommerce | 66 | 66 | 26 | 400 | | | Text Domain Mismatch |
| #4030 | Free Property Valuation (Lead Generator) / Kostenlose Immobilienbewertung | 66 | 11 | 5 | 600 | | | Unsafe printing function |
| #4031 | LeadBack – Callback, Chatbot and Live Chat Widgets for WordPress sites | 66 | 17 | 5 | 600 | | | Unsafe printing function |
| #4032 | Leadpages | 66 | 6 | 62 | 10k+ | | | Direct Query |
| #4033 | Link Widget Title | 66 | 22 | 5 | 4k+ | | | Output is not escaped |
| #4034 | PopBox For Elementor | 66 | 31 | 9 | 3k+ | | | Output is not escaped |
| #4035 | Page Title Splitter | 66 | 29 | 8 | 1k+ | | | wp function not compatible with requires wp |
| #4036 | Page Meta | 66 | 26 | 14 | 700 | | | Missing Arg Domain |
| #4037 | Plugin Compatibility Checker | 66 | 73 | 18 | 9k+ | | | Text Domain Mismatch |
| #4038 | Product Code for WooCommerce | 66 | 13 | 54 | 1k+ | | | Missing direct file access protection |
| #4039 | Product Size Chart For WooCommerce | 66 | 9 | 22 | 6k+ | | | Non-prefixed hook name |
| #4040 | Mailchimp Widget by ProteusThemes | 66 | 17 | 9 | 1k+ | | | Output is not escaped |
| #4041 | Raw HTML | 66 | 17 | 35 | 10k+ | | | Non-prefixed function |
| #4042 | Really Simple CSV Importer | 66 | 38 | 8 | 40k+ | | | Output is not escaped |
| #4043 | Safe Redirect Manager | 66 | 9 | 60 | 40k+ | | | Non-prefixed hook name |
| #4044 | Seed Fonts | 66 | 29 | 11 | 20k+ | | | Output is not escaped |
| #4045 | Shortcode for Current Date | 66 | 27 | 12 | 10k+ | | | Text Domain Mismatch |
| #4046 | TAO Schedule Update | 66 | 37 | 11 | 2k+ | | | Text Domain Mismatch |
| #4047 | User Profile Picture | 66 | 9 | 8 | 4k+ | | | Missing nonce verification |
| #4048 | Visual Link Preview | 66 | 47 | 2 | 10k+ | | | Output is not escaped |
| #4049 | Ajax add to cart for WooCommerce | 66 | 67 | 31 | 10k+ | | | Text Domain Mismatch |
| #4050 | Frenet Shipping Gateway for WooCommerce – Correios, Etiquetas e Rastreio | 66 | 22 | 31 | 4k+ | | | Non-prefixed global variable |