| #4151 | Custom Fields Account Registration For Woocommerce | 64 | | 40 | 700 | | | Missing nonce verification |
| #4152 | CV Demo Importer | 64 | 21 | 95 | 400 | | | Non-prefixed global variable |
| #4153 | DataFeedWatch Connector for WooCommerce | 64 | 16 | 112 | 600 | | | Non-prefixed hook name |
| #4154 | Delete Unscaled Images | 64 | 24 | 4 | 800 | | | Text Domain Mismatch |
| #4155 | Disabler | 64 | 212 | 38 | 900 | | | Text Domain Mismatch |
| #4156 | DoFollow Case by Case | 64 | 4 | 60 | 1k+ | | | Direct Query |
| #4157 | Dotdigital for WordPress | 64 | 41 | 123 | 400 | | | Dynamic hook name |
| #4158 | Download Theme | 64 | 18 | 20 | 4k+ | | | wp function not compatible with requires wp |
| #4159 | Easy Duplicate Woo Order | 64 | 17 | 10 | 1k+ | | | Unsafe printing function |
| #4160 | ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount | 64 | 444 | 137 | 2k+ | | | Missing Arg Domain |
| #4161 | Embed Google Fonts | 64 | 28 | 7 | 5k+ | | | Output is not escaped |
| #4162 | Estonian Shipping Methods for WooCommerce | 64 | 97 | 16 | 1k+ | | | Text Domain Mismatch |
| #4163 | Evermore | 64 | 8 | 12 | 1k+ | | | Input is not validated |
| #4164 | Favicon XT-Manager | 64 | 9 | 12 | 2k+ | | | Output is not escaped |
| #4165 | Icon Element – Icon Pack for Elementor Page Builder (6718 icons) | 64 | 30 | 16 | 40k+ | | | wp function not compatible with requires wp |
| #4166 | Online Payments with iK Pay Gateway | 64 | 12 | 28 | 1k+ | | | Missing nonce verification |
| #4167 | Image Hover Effects – Elementor Addon | 64 | 117 | 7 | 40k+ | | | Text Domain Mismatch |
| #4168 | Inactive Logout | 64 | 30 | 71 | 10k+ | | | Non-prefixed global variable |
| #4169 | Integrate Firebase | 64 | 26 | 7 | 500 | | | Output is not escaped |
| #4170 | Inline Related Posts | 64 | 17 | 39 | 100k+ | | | Nonce verification recommended |
| #4171 | Kama SpamBlock | 64 | 29 | 7 | 5k+ | | | Short PHP open tag found |
| #4172 | Master Post Advert | 64 | 26 | 4 | 1k+ | | | Unsafe printing function |
| #4173 | Meks Easy Social Share | 64 | 26 | 3 | 10k+ | | | Output is not escaped |
| #4174 | Moosend Website Connector | 64 | 15 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #4175 | Most Popular Post Widget | 64 | 40 | 3 | 400 | | | Output is not escaped |
| #4176 | MultiSafepay plugin for WooCommerce | 64 | 13 | 35 | 2k+ | | | Missing nonce verification |
| #4177 | New Recent Posts Select Categories By Thao Marky | 64 | 33 | 1 | 500 | | | Text Domain Mismatch |
| #4178 | Nofollow for external link | 64 | 8 | 5 | 10k+ | | | Output is not escaped |
| #4179 | Page in Widget | 64 | 26 | 0 | 1k+ | | | Output is not escaped |
| #4180 | Page Tag Cloud | 64 | 21 | 3 | 500 | | | Output is not escaped |
| #4181 | Pageviews | 64 | 15 | 12 | 1k+ | | | Missing Translators Comment |
| #4182 | PHP Code Widget | 64 | 22 | 1 | 80k+ | | | Output is not escaped |
| #4183 | Product Import Export for WooCommerce – Import Export Product CSV Suite | 64 | 246 | 766 | 80k+ | | | Non-prefixed global variable |
| #4184 | Retrigger Notifications Gravity Forms | 64 | 55 | 8 | 1k+ | | | Text Domain Mismatch |
| #4185 | Send From | 64 | 5 | 18 | 500 | | | Input is not sanitized |
| #4186 | Simple HTTPS Redirect | 64 | 19 | 5 | 900 | | | Output is not escaped |
| #4187 | Click to Call Button | 64 | 58 | 3 | 1k+ | | | Output is not escaped |
| #4188 | SMK Sidebar Generator | 64 | 19 | 5 | 10k+ | | | Output is not escaped |
| #4189 | Stag Custom Sidebars | 64 | 10 | 12 | 2k+ | | | Text Domain Mismatch |
| #4190 | Stancer for WooCommerce | 64 | 2 | 108 | 400 | | | Non-prefixed global variable |
| #4191 | Oceanwp sticky header | 64 | 8 | 13 | 10k+ | | | Missing nonce verification |
| #4192 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #4193 | Thumbnail Crop Position | 64 | 43 | 1 | 2k+ | | | Output is not escaped |
| #4194 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #4195 | Twitter | 64 | 27 | 23 | 9k+ | | | Missing Translators Comment |
| #4196 | WProofreader spell & grammar check plugin for WordPress | 64 | 12 | 43 | 4k+ | | | Non-prefixed global variable |
| #4197 | Werk aan de Muur | 64 | 48 | 20 | 900 | | | Non Singular String Literal Domain |
| #4198 | JTL-Connector for WooCommerce | 64 | 7 | 166 | 1k+ | | | Direct Query |
| #4199 | WP Login Door | 64 | 19 | 11 | 400 | | | Output is not escaped |
| #4200 | WP REST API Controller | 64 | 8 | 22 | 8k+ | | | Nonce verification recommended |