| #4251 | Review & testimonial widgets | 63 | 62 | 9 | 1k+ | | | Text Domain Mismatch |
| #4252 | User Switching | 63 | 2 | 47 | 200k+ | | | Nonce verification recommended |
| #4253 | PayPing Gateway For Woocommerce | 63 | 11 | 40 | 1k+ | | | Non-prefixed hook name |
| #4254 | Phone Validator for WooCommerce | 63 | 8 | 33 | 1k+ | | | Missing nonce verification |
| #4255 | WT Yandex Metrika | 63 | 35 | 0 | 5k+ | | | Output is not escaped |
| #4256 | AAM Protected Media Files | 62 | 13 | 10 | 600 | | | Direct Query |
| #4257 | Add Meta Tag Keywords | 62 | 6 | 15 | 1k+ | | | Missing nonce verification |
| #4258 | AMP Contact FORM 7 – AMPCF7 | 62 | 9 | 13 | 500 | | | Input is not validated |
| #4259 | AMS Post And Page Duplicator | 62 | 14 | 13 | 600 | | | Text Domain Mismatch |
| #4260 | ARI Fancy Lightbox – Popup for WordPress | 62 | 8 | 107 | 10k+ | | | Non-prefixed namespace |
| #4261 | Contact Form 7 – Blacklist Unwanted Email | 62 | 16 | 11 | 400 | | | Missing direct file access protection |
| #4262 | Bulk edit publish date | 62 | 11 | 16 | 1k+ | | | Nonce verification recommended |
| #4263 | Bulk Page Creator | 62 | 9 | 17 | 10k+ | | | Request data is not unslashed |
| #4264 | Carousel Slider | 62 | | 71 | 30k+ | | | Non-prefixed global variable |
| #4265 | Check for Broken Links – Broken Link Checker & 404 Monitor | 62 | 2 | 32 | 600 | | | Missing nonce verification |
| #4266 | Checkout Countdown for WooCommerce – Boost Conversions & Reduce Cart Abandonment | 62 | 43 | 12 | 3k+ | | | Output is not escaped |
| #4267 | Christmas Panda | 62 | 14 | 45 | 400 | | | Input is not validated |
| #4268 | Column Separator for Beaver Builder | 62 | 61 | 17 | 400 | | | Output is not escaped |
| #4269 | Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | 62 | 81 | 100 | 40k+ | | | Missing direct file access protection |
| #4270 | Custom Permalink Editor | 62 | 4 | 51 | 3k+ | | | Non-prefixed hook name |
| #4271 | Custom Sidebars by ProteusThemes | 62 | 17 | 23 | 1k+ | | | Missing nonce verification |
| #4272 | Custom Site Logo | 62 | 26 | 4 | 1k+ | | | Unsafe printing function |
| #4273 | Dashboard Widget Sidebar | 62 | 9 | 16 | 400 | | | Input is not validated |
| #4274 | Devices for Elementor | 62 | 22 | 13 | 400 | | | Output is not escaped |
| #4275 | Disable Visual Editor WYSIWYG | 62 | 10 | 12 | 1k+ | | | Nonce verification recommended |
| #4276 | DreamHost Automated Migration | 62 | 15 | 23 | 20k+ | | | Output is not escaped |
| #4277 | Equalweb Accessibility | 62 | 21 | 5 | 4k+ | | | Output is not escaped |
| #4278 | exovia GDPR Google Maps | 62 | 40 | 6 | 4k+ | | | Output is not escaped |
| #4279 | Falcon – WordPress Optimizations & Tweaks | 62 | 47 | 66 | 2k+ | | | Short PHP open tag found |
| #4280 | Genesis Accessible | 62 | 49 | 17 | 500 | | | Text Domain Mismatch |
| #4281 | Get Chat App | 62 | 10 | 62 | 400 | | | Request data is not unslashed |
| #4282 | GetGenie – AI Content Writer with Keyword Research & SEO Tracking | 62 | 13 | 39 | 80k+ | | | Nonce verification recommended |
| #4283 | Hestia Nginx Cache | 62 | 21 | 8 | 1k+ | | | Output is not escaped |
| #4284 | Import entries for Gravity Forms | 62 | 6 | 26 | 500 | | | Input is not validated |
| #4285 | Include Matomo Tracking, by Jonas Hellmann | 62 | 14 | 4 | 500 | | | Setting is missing a sanitization callback |
| #4286 | Cron Jobs | 62 | 21 | 33 | 2k+ | | | Nonce verification recommended |
| #4287 | Live Simple Clock | 62 | 23 | 1 | 800 | | | Output is not escaped |
| #4288 | MainWP Key Maker | 62 | 3 | 35 | 4k+ | | | Input is not sanitized |
| #4289 | Migrate To Liquid Web & Nexcess | 62 | 15 | 23 | 2k+ | | | Output is not escaped |
| #4290 | Nimbata Call Tracking | 62 | 13 | 11 | 400 | | | Non-prefixed function |
| #4291 | payOS | 62 | 19 | 26 | 500 | | | Request data is not unslashed |
| #4292 | Pressable Automated Migration | 62 | 15 | 23 | 3k+ | | | Output is not escaped |
| #4293 | Proofreading | 62 | 11 | 74 | 5k+ | | | Direct Query |
| #4294 | Responsive Slider Gallery – Responsive Image Photo Slider | 62 | 32 | 122 | 2k+ | | | Non-prefixed global variable |
| #4295 | Easy SSL Plugin for SAKURA Rental Server | 62 | 23 | 17 | 50k+ | | | Input is not sanitized |
| #4296 | SEO Image Toolbox | 62 | 19 | 14 | 1k+ | | | Output is not escaped |
| #4297 | Single Post Template | 62 | 14 | 8 | 4k+ | | | Text Domain Mismatch |
| #4298 | Sitewide Notice WP | 62 | 6 | 13 | 3k+ | | | Output is not escaped |
| #4299 | Spam Comments Cleaner | 62 | 14 | 29 | 1k+ | | | Non-prefixed function |
| #4300 | Standard Widget Extensions | 62 | 67 | 6 | 1k+ | | | Output is not escaped |