| #4301 | Spam Comments Cleaner | 62 | 14 | 29 | 1k+ | | | Non-prefixed function |
| #4302 | Standard Widget Extensions | 62 | 67 | 6 | 1k+ | | | Output is not escaped |
| #4303 | Testimonial Carousel For Elementor | 62 | 34 | 56 | 10k+ | | | No Html Wrapped Strings |
| #4304 | Topic SEO Content Optimization Tool | 62 | 35 | 15 | 1k+ | | | curl curl close |
| #4305 | Uber Login Logo | 62 | 16 | 5 | 10k+ | | | Unsafe printing function |
| #4306 | WiserNotify – Social Proof & FOMO Notifications, WooCommerce Sales Popups, Reviews & Announcement Bar | 62 | 13 | 32 | 1k+ | | | Request data is not unslashed |
| #4307 | Woo Product Remover | 62 | 23 | 14 | 1k+ | | | SQL query is not prepared |
| #4308 | Satispay for WooCommerce | 62 | 19 | 12 | 7k+ | | | Exception output is not escaped |
| #4309 | Embed Videos For Product Image Gallery Using WooCommerce | 62 | 21 | 16 | 400 | | | Text Domain Mismatch |
| #4310 | WooCommerce Product Fees | 62 | 6 | 25 | 2k+ | | | Missing nonce verification |
| #4311 | WP Category Sort | 62 | 15 | 22 | 500 | | | Text Domain Mismatch |
| #4312 | WP Charts and Graphs – WordPress Chart Plugin | 62 | 8 | 29 | 1k+ | | | Input is not sanitized |
| #4313 | WP Downloader | 62 | 11 | 15 | 2k+ | | | Output is not escaped |
| #4314 | Wp Theme plugin Download | 62 | 11 | 16 | 2k+ | | | Output is not escaped |
| #4315 | XPoster – Share to Bluesky and Mastodon | 62 | 26 | 36 | 10k+ | | | Missing nonce verification |
| #4316 | Migrate to WordPress.com | 62 | 15 | 28 | 2k+ | | | Output is not escaped |
| #4317 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | | Output is not escaped |
| #4318 | Academy LMS | 61 | 18 | 521 | 2k+ | | | Non-prefixed global variable |
| #4319 | Accessibility Font Resizer | 61 | 54 | 1 | 800 | | | Text Domain Mismatch |
| #4320 | Add Quantity Field on Shop Page for WooCommerce | 61 | 33 | 7 | 700 | | | Output is not escaped |
| #4321 | Ads.txt Manager | 61 | 33 | 16 | 4k+ | | | Text Domain Mismatch |
| #4322 | In-Post Ads | 61 | 27 | 10 | 600 | | | Text Domain Mismatch |
| #4323 | Alerts for Beaver Builder | 61 | 42 | 1 | 500 | | | Output is not escaped |
| #4324 | Custom Buttons for WooCommerce – Add To Cart Button for Product Types | 61 | 58 | 4 | 2k+ | | | Text Domain Mismatch |
| #4325 | Comment Form WP – Customize Default Comment Form | 61 | 39 | 7 | 600 | | | Output is not escaped |
| #4326 | CommerceBird – AI Command Center, ERP Integrations & B2B for WooCommerce (Zoho, Exact Online). | 61 | 2 | 162 | 400 | | | Direct Query |
| #4327 | Compact WP Audio Player | 61 | 12 | 21 | 20k+ | | | Non-prefixed function |
| #4328 | Constructor for SiteOrigin | 61 | 29 | 6 | 600 | | | Output is not escaped |
| #4329 | Creative Commons | 61 | 103 | 17 | 700 | | | Text Domain Mismatch |
| #4330 | Disable Right Click For WP | 61 | 15 | 12 | 10k+ | | | Missing nonce verification |
| #4331 | Documents for WooCommerce | 61 | 16 | 13 | 500 | | | Output is not escaped |
| #4332 | ELEX WooCommerce Catalog Mode | 61 | 97 | 49 | 10k+ | | | Text Domain Mismatch |
| #4333 | Equal Height Columns | 61 | 24 | 5 | 10k+ | | | Output is not escaped |
| #4334 | GamiPress – Link | 61 | 32 | 5 | 800 | | | Output is not escaped |
| #4335 | GetPaid Stripe Payments | 61 | 206 | 44 | 2k+ | | | Text Domain Mismatch |
| #4336 | Country and State Selection Addon for Gravity Forms | 61 | 14 | 26 | 1k+ | | | Non-prefixed constant |
| #4337 | GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | 61 | 9 | 119 | 80k+ | | | Non-prefixed global variable |
| #4338 | Hide Admin Bar For User Roles | 61 | 38 | 10 | 500 | | | Output is not escaped |
| #4339 | Hotjar | 61 | 16 | 4 | 70k+ | | | Output is not escaped |
| #4340 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | | | Output is not escaped |
| #4341 | Magic Tooltips For Contact Form 7 | 61 | 37 | 21 | 700 | | | Text Domain Mismatch |
| #4342 | Marker.io – Visual Website Feedback | 61 | 6 | 31 | 4k+ | | | Request data is not unslashed |
| #4343 | Media Library Helper — Bulk edit image ALT, caption & description | 61 | 16 | 70 | 10k+ | | | Non-prefixed global variable |
| #4344 | Mentions Legales Par Webdeclic | 61 | 82 | 39 | 500 | | | Non Singular String Literal Domain |
| #4345 | Reorder Posts – Quick Post Type and Page Ordering | 61 | 10 | 23 | 10k+ | | | Request data is not unslashed |
| #4346 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | | | Output is not escaped |
| #4347 | Newspack Newsletters | 61 | 53 | 47 | 1k+ | | | Request data is not unslashed |
| #4348 | Order On Mobile for WooCommerce | 61 | 37 | 15 | 2k+ | | | Text Domain Mismatch |
| #4349 | Organic Custom Content | 61 | 8 | 18 | 700 | | | Input is not sanitized |
| #4350 | Post/Page Import Export – Migrate Content with Custom Fields & Taxonomies | 61 | 12 | 27 | 400 | | | Input is not sanitized |