| #4401 | iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more | 60 | 405 | 271 | 200k+ | | | Text Domain Mismatch |
| #4402 | Just Responsive Images | 60 | 25 | 7 | 500 | | | Missing direct file access protection |
| #4403 | Kubio AI Page Builder | 60 | 283 | 77 | 90k+ | | | Missing direct file access protection |
| #4404 | Mailster AmazonSES Integration | 60 | 52 | 25 | 1k+ | | | Missing Arg Domain |
| #4405 | Material Design for WordPress | 60 | 51 | 207 | 800 | | | Non-prefixed global variable |
| #4406 | Product Labels, Quick View, Buy Now, Pre-Orders, Frequently Bought Together & More for WooCommerce – Merchant | 60 | 11 | 740 | 9k+ | | | Non-prefixed global variable |
| #4407 | Order Export & Order Import for WooCommerce | 60 | 247 | 698 | 60k+ | | | Non-prefixed global variable |
| #4408 | Post Duplicator | 60 | 33 | 24 | 200k+ | | | Missing direct file access protection |
| #4409 | Real Accessability | 60 | 21 | 9 | 1k+ | | | Output is not escaped |
| #4410 | RealHomes PayPal Payments | 60 | 55 | 23 | 400 | | | Non Singular String Literal Domain |
| #4411 | Responsive videos – Fitvids | 60 | 26 | 3 | 700 | | | Output is not escaped |
| #4412 | Sales Countdown Timer | 60 | 107 | 150 | 6k+ | | | Missing Arg Domain |
| #4413 | Simple Owl Carousel | 60 | 23 | 13 | 500 | | | Missing Translators Comment |
| #4414 | Skyboot Custom Icons for Elementor – Elementor Icons library – 14300+ Icons | 60 | 91 | 9 | 200k+ | | | Text Domain Mismatch |
| #4415 | Stratum Widgets for Elementor | 60 | 66 | 366 | 20k+ | | | Non-prefixed global variable |
| #4416 | Surge | 60 | 46 | 47 | 4k+ | | | Non-prefixed global variable |
| #4417 | Tabby Responsive Tabs | 60 | 16 | 5 | 10k+ | | | Output is not escaped |
| #4418 | Team – Team Members Showcase Plugin | 60 | 12 | 781 | 10k+ | | | Non-prefixed global variable |
| #4419 | MultiStep Checkout for WooCommerce | 60 | 46 | 57 | 4k+ | | | Non Singular String Literal Text |
| #4420 | WoowGallery | 60 | 15 | 178 | 1k+ | | | Non-prefixed global variable |
| #4421 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | | | Non-prefixed global variable |
| #4422 | WP Bottom Menu | 60 | 74 | 52 | 20k+ | | | Non-prefixed hook name |
| #4423 | WP-SWFObject | 60 | 14 | 24 | 1k+ | | | Deprecated parameter: add_option parameter 3 |
| #4424 | WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click | 60 | 21 | 9 | 6k+ | | | Output is not escaped |
| #4425 | WPSSO Schema Product Metadata for WooCommerce | 60 | 33 | 23 | 500 | | | Missing Translators Comment |
| #4426 | Age Gator | 59 | 9 | 15 | 400 | | | Direct Query |
| #4427 | AudioIgniter Music Player | 59 | | 53 | 10k+ | | | Input is not validated |
| #4428 | Blog Designer | 59 | 62 | 83 | 10k+ | | | Text Domain Mismatch |
| #4429 | Posts Order | 59 | 59 | 20 | 1k+ | | | Text Domain Mismatch |
| #4430 | Co-Authors Plus | 59 | 2 | 76 | 20k+ | | | Input is not sanitized |
| #4431 | Connect SendGrid for Emails | 59 | 37 | 103 | 900 | | | Missing direct file access protection |
| #4432 | Cresta Posts Box | 59 | 10 | 13 | 1k+ | | | Output is not escaped |
| #4433 | Custom API for WP | 59 | 173 | 16 | 1k+ | | | wp function not compatible with requires wp |
| #4434 | Disabled Source, Disabled Right Click and Content Protection | 59 | 6 | 33 | 10k+ | | | Nonce verification recommended |
| #4435 | Display Post Types – Post Grid, post list and post sliders | 59 | 24 | 14 | 7k+ | | | Output is not escaped |
| #4436 | ELEX WooCommerce Name Your Price | 59 | 295 | 117 | 600 | | | Missing Arg Domain |
| #4437 | etracker analytics | 59 | 16 | 9 | 1k+ | | | Exception output is not escaped |
| #4438 | Fathom Analytics Conversions | 59 | 14 | 47 | 400 | | | Non-prefixed function |
| #4439 | File Upload For WPForms – Filenzo | 59 | 8 | 16 | 1k+ | | | Output is not escaped |
| #4440 | flowpaper | 59 | 13 | 31 | 10k+ | | | Non-prefixed function |
| #4441 | FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses | 59 | 41 | 14 | 8k+ | | | Exception output is not escaped |
| #4442 | GDPR Data Request Form | 59 | 22 | 19 | 5k+ | | | Missing direct file access protection |
| #4443 | Gettext override translations | 59 | 33 | 7 | 2k+ | | | Missing Arg Domain |
| #4444 | Getty Images | 59 | 11 | 46 | 2k+ | | | Missing nonce verification |
| #4445 | Gravity Forms: Notification Attachments | 59 | 18 | 7 | 500 | | | Output is not escaped |
| #4446 | Gravity Forms Approvals Add-On | 59 | 17 | 6 | 800 | | | Output is not escaped |
| #4447 | GravityWP – Merge Tags | 59 | 16 | 172 | 2k+ | | | Non-prefixed global variable |
| #4448 | HTTP Headers | 59 | 20 | 43 | 50k+ | | | Nonce verification recommended |
| #4449 | Icon List | 59 | 83 | 11 | 1k+ | | | Text Domain Mismatch |
| #4450 | Importify – AI Dropshipping for WooCommerce | 59 | 22 | 71 | 2k+ | | | Non-prefixed global variable |