| #4501 | Error Log Viewer by BestWebSoft | 58 | 433 | 172 | 6k+ | | | Text Domain Mismatch |
| #4502 | Easy Social Box / Page Plugin | 58 | 53 | 4 | 4k+ | | | Output is not escaped |
| #4503 | BCM Duplicate Menu | 58 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #4504 | Houzez WooCommerce Addon | 58 | 22 | 21 | 4k+ | | | Missing Translators Comment |
| #4505 | Responsive Select Menu | 58 | 29 | 27 | 3k+ | | | Output is not escaped |
| #4506 | Ultimate Member – Online Users | 58 | 25 | 4 | 3k+ | | | Output is not escaped |
| #4507 | Menu Swapper | 58 | 20 | 14 | 3k+ | | | Output is not escaped |
| #4508 | Simple Back To Top | 58 | 15 | 43 | 3k+ | | | Non-prefixed global variable |
| #4509 | PDF invoice for WP ERP | 58 | 96 | 134 | 2k+ | | | Non-prefixed global variable |
| #4510 | CSSIgniter Shortcodes | 58 | 55 | 2 | 2k+ | | | Output is not escaped |
| #4511 | Cloak Affiliate Links for WooCommerce | 58 | 28 | 6 | 2k+ | | | Non Singular String Literal Domain |
| #4512 | Easy Sidebar Menu Widget | 58 | 32 | 7 | 2k+ | | | Output is not escaped |
| #4513 | WP Admin Category Search | 58 | 23 | 11 | 2k+ | | | Unsafe printing function |
| #4514 | E-namad & Shamed Logo Manager | 58 | 26 | 2 | 2k+ | | | Output is not escaped |
| #4515 | WP Online Active Users | 58 | 26 | 45 | 2k+ | | | Non-prefixed global variable |
| #4516 | Random Post for Widget | 58 | 27 | 5 | 2k+ | | | Output is not escaped |
| #4517 | Customization for WP SEO | 58 | 15 | 10 | 2k+ | | | Unsafe printing function |
| #4518 | REVIEWS.io for WooCommerce | 58 | 71 | 161 | 1k+ | | | Non-prefixed global variable |
| #4519 | SportsPress for Basketball | 58 | 104 | 34 | 1k+ | | | Text Domain Mismatch |
| #4520 | Simple CSS for widgets | 58 | 11 | 15 | 1k+ | | | Missing nonce verification |
| #4521 | WP Healthcheck | 58 | 37 | 73 | 1k+ | | | Non-prefixed global variable |
| #4522 | Go Redirects URL Forwarder | 58 | 17 | 14 | 1k+ | | | Output is not escaped |
| #4523 | List Last Changes | 58 | 50 | 15 | 1k+ | | | Output is not escaped |
| #4524 | Safety Exit | 58 | 52 | 26 | 1k+ | | | Text Domain Mismatch |
| #4525 | Wettervorhersage | 58 | 49 | 7 | 1k+ | | | Output is not escaped |
| #4526 | Flexible FAQ | 58 | 27 | 26 | 1k+ | | | Text Domain Mismatch |
| #4527 | VRTs – Visual Regression Tests | 58 | 61 | 118 | 900 | | | Database parameter is not escaped |
| #4528 | PageLoader Lite – Loading Screen | 58 | 29 | 17 | 700 | | | Output is not escaped |
| #4529 | Admin Page Notes | 58 | 17 | 15 | 700 | | | Text Domain Mismatch |
| #4530 | WebP Express Plus | 58 | 19 | 11 | 700 | | | Unsafe printing function |
| #4531 | Contact Form DB for Enfold | 58 | 21 | 14 | 700 | | | Output is not escaped |
| #4532 | Super Simple Event Calendar | 58 | 8 | 24 | 600 | | | Request data is not unslashed |
| #4533 | HAL | 58 | 106 | 24 | 500 | | | Text Domain Mismatch |
| #4534 | Quickcreator – AI Blog Writer | 58 | 14 | 18 | 500 | | | Exception output is not escaped |
| #4535 | Web Accessibility Toolkit – Accessibility Checker & ARIA for WCAG, Section 508 & ADA Compliance | 58 | 9 | 20 | 500 | | | Output is not escaped |
| #4536 | SportsPress for Volleyball | 58 | 107 | 34 | 500 | | | Text Domain Mismatch |
| #4537 | PW WooCommerce BOGO | 58 | 30 | 8 | 400 | | | Unsafe printing function |
| #4538 | MC4WP: Mailchimp for WordPress | 57 | | 238 | 1m+ | | | Non-prefixed global variable |
| #4539 | Public Post Preview | 57 | 8 | 11 | 100k+ | | | Nonce verification recommended |
| #4540 | Internal Link Juicer: SEO Auto Linker for WordPress | 57 | 12 | 61 | 90k+ | | | Database parameter is not escaped |
| #4541 | Simple CSS | 57 | 22 | 13 | 80k+ | | | Missing Version |
| #4542 | Real-Time Find and Replace | 57 | 23 | 10 | 70k+ | | | Output is not escaped |
| #4543 | WP Table Builder – Drag & Drop Table Builder | 57 | 63 | 39 | 50k+ | | | Not Allowed |
| #4544 | Search Exclude | 57 | 73 | 40 | 50k+ | | | Text Domain Mismatch |
| #4545 | Elementor Beta (Developer Edition) | 57 | 36 | 32 | 30k+ | | | Output is not escaped |
| #4546 | Gravity PDF | 57 | 116 | 152 | 20k+ | | | Non-prefixed global variable |
| #4547 | Hide Admin Notices | 57 | 9 | 16 | 20k+ | | | Input is not sanitized |
| #4548 | Sequential Order Numbers for WooCommerce | 57 | 9 | 24 | 10k+ | | | Interpolated SQL is not prepared |
| #4549 | My WordPress Login Logo | 57 | 28 | 36 | 10k+ | | | Non-prefixed global variable |
| #4550 | Delete Pending Comments | 57 | 16 | 11 | 10k+ | | | Unsafe printing function |