| #4601 | TextBuilder | 56 | 20 | 34 | 4k+ | | | Missing Arg Domain |
| #4602 | Image Optimization For SEO | 56 | 116 | 69 | 3k+ | | | Non Singular String Literal Domain |
| #4603 | Require Featured Image | 56 | 20 | 6 | 3k+ | | | Output is not escaped |
| #4604 | TableKit – WordPress Table Builder for Data Tables, WooCommerce Product Tables & Post Tables | 56 | 80 | 20 | 3k+ | | | Missing Translators Comment |
| #4605 | Grids: Layout builder for WordPress | 56 | 24 | 27 | 2k+ | | | Missing direct file access protection |
| #4606 | WP Clean Admin Menu | 56 | 29 | 11 | 2k+ | | | Output is not escaped |
| #4607 | Anti-Captcha (anti-spam botblocker) | 56 | 23 | 26 | 1k+ | | | rand mt rand |
| #4608 | Easy Digital Downloads Featured Downloads | 56 | 15 | 15 | 1k+ | | | Output is not escaped |
| #4609 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #4610 | SMTP by BestWebSoft | 56 | 486 | 175 | 1k+ | | | Text Domain Mismatch |
| #4611 | Form data to kintone | 56 | 25 | 22 | 1k+ | | | Output is not escaped |
| #4612 | PuzzleMe – Interactive Puzzles for WordPress – Easily publish crosswords, quizzes, word searches and more | 56 | 36 | 15 | 1k+ | | | Output is not escaped |
| #4613 | USERCENTRICS CMP | 56 | 44 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #4614 | Simple Org Chart | 56 | 15 | 29 | 900 | | | Missing Version |
| #4615 | WC Moneris Payment Gateway | 56 | 82 | 20 | 900 | | | Text Domain Mismatch |
| #4616 | BuddyCommerce: WooCommerce and BuddyPress Integration | 56 | 29 | 19 | 800 | | | Output is not escaped |
| #4617 | Subscriptions for WooCommerce with Stripe Recurring Payments | 56 | 10 | 467 | 800 | | | Non-prefixed global variable |
| #4618 | Posts Columns Manager | 56 | 47 | 2 | 800 | | | Output is not escaped |
| #4619 | CIELO API PIX, credit card, debit payment for WooCommerce | 56 | 11 | 121 | 700 | | | Nonce verification recommended |
| #4620 | Karma Music Player by Kadar | 56 | 47 | 9 | 700 | | | Output is not escaped |
| #4621 | CHEQ Essentials | 56 | 14 | 49 | 700 | | | Request data is not unslashed |
| #4622 | reCAPTCHA for Ninja Forms | 56 | 21 | 9 | 600 | | | Output is not escaped |
| #4623 | Free Live Chat Support | 56 | 9 | 20 | 600 | | | Output is not escaped |
| #4624 | easy AMP | 56 | 10 | 24 | 600 | | | Input is not sanitized |
| #4625 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |
| #4626 | Maya Business Plugin | 56 | 9 | 39 | 600 | | | Input is not validated |
| #4627 | Fluent Connect – Connect ThriveCart with your WordPress and FluentCRM | 56 | 37 | 54 | 600 | | | curl curl setopt |
| #4628 | Video Dashboard | 56 | 33 | 1 | 600 | | | Output is not escaped |
| #4629 | Replace Protected Password | 56 | 6 | 18 | 600 | | | Input is not sanitized |
| #4630 | All in One SEO Pack Importer | 56 | 17 | 25 | 500 | | | Direct Query |
| #4631 | Contextual Adminbar Color | 56 | 18 | 16 | 500 | | | Output is not escaped |
| #4632 | Debug Bar Cron | 56 | 73 | 1 | 400 | | | Output is not escaped |
| #4633 | Quick Flickr Widget | 56 | 37 | 2 | 400 | | | Output is not escaped |
| #4634 | Review Stream | 56 | 41 | 42 | 400 | | | Non-prefixed global variable |
| #4635 | Weer | 56 | 54 | 6 | 400 | | | Output is not escaped |
| #4636 | Admin Bar Fix | 56 | 40 | 18 | 400 | | | Text Domain Mismatch |
| #4637 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 55 | 54 | 692 | 700k+ | | | Non-prefixed hook name |
| #4638 | Insert Headers And Footers | 55 | 74 | 275 | 300k+ | | | Non-prefixed function |
| #4639 | LoginPress | wp-login Custom Login Page Customizer | 55 | 125 | 308 | 200k+ | | | Non-prefixed function |
| #4640 | Head, Footer and Post Injections | 55 | 9 | 52 | 200k+ | | | Non-prefixed global variable |
| #4641 | VK Block Patterns | 55 | 8 | 61 | 100k+ | | | Non-prefixed function |
| #4642 | Go Live Update Urls | 55 | 11 | 49 | 80k+ | | | Non-prefixed hook name |
| #4643 | WP Ultimate Review | 55 | 23 | 381 | 70k+ | | | Non-prefixed global variable |
| #4644 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | | | Direct Query |
| #4645 | Insert Pages | 55 | 52 | 30 | 40k+ | | | Output is not escaped |
| #4646 | Virtual Robots.txt | 55 | 10 | 21 | 40k+ | | | Input is not validated |
| #4647 | Accordions | 55 | 1 | 101 | 20k+ | | | slow db query meta query |
| #4648 | Email Template Customizer for WooCommerce | 55 | 552 | 248 | 20k+ | | | Text Domain Mismatch |
| #4649 | Login or Logout Menu Item | 55 | 13 | 7 | 20k+ | | | Unsafe printing function |
| #4650 | Disable Feeds | 55 | 9 | 9 | 20k+ | | | Output is not escaped |