| #4901 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #4902 | TrustedSite | 50 | 29 | 14 | 20k+ | | | Output is not escaped |
| #4903 | Table Addons for Elementor | 50 | 92 | 29 | 20k+ | | | wp function not compatible with requires wp |
| #4904 | MB Custom Post Types & Custom Taxonomies | 50 | 61 | 55 | 10k+ | | | Missing Translators Comment |
| #4905 | Send Emails with Mandrill | 50 | 36 | 141 | 6k+ | | | Non-prefixed global variable |
| #4906 | Category AJAX Filter — Advanced Filter for Posts & Custom Post Types | 50 | 2 | 435 | 6k+ | | | Non-prefixed global variable |
| #4907 | Product Open Pricing (Name Your Price) for WooCommerce | 50 | 105 | 37 | 6k+ | | | Text Domain Mismatch |
| #4908 | Theme Demo Import | 50 | 101 | 95 | 5k+ | | | Non-prefixed hook name |
| #4909 | Calculadora de Frete e Campos Checkout para o Brasil | 50 | 1 | 138 | 5k+ | | | Missing nonce verification |
| #4910 | Disable Site | 50 | 26 | 3 | 4k+ | | | Output is not escaped |
| #4911 | WP Hide Show Featured Image | 50 | 36 | 5 | 4k+ | | | Unsafe printing function |
| #4912 | Sitemap Generator | 50 | 60 | 26 | 3k+ | | | Output is not escaped |
| #4913 | User Activity Tracking and Log | 50 | 30 | 263 | 3k+ | | | Non-prefixed global variable |
| #4914 | Server Info – System Health & Diagnostics Suite | 50 | 15 | 46 | 3k+ | | | Input is not sanitized |
| #4915 | Ultimate Floating Widgets – Make popup sidebars | 50 | 48 | 14 | 3k+ | | | Output is not escaped |
| #4916 | WRC Pricing Tables – Responsive CSS3 Pricing Tables | 50 | 5 | 96 | 2k+ | | | Missing nonce verification |
| #4917 | IMGspider – 图片采集抓取插件 | 50 | 12 | 49 | 2k+ | | | Missing nonce verification |
| #4918 | Razorpay Payment Links for WooCommerce | 50 | 16 | 34 | 1k+ | | | Nonce verification recommended |
| #4919 | Headline Analyzer | 50 | 13 | 31 | 1k+ | | | Nonce verification recommended |
| #4920 | Sözleşmeler | 50 | 6 | 36 | 1k+ | | | Input is not sanitized |
| #4921 | PostmagThemes Demo Import | 50 | 191 | 114 | 1k+ | | | Text Domain Mismatch |
| #4922 | Dashboard To-Do List | 50 | 21 | 8 | 1k+ | | | Unsafe printing function |
| #4923 | Block IPs for Gravity Forms | 50 | 8 | 36 | 1k+ | | | Request data is not unslashed |
| #4924 | Advanced Custom Fields – Taxonomy Field add-on | 50 | 57 | 4 | 1k+ | | | Non Singular String Literal Domain |
| #4925 | BestWebSoft's Twitter | 50 | 477 | 174 | 900 | | | Text Domain Mismatch |
| #4926 | Simple User Listing | 50 | 27 | 56 | 900 | | | Non-prefixed global variable |
| #4927 | Auto Ping Booster Free | 50 | 18 | 21 | 900 | | | Setting is missing a sanitization callback |
| #4928 | Mailster Gravity Forms | 50 | 46 | 32 | 800 | | | Text Domain Mismatch |
| #4929 | Tiempo | 50 | 53 | 8 | 800 | | | Output is not escaped |
| #4930 | Meteo | 50 | 58 | 9 | 800 | | | Output is not escaped |
| #4931 | Aspexi Social Media Sidebox | 50 | 175 | 12 | 700 | | | Text Domain Mismatch |
| #4932 | Pago por Redsys | 50 | 44 | 59 | 700 | | | Text Domain Mismatch |
| #4933 | Veeqo for WooCommerce | 50 | 30 | 17 | 700 | | | Missing direct file access protection |
| #4934 | Booster for WPForms | 50 | 79 | 45 | 700 | | | Text Domain Mismatch |
| #4935 | Event Organiser CSV | 50 | 28 | 27 | 600 | | | Output is not escaped |
| #4936 | Section Widget | 50 | 24 | 35 | 500 | | | Nonce verification recommended |
| #4937 | Customize Tawk.to Widget | 50 | 21 | 28 | 500 | | | Request data is not unslashed |
| #4938 | BuddyPress Groups Extras | 50 | 30 | 51 | 400 | | | Missing direct file access protection |
| #4939 | Ultimate WooCommerce Brands | 50 | 87 | 12 | 400 | | | Text Domain Mismatch |
| #4940 | 📷 Simple QR Code Generator Widget | 50 | 21 | 14 | 400 | | | Output is not escaped |
| #4941 | Bangla Fonts Collection | 50 | 47 | 3 | 400 | | | Text Domain Mismatch |
| #4942 | WP Sitemap Page | 49 | 43 | 14 | 200k+ | | | Missing Translators Comment |
| #4943 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
| #4944 | OneClick Chat to Order | 49 | 677 | 41 | 40k+ | | | Text Domain Mismatch |
| #4945 | UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks | 49 | 34 | 38 | 40k+ | | | Missing direct file access protection |
| #4946 | SpinupWP | 49 | 43 | 38 | 30k+ | | | Non-prefixed function |
| #4947 | ACF Quick Edit Fields | 49 | 20 | 72 | 30k+ | | | Nonce verification recommended |
| #4948 | Meks Simple Flickr Widget | 49 | 38 | 0 | 20k+ | | | Output is not escaped |
| #4949 | Advanced Automatic Updates | 49 | 26 | 25 | 20k+ | | | Nonce verification recommended |
| #4950 | Product Slider, Product Grid, Product Masonry | 49 | 55 | 144 | 10k+ | | | wp function not compatible with requires wp |