| #3901 | MDTF – Meta Data and Taxonomies Filter | 16 | 1,550 | 1,956 | 1k+ | | | Non-prefixed global variable |
| #3902 | Website Article Monetization By MageNet | 47 | 17 | 24 | 10k+ | | | Output is not escaped |
| #3903 | Evermore | 64 | 8 | 12 | 1k+ | | | Input is not validated |
| #3904 | Shipping Live Rates for USPS for WooCommerce | 96 | 4 | 11 | 2k+ | | | Non-prefixed global variable |
| #3905 | BuddyPress Builder for Elementor – BuddyBuilder | 29 | 348 | 329 | 1k+ | | | Text Domain Mismatch |
| #3906 | Force Authentification Before Checkout for WooCommerce | 81 | 12 | 4 | 6k+ | | | Output is not escaped |
| #3907 | WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets | 98 | 1 | 17 | 3k+ | | | Post Not In exclude |
| #3908 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #3909 | Parse.ly | 35 | 15 | 44 | 1k+ | | | Non-prefixed hook name |
| #3910 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |
| #3911 | Styleguide – Custom Fonts and Colors | 75 | 59 | 25 | 2k+ | | | Missing direct file access protection |
| #3912 | Simple Statistics for Feeds | 40 | 64 | 131 | 800 | | | Nonce verification recommended |
| #3913 | WOOF by Category | 92 | 3 | 7 | 1k+ | | | trademarked term |
| #3914 | Like Thumbnail | 76 | 13 | 8 | 1k+ | | | Output is not escaped |
| #3915 | Widgets for Yelp Reviews | 96 | | 349 | 2k+ | | | Non-prefixed global variable |
| #3916 | TopBar Call To Action | 85 | 40 | 5 | 2k+ | | | Text Domain Mismatch |
| #3917 | Smart Archive Page Remove | 44 | 82 | 5 | 7k+ | | | Output is not escaped |
| #3918 | Keyring | 35 | 233 | 203 | 1k+ | | | Output is not escaped |
| #3919 | Legal Text Connector of the IT-Recht Kanzlei | 36 | 45 | 46 | 10k+ | | | Exception output is not escaped |
| #3920 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #3921 | Easy Accordion Block | 99 | 1 | 0 | 7k+ | | | outdated tested upto header |
| #3922 | Advanced Custom Fields Repeater & Flexible Content Fields Collapser | 97 | 3 | 5 | 4k+ | | | trademarked term |
| #3923 | SearchIQ – The Search Solution | 84 | 7 | 18 | 1k+ | | | Database parameter is not escaped |
| #3924 | Elemailer Lite – Elementor email template & campaign builder | 38 | 44 | 50 | 5k+ | | | Output is not escaped |
| #3925 | Remove & Disable XML-RPC Pingback | 98 | 2 | 6 | 8k+ | | | Non-prefixed function |
| #3926 | CubeWP Framework | 35 | 114 | 71 | 4k+ | | | wp function not compatible with requires wp |
| #3927 | TotalPoll for Polls and Contests | 21 | 1,366 | 155 | 1k+ | | | Text Domain Mismatch |
| #3928 | Bulk Page Generator – LPagery | 25 | 670 | 1,926 | 3k+ | | | Non-prefixed global variable |
| #3929 | BeyondWords – Text-to-Speech | 99 | 2 | 0 | 800 | | | outdated tested upto header |
| #3930 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #3931 | Coupon Box for WooCommerce | 87 | 11 | 85 | 1k+ | | | Non-prefixed global variable |
| #3932 | Coupon Shortcodes for WooCommerce | 100 | | 1 | 1k+ | | | trademarked term |
| #3933 | Child Pages Shortcode | 35 | 5 | 6 | 5k+ | | | Non-prefixed hook name |
| #3934 | WCFM – Multivendor Marketplace REST API for WooCommerce | 91 | 5 | 34 | 1k+ | | | Non-prefixed hook name |
| #3935 | Ryviu – Review Importer & Product Reviews | 37 | 72 | 95 | 1k+ | | | Output is not escaped |
| #3936 | Express Checkout via PayPal for WooCommerce | 31 | 158 | 200 | 800 | | | Nonce verification recommended |
| #3937 | Blockskit | 54 | 33 | 29 | 8k+ | | | Text Domain Mismatch |
| #3938 | Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator | 46 | 13 | 25 | 7k+ | | | Request data is not unslashed |
| #3939 | Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce | 35 | 117 | 144 | 2k+ | | | Output is not escaped |
| #3940 | Impressum | 89 | 50 | 12 | 4k+ | | | Short PHP open tag found |
| #3941 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 323 | 499 | 7k+ | | | Non-prefixed global variable |
| #3942 | Custom Post Type Attachment | 34 | 153 | 49 | 800 | | | wp function not compatible with requires wp |
| #3943 | Buzzsprout Podcasting | 41 | 75 | 13 | 5k+ | | | Non Singular String Literal Domain |
| #3944 | Debug | 69 | 25 | 34 | 2k+ | | | Input is not sanitized |
| #3945 | Relevanssi Live Ajax Search | 90 | 4 | 22 | 6k+ | | | Non-prefixed global variable |
| #3946 | Block Manager | 35 | 33 | 26 | 4k+ | | | Text Domain Mismatch |
| #3947 | Custom Favicon – Easily Add a Favicon in WordPress | 99 | 1 | 2 | 5k+ | | | Discouraged text-domain loading |
| #3948 | FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN | 33 | 51 | 333 | 4k+ | | | Request data is not unslashed |
| #3949 | Views for WPForms – Display & Edit WPForms Entries on your site frontend | 37 | 80 | 64 | 1k+ | | | Output is not escaped |
| #3950 | MembershipWorks – Membership, Events & Directory | 40 | 41 | 29 | 2k+ | | | Output is not escaped |