| #4101 | Grow for WordPress | 96 | 7 | 5 | 10k+ | | | trademarked term |
| #4102 | PDF Flipbook, WPBakery Addon – Unreal FlipBook | 36 | 400 | 92 | 1k+ | | | Non Singular String Literal Domain |
| #4103 | Announcement & Notification Banner – Bulletin | 23 | 930 | 1,576 | 2k+ | | | Non-prefixed global variable |
| #4104 | BNE Testimonials | 29 | 521 | 102 | 1k+ | | | Output is not escaped |
| #4105 | Post title marquee scroll | 43 | 43 | 25 | 1k+ | | | Output is not escaped |
| #4106 | Sp*tify Play Button for WordPress | 54 | 21 | 15 | 3k+ | | | Text Domain Mismatch |
| #4107 | WP-Markdown | 35 | 31 | 39 | 400 | | | Output is not escaped |
| #4108 | Shipping Method Display Style for WooCommerce | 26 | 529 | 1,308 | 2k+ | | | Non-prefixed global variable |
| #4109 | Display Featured Image for Genesis | 46 | 64 | 59 | 1k+ | | | Non-prefixed global variable |
| #4110 | Super Simple Site Offline | 37 | 115 | 59 | 6k+ | | | Text Domain Mismatch |
| #4111 | Frenet Shipping Gateway for WooCommerce – Correios, Etiquetas e Rastreio | 66 | 22 | 31 | 4k+ | | | Non-prefixed global variable |
| #4112 | PayPlus Payment Gateway | 96 | | 87 | 1k+ | | | Non-prefixed class |
| #4113 | Event Post | 34 | 329 | 99 | 1k+ | | | Output is not escaped |
| #4114 | Enable SVG, WebP, and ICO Upload | 96 | 12 | 16 | 10k+ | | | Non-prefixed global variable |
| #4115 | Storefront Top Bar | 77 | 20 | 13 | 2k+ | | | Non-prefixed hook name |
| #4116 | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 19 | 555 | 1,291 | 3k+ | | | Non-prefixed global variable |
| #4117 | Donation Platform for WooCommerce: Fundraising & Donation Management | 34 | 331 | 448 | 7k+ | | | Non-prefixed global variable |
| #4118 | Oliver POS – WooCommerce POS for iPhone, iPad & Android | 37 | 15 | 242 | 800 | | | Interpolated SQL is not prepared |
| #4119 | Permalinks Moved Permanently | 73 | 7 | 7 | 700 | | | Database parameter is not escaped |
| #4120 | Photo Gallery Slideshow & Masonry Tiled Gallery | 30 | 806 | 352 | 1k+ | | | Output is not escaped |
| #4121 | consentmanager Cookie Banner | 98 | 6 | 0 | 5k+ | | | wp function not compatible with requires wp |
| #4122 | Display Categories Widget | 42 | 90 | 4 | 3k+ | | | Output is not escaped |
| #4123 | Issuu PDF Sync | 35 | 159 | 28 | 900 | | | Text Domain Mismatch |
| #4124 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | | | Output is not escaped |
| #4125 | Animated Text Block – Add Typing and Looping Text Effects | 78 | 5 | 25 | 4k+ | | | Non-prefixed class |
| #4126 | Last Modified Timestamp | 87 | 9 | 3 | 7k+ | | | Output is not escaped |
| #4127 | Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid | 25 | 656 | 1,506 | 5k+ | | | Non-prefixed global variable |
| #4128 | Total Sales Counts for WooCommerce | 40 | 121 | 62 | 700 | | | SQL query is not prepared |
| #4129 | Ajax Cart AutoUpdate for WooCommerce | 76 | 15 | 5 | 8k+ | | | Output is not escaped |
| #4130 | Free Live Chat Support | 56 | 9 | 20 | 600 | | | Output is not escaped |
| #4131 | SEO Auto Linker | 39 | 90 | 24 | 1k+ | | | Text Domain Mismatch |
| #4132 | Easy Notify Lite | 93 | 26 | 45 | 400 | | | Missing Version |
| #4133 | Alphabetic Pagination | 38 | 144 | 117 | 500 | | | Unsafe printing function |
| #4134 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #4135 | Archive Content with Archived Post Status | 35 | 3 | 2 | 5k+ | | | Discouraged text-domain loading |
| #4136 | Spreadshop Plugin | 35 | 145 | 44 | 4k+ | | | wp function not compatible with requires wp |
| #4137 | Simple Post Type Permalinks | 35 | 16 | 1 | 9k+ | | | date date |
| #4138 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #4139 | WCFM – WCFM Marketplace integrate Elementor | 44 | 82 | 18 | 1k+ | | | Output is not escaped |
| #4140 | GIFTiT – Free Gifts for WooCommerce | 81 | 43 | 357 | 2k+ | | | Non-prefixed global variable |
| #4141 | Follow Us Badges | 96 | 7 | 9 | 1k+ | | | Non-prefixed global variable |
| #4142 | Post Carousel Slider for Elementor | 43 | 133 | 23 | 3k+ | | | Text Domain Mismatch |
| #4143 | Kadence for WooCommerce and Elementor | 35 | 39 | 21 | 3k+ | | | Output is not escaped |
| #4144 | WP Theme Test | 40 | 21 | 39 | 7k+ | | | Input is not sanitized |
| #4145 | Arile Super | 32 | 328 | 351 | 3k+ | | | Non-prefixed global variable |
| #4146 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #4147 | Editor Menu and Widget Access | 39 | 81 | 24 | 7k+ | | | Output is not escaped |
| #4148 | Flat Preloader | 35 | 40 | 15 | 3k+ | | | Output is not escaped |
| #4149 | Socials Ignited | 86 | 12 | 2 | 2k+ | | | Missing direct file access protection |
| #4150 | SearchWP Modal Search Form | 91 | 9 | 9 | 5k+ | | | trademarked term |