| #4151 | Socials Ignited | 86 | 12 | 2 | 2k+ | | | Missing direct file access protection |
| #4152 | Store Hours for WooCommerce | 28 | 525 | 60 | 2k+ | | | Output is not escaped |
| #4153 | Lead Form Data Collection to CRM | 23 | 211 | 1,698 | 400 | | | Non-prefixed global variable |
| #4154 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | | Output is not escaped |
| #4155 | Web Worker Offloading | 99 | | 2 | 10k+ | | | Non-prefixed constant |
| #4156 | Set Price Note (Units, Offers, Editions) for WooCommerce | 26 | 596 | 1,307 | 800 | | | Non-prefixed global variable |
| #4157 | Buckaroo Woocommerce Payments Plugin | 21 | 584 | 326 | 2k+ | | | Exception output is not escaped |
| #4158 | Search Engine Insights for Google Search Console | 34 | 174 | 113 | 2k+ | | | Output is not escaped |
| #4159 | QODE Quick View for WooCommerce | 90 | 2 | 98 | 10k+ | | | Non-prefixed global variable |
| #4160 | Parent Category Toggler | 91 | 6 | 0 | 10k+ | | | Missing direct file access protection |
| #4161 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | 30 | 334 | 284 | 500 | | | Output is not escaped |
| #4162 | Dynamic User Directory | 28 | 403 | 256 | 1k+ | | | Output is not escaped |
| #4163 | Random Post Plugin – Redirect URL to Post | 40 | 28 | 74 | 3k+ | | | Nonce verification recommended |
| #4164 | Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode | 23 | 907 | 2,014 | 900 | | | Non-prefixed global variable |
| #4165 | Popular Posts | 35 | 166 | 71 | 900 | | | Unsafe printing function |
| #4166 | Author Bio Box | 98 | 1 | 6 | 1k+ | | | Non-prefixed global variable |
| #4167 | Animator – Scroll Triggered Animations | 78 | 16 | 24 | 1k+ | | | Missing direct file access protection |
| #4168 | Newspack Newsletters | 61 | 53 | 47 | 1k+ | | | Request data is not unslashed |
| #4169 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |
| #4170 | Wp Favs – Plugin Manager | 34 | 238 | 153 | 3k+ | | | Text Domain Mismatch |
| #4171 | Rich Contact Widget | 80 | 13 | 2 | 9k+ | | | Output is not escaped |
| #4172 | Custom Add to Cart Button Label and Link for WooCommerce | 36 | 371 | 112 | 3k+ | | | Text Domain Mismatch |
| #4173 | Logo Manager For Enamad – لوگوی نماد الکترونیکی | 57 | 18 | 14 | 5k+ | | | Output is not escaped |
| #4174 | File Uploads Addon for WooCommerce | 88 | 8 | 15 | 5k+ | | | Missing direct file access protection |
| #4175 | GDPR tools: Cookie notice + privacy | 41 | 67 | 8 | 6k+ | | | Unsafe printing function |
| #4176 | GetResponse Forms by Optin Cat | 33 | 68 | 138 | 1k+ | | | Missing direct file access protection |
| #4177 | Formstack Online Forms | 52 | 39 | 20 | 1k+ | | | Output is not escaped |
| #4178 | Gallery Widget | 39 | 122 | 11 | 500 | | | Output is not escaped |
| #4179 | WooCommerce New Product Badge | 91 | 8 | 8 | 800 | | | Text Domain Mismatch |
| #4180 | Twenty Eleven Theme Extensions | 38 | 35 | 30 | 3k+ | | | Output is not escaped |
| #4181 | Publish to Schedule | 37 | 195 | 43 | 3k+ | | | Text Domain Mismatch |
| #4182 | Events Search For The Events Calendar | 100 | | 2 | 3k+ | | | Non-prefixed class |
| #4183 | Christmasify! | 63 | 18 | 7 | 2k+ | | | Output is not escaped |
| #4184 | Telegram Bot & Channel | 33 | 182 | 113 | 600 | | | Unsafe printing function |
| #4185 | Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | 35 | 83 | 76 | 2k+ | | | Output is not escaped |
| #4186 | Polaroid Gallery | 38 | 105 | 20 | 1k+ | | | Unsafe printing function |
| #4187 | Rel Nofollow Checkbox | 97 | 9 | 1 | 4k+ | | | Missing Arg Domain |
| #4188 | CF7 Invisible reCAPTCHA | 41 | 19 | 52 | 7k+ | | | Request data is not unslashed |
| #4189 | Simple Pull Quote | 95 | 18 | 2 | 1k+ | | | wp function not compatible with requires wp |
| #4190 | AMP WP – Google AMP For WordPress | 96 | 51 | 19 | 700 | | | Missing Arg Domain |
| #4191 | Continue Shopping for WooCommerce | 73 | 9 | 20 | 5k+ | | | Input is not sanitized |
| #4192 | AI Provider for Google | 65 | 32 | 1 | 30k+ | | | Exception output is not escaped |
| #4193 | Easyship WooCommerce Shipping Rates | 98 | 1 | 16 | 2k+ | | | Direct Query |
| #4194 | Visitors Online by BestWebSoft | 26 | 512 | 269 | 1k+ | | | Text Domain Mismatch |
| #4195 | Events Maker by dFactory | 22 | 588 | 819 | 1k+ | | | Output is not escaped |
| #4196 | SMTP | 39 | 54 | 15 | 700 | | | Non Singular String Literal Domain |
| #4197 | User Blocker | 39 | 6 | 276 | 3k+ | | | Nonce verification recommended |
| #4198 | Place Order Without Payment for WooCommerce | 72 | 244 | 62 | 3k+ | | | Text Domain Mismatch |
| #4199 | Disable WP Notification | 43 | 74 | 25 | 10k+ | | | Output is not escaped |
| #4200 | RSS Redirect & Feedburner Alternative | 26 | 277 | 272 | 1k+ | | | Output is not escaped |