| #4251 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | | Text Domain Mismatch |
| #4252 | Posts By Tag | 39 | 151 | 30 | 1k+ | | | Output is not escaped |
| #4253 | WP About Author | 98 | 3 | 3 | 500 | | | trademarked term |
| #4254 | WP Modal Popup with Cookie Integration | 41 | 88 | 13 | 1k+ | | | Unsafe printing function |
| #4255 | Responsive Video Embeds | 97 | 3 | 2 | 2k+ | | | Missing direct file access protection |
| #4256 | IntelliWidget Per Page Custom Menus and Dynamic Content | 36 | 586 | 162 | 600 | | | Output is not escaped |
| #4257 | Allow Multiple Accounts | 40 | 115 | 19 | 9k+ | | | Non Singular String Literal Domain |
| #4258 | Text Replace | 41 | 55 | 12 | 3k+ | | | Output is not escaped |
| #4259 | Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | 30 | 60 | 387 | 3k+ | | | Non-prefixed global variable |
| #4260 | Gutenverse Companion | 81 | 16 | 29 | 8k+ | | | Nonce verification recommended |
| #4261 | Integration for Elementor forms – Sendinblue | 65 | 94 | 56 | 7k+ | | | Text Domain Mismatch |
| #4262 | Canada Post Shipping For WooCommerce | 92 | 4 | 0 | 2k+ | | | Output is not escaped |
| #4263 | Catalog Booster & Product Catalog Mode for WooCommerce | 37 | 106 | 168 | 1k+ | | | Non-prefixed function |
| #4264 | Contact Form 7 Signature Addon | 45 | 147 | 44 | 6k+ | | | Text Domain Mismatch |
| #4265 | International Telephone Input for Contact Form 7 | 53 | 18 | 10 | 8k+ | | | Missing direct file access protection |
| #4266 | PayPal Zettle POS for WooCommerce | 31 | 302 | 44 | 4k+ | | | Exception output is not escaped |
| #4267 | Smart Online Order for Clover | 24 | 1,746 | 1,246 | 1k+ | | | Text Domain Mismatch |
| #4268 | Custom Related Posts | 39 | 131 | 34 | 3k+ | | | Output is not escaped |
| #4269 | OT Flatsome Vertical Menu | 35 | 126 | 26 | 10k+ | | | Text Domain Mismatch |
| #4270 | HivePress Favorites | 99 | 1 | 1 | 8k+ | | | missing composer json file |
| #4271 | Appointment Bookings for Zoom GoogleMeet and more – Wappointment | 81 | 22 | 52 | 1k+ | | | Non-prefixed class |
| #4272 | Elements For Elementor | 74 | 39 | 37 | 10k+ | | | Non-prefixed global variable |
| #4273 | Popular Brand Icons – Simple Icons | 51 | 20 | 12 | 3k+ | | | Output is not escaped |
| #4274 | JSON API Auth | 79 | 5 | 11 | 700 | | | Non-prefixed function |
| #4275 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #4276 | PayU CommercePro Plugin | 37 | | 218 | 7k+ | | | error log error log |
| #4277 | Improved External Products for WooCommerce | 95 | 1 | 8 | 1k+ | | | Non-prefixed class |
| #4278 | Profile Extra Fields by BestWebSoft | 26 | 514 | 532 | 2k+ | | | Text Domain Mismatch |
| #4279 | Portfolio Grid – Filterable Gallery, Grid & Slider Showcase | 96 | 3 | 50 | 900 | | | Non-prefixed function |
| #4280 | WPZOOM Addons for Beaver Builder | 30 | 2,168 | 177 | 4k+ | | | Text Domain Mismatch |
| #4281 | (Simply) Guest Author Name | 41 | 35 | 36 | 2k+ | | | Output is not escaped |
| #4282 | WP SEO HTML Sitemap | 65 | 22 | 15 | 6k+ | | | Output is not escaped |
| #4283 | Send Images to RSS | 98 | 3 | 4 | 3k+ | | | Non-prefixed hook name |
| #4284 | States, Cities, and Places for WooCommerce | 85 | 101 | 192 | 6k+ | | | Non-prefixed global variable |
| #4285 | Exit Popup | 42 | 51 | 5 | 1k+ | | | Output is not escaped |
| #4286 | iPages – FlipBook Image & PDF Viewer | 35 | 467 | 177 | 2k+ | | | Text Domain Mismatch |
| #4287 | Statify Widget | 40 | 52 | 13 | 4k+ | | | Output is not escaped |
| #4288 | Disable WordPress Update Notifications and auto-update Email Notifications | 91 | 2 | 12 | 10k+ | | | Nonce verification recommended |
| #4289 | Interactive World Map | 29 | 684 | 341 | 1k+ | | | Text Domain Mismatch |
| #4290 | Pinterest Pinboard Widget | 46 | 54 | 4 | 500 | | | Output is not escaped |
| #4291 | Spiraclethemes Site Library | 97 | | 28 | 1k+ | | | Non-prefixed global variable |
| #4292 | Uber reCaptcha | 43 | 129 | 45 | 1k+ | | | Text Domain Mismatch |
| #4293 | WPLMS MyCred AddOn | 34 | 383 | 73 | 800 | | | Text Domain Mismatch |
| #4294 | rus to lat advanced | 97 | 3 | 3 | 7k+ | | | Deprecated function: seems_utf8 |
| #4295 | Ni WooCommerce Custom Order Status | 34 | 256 | 139 | 2k+ | | | Text Domain Mismatch |
| #4296 | PJ News Ticker | 75 | 13 | 14 | 3k+ | | | Output is not escaped |
| #4297 | Prevent XSS Vulnerability | 98 | 10 | 1 | 6k+ | | | Missing Arg Domain |
| #4298 | Localendar Calendar for WordPress | 37 | 241 | 6 | 400 | | | Output is not escaped |
| #4299 | Post/Page Specific Custom Code | 49 | 21 | 14 | 7k+ | | | Output is not escaped |
| #4300 | AdFlow – Easy Google AdSense Integration | 40 | 150 | 9 | 3k+ | | | Unsafe printing function |