| #4351 | Code Block Syntax Highlighter for Elementor | 78 | 344 | 3 | 600 | | | Non Singular String Literal Domain |
| #4352 | Overwrite Uploads | 97 | 3 | 4 | 1k+ | | | Missing direct file access protection |
| #4353 | Excerpt Editor | 37 | 170 | 142 | 500 | | | Unsafe printing function |
| #4354 | Save as PDF Plugin by PDFCrowd | 33 | 299 | 254 | 1k+ | | | Non-prefixed global variable |
| #4355 | Custom WooCommerce Checkout Fields Editor | 23 | 755 | 1,386 | 2k+ | | | Non-prefixed global variable |
| #4356 | Advanced Recent Posts Widget | 39 | 105 | 2 | 1k+ | | | Output is not escaped |
| #4357 | Ads.txt & App-ads.txt Manager for WordPress | 39 | 97 | 23 | 2k+ | | | Output is not escaped |
| #4358 | Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce | 23 | 1,185 | 1,027 | 1k+ | | | Text Domain Mismatch |
| #4359 | Log HTTP Requests | 35 | 7 | 18 | 2k+ | | | Interpolated SQL is not prepared |
| #4360 | QR Code Composer – Automatic QR Code Generator | 65 | 33 | 2 | 3k+ | | | Output is not escaped |
| #4361 | Vision – Interactive Image Map with Hotspots Builder | 97 | | 2 | 2k+ | | | Discouraged text-domain loading |
| #4362 | Post Ratings | 40 | 160 | 32 | 600 | | | Output is not escaped |
| #4363 | Builderall for WordPress | 24 | 4,778 | 1,307 | 1k+ | | | Text Domain Mismatch |
| #4364 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #4365 | WP Calameo | 95 | 16 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #4366 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | | Text Domain Mismatch |
| #4367 | Simple Page Access Restriction | 41 | 66 | 51 | 6k+ | | | Unsafe printing function |
| #4368 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | | | Missing Translators Comment |
| #4369 | DesignSetGo | 35 | 7 | 0 | 5k+ | | | Hidden files included |
| #4370 | Bangladeshi Payment Gateways – Make Payment Using QR Code | 40 | 40 | 36 | 5k+ | | | Output is not escaped |
| #4371 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | | | date date |
| #4372 | Event Monster – Event Manager, Ticket Booking & Registration | 26 | 781 | 781 | 600 | | | Non-prefixed global variable |
| #4373 | Blog Floating Button | 26 | 705 | 240 | 9k+ | | | Output is not escaped |
| #4374 | WPC Estimated Delivery Date for WooCommerce | 85 | | 67 | 9k+ | | | Non-prefixed global variable |
| #4375 | Disable "BIG Image" Threshold | 98 | 3 | 1 | 10k+ | | | Missing direct file access protection |
| #4376 | Trusted Shops Easy Integration for WooCommerce | 86 | 5 | 67 | 6k+ | | | Non-prefixed hook name |
| #4377 | Portugal States (Distritos) for WooCommerce | 99 | | 7 | 5k+ | | | Non-prefixed function |
| #4378 | WooCommerce Gateway Affirm | 35 | 2 | 58 | 6k+ | | | Nonce verification recommended |
| #4379 | Razorpay Quick Payments | 21 | 399 | 63 | 3k+ | | | Exception output is not escaped |
| #4380 | Paymob for WooCommerce | 25 | 443 | 350 | 5k+ | | | Text Domain Mismatch |
| #4381 | Plugin Notes Plus | 74 | 2 | 42 | 9k+ | | | Non-prefixed hook name |
| #4382 | List categories | 97 | 5 | 2 | 5k+ | | | Missing Arg Domain |
| #4383 | Remove admin menus by role | 57 | 5 | 54 | 8k+ | | | Input is not validated |
| #4384 | Pantheon HUD | 90 | 4 | 6 | 1k+ | | | Input is not sanitized |
| #4385 | Listdom: AI-powered Business Directory with Classifieds Ads Listings | 23 | 4,673 | 3,336 | 1k+ | | | Output is not escaped |
| #4386 | View Transitions | 99 | | 3 | 10k+ | | | Non-prefixed constant |
| #4387 | WP Session Manager | 91 | 5 | 16 | 2k+ | | | Direct Query |
| #4388 | Disable Author Archives | 96 | 1 | 2 | 10k+ | | | Nonce verification recommended |
| #4389 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #4390 | WP Layouts | 24 | 349 | 146 | 3k+ | | | Text Domain Mismatch |
| #4391 | GetResponse Official | 100 | | 0 | 4k+ | | | No open findings |
| #4392 | BuddyPress Follow | 38 | 114 | 67 | 1k+ | | | Text Domain Mismatch |
| #4393 | Object Cache 4 everyone | 87 | 2 | 65 | 5k+ | | | Non-prefixed function |
| #4394 | Slimbox Plugin | 89 | 9 | 2 | 500 | | | Non Enqueued Script |
| #4395 | Disable New User Notification Emails | 97 | 2 | 6 | 4k+ | | | Non-prefixed hook name |
| #4396 | StreamCast – Live Radio Streaming Player | 100 | | 0 | 1k+ | | | No open findings |
| #4397 | CubeWP Forms | 97 | 8 | 3 | 4k+ | | | wp function not compatible with requires wp |
| #4398 | GM Block Bots | 92 | 1 | 3 | 800 | | | Input is not sanitized |
| #4399 | Honeypot Anti-Spam | 78 | 5 | 7 | 10k+ | | | Missing nonce verification |
| #4400 | UpsellWP – Upsell and Related Products Offers for WooCommerce | 100 | | 2 | 5k+ | | | trademarked term |