| #4401 | Monkeyman Rewrite Analyzer | 40 | 89 | 10 | 2k+ | | | Non Singular String Literal Domain |
| #4402 | ProveSource Social Proof | 96 | 26 | 7 | 2k+ | | | wp function not compatible with requires wp |
| #4403 | Plugin Name: Traffic Counter Widget Plugin | 36 | 71 | 107 | 600 | | | Output is not escaped |
| #4404 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | | | Non Singular String Literal Domain |
| #4405 | Reviews Widgets for Google & 45+ platforms by Repuso | 100 | 1 | 0 | 1k+ | | | invalid tested upto minor |
| #4406 | Additional Custom Emails & Recipients for WooCommerce | 35 | 1 | 0 | 2k+ | | | Hidden files included |
| #4407 | License For Envato | 58 | 12 | 31 | 9k+ | | | Non-prefixed global variable |
| #4408 | Ninja Charts – Interactive Charts and Graphs | 100 | | 0 | 3k+ | | | No open findings |
| #4409 | Team Builder Member Showcase | 43 | 14 | 127 | 1k+ | | | Non-prefixed global variable |
| #4410 | WP Global Site Tag | 99 | | 4 | 7k+ | | | trademarked term |
| #4411 | Constant Contact + WooCommerce | 39 | 27 | 91 | 1k+ | | | Nonce verification recommended |
| #4412 | AH Display Widgets | 41 | 52 | 16 | 8k+ | | | Text Domain Mismatch |
| #4413 | SKT Skill Bar | 100 | | 2 | 1k+ | | | Non-prefixed constant |
| #4414 | BuddyPress Edit Activity | 41 | 28 | 26 | 800 | | | Output is not escaped |
| #4415 | WP Sticky Button – Click to Chat | 40 | 73 | 64 | 10k+ | | | Non-prefixed global variable |
| #4416 | Content Visibility for Divi Builder | 39 | 184 | 59 | 2k+ | | | Non Singular String Literal Domain |
| #4417 | WP Change Email Sender | 35 | 5 | 13 | 10k+ | | | Non-prefixed namespace |
| #4418 | LexonRank: AI Link Building, Free Backlinks & SEO Automation | 55 | 15 | 20 | 1k+ | | | Nonce verification recommended |
| #4419 | Inline Image Upload for BBPress | 98 | 3 | 1 | 3k+ | | | Missing direct file access protection |
| #4420 | Mapster WP Maps | 21 | 3,440 | 2,903 | 3k+ | | | Text Domain Mismatch |
| #4421 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #4422 | Subscribers – Free Web Push Notifications | 59 | 15 | 11 | 1k+ | | | Output is not escaped |
| #4423 | WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More | 67 | 178 | 2,899 | 2k+ | | | Non-prefixed hook name |
| #4424 | Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin | 25 | 173 | 726 | 1k+ | | | Non-prefixed global variable |
| #4425 | Divi Gravity Forms (WP Tools) | 23 | 579 | 1,311 | 2k+ | | | Non-prefixed global variable |
| #4426 | Age Verify | 41 | 29 | 31 | 1k+ | | | Output is not escaped |
| #4427 | Cryptocurrency Widgets For Elementor | 90 | 1 | 33 | 1k+ | | | Non-prefixed global variable |
| #4428 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 3k+ | | | Text Domain Mismatch |
| #4429 | Content Slider Block – Slide Through Text or Media Content | 100 | | 1 | 3k+ | | | mismatched plugin name |
| #4430 | Progress Bar & Skill Bar | 34 | 175 | 179 | 1k+ | | | Non Singular String Literal Domain |
| #4431 | AI Provider for Anthropic | 78 | 13 | 1 | 30k+ | | | Exception output is not escaped |
| #4432 | ACF-VC Integrator | 38 | 190 | 91 | 3k+ | | | Output is not escaped |
| #4433 | Cash On Pickup for WooCommerce | 98 | 16 | 4 | 8k+ | | | Text Domain Mismatch |
| #4434 | oik-privacy-policy | 83 | 14 | 42 | 700 | | | No Html Wrapped Strings |
| #4435 | Custom Site Logo | 62 | 26 | 4 | 1k+ | | | Unsafe printing function |
| #4436 | Reading progressbar | 65 | 25 | 2 | 6k+ | | | Output is not escaped |
| #4437 | Bulk Order Form for WooCommerce | 81 | 8 | 98 | 900 | | | Non-prefixed hook name |
| #4438 | Deposits & Partial Payments for WooCommerce – Bayna | 28 | 593 | 336 | 1k+ | | | Output is not escaped |
| #4439 | Custom Price for WooCommerce | 35 | 3 | 9 | 3k+ | | | Non-prefixed global variable |
| #4440 | Bradmax Player | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4441 | Hover Effects – easily create any hover effect | 99 | | 9 | 8k+ | | | Non-prefixed global variable |
| #4442 | Zephyr Project Manager | 23 | 667 | 2,454 | 1k+ | | | Non-prefixed global variable |
| #4443 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #4444 | Seamless Sticky Custom Post Types | 94 | 8 | 5 | 1k+ | | | Missing Arg Domain |
| #4445 | Pure Metafields | 53 | 5 | 130 | 10k+ | | | Non-prefixed global variable |
| #4446 | PageView | 86 | 17 | 2 | 1k+ | | | wp function not compatible with requires wp |
| #4447 | StylePress for Elementor | 27 | 767 | 283 | 600 | | | Text Domain Mismatch |
| #4448 | Wheel of Life: Coaching and Assessment Tool for Life Coach | 78 | 3 | 113 | 3k+ | | | Non-prefixed global variable |
| #4449 | No category parents | 95 | 5 | 4 | 6k+ | | | Missing direct file access protection |
| #4450 | GDPR Data Request Form | 59 | 22 | 19 | 5k+ | | | Missing direct file access protection |