| #1651 | Captcha Code | 97 | 17 | 12 | 100k+ | | | wp function not compatible with requires wp |
| #1652 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #1653 | Captcha Them All | 21 | 300 | 323 | 6k+ | | | Output is not escaped |
| #1654 | Car Route Planner Plugin | 38 | 135 | 17 | 400 | | | Output is not escaped |
| #1655 | Carbon Copy | 41 | 64 | 89 | 3k+ | | | Text Domain Mismatch |
| #1656 | Card Elements for Elementor | 67 | 15 | 116 | 3k+ | | | Non-prefixed global variable |
| #1657 | Card Elements for WPBakery | 90 | 1 | 208 | 500 | | | Non-prefixed global variable |
| #1658 | Card Transfer Gateway | 98 | 2 | 2 | 600 | | | Discouraged text-domain loading |
| #1659 | Easy Social Like Box – Popup – Sidebar Widget | 41 | 217 | 91 | 7k+ | | | Text Domain Mismatch |
| #1660 | Cargus | 33 | 48 | 64 | 700 | | | Input is not sanitized |
| #1661 | Carousel Ultimate | 36 | 450 | 284 | 700 | | | Text Domain Mismatch |
| #1662 | Carousel for Divi | 97 | 4 | 0 | 1k+ | | | Missing direct file access protection |
| #1663 | Carousel Horizontal Posts Content Slider | 36 | 271 | 59 | 2k+ | | | Text Domain Mismatch |
| #1664 | Carousel Slider | 62 | | 71 | 30k+ | | | Non-prefixed global variable |
| #1665 | Carousel Upsells and Related Product for Woocommerce | 37 | 173 | 35 | 1k+ | | | Output is not escaped |
| #1666 | Gallery Carousel Without JetPack | 49 | 56 | 35 | 4k+ | | | Text Domain Mismatch |
| #1667 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #1668 | Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD | 22 | 669 | 769 | 1k+ | | | Output is not escaped |
| #1669 | Custom Cart Link for WooCommerce | 40 | 24 | 16 | 700 | | | Unsafe printing function |
| #1670 | Cart Notices for WooCommerce | 23 | 639 | 474 | 2k+ | | | Text Domain Mismatch |
| #1671 | Products Suggestions for WooCommerce | 23 | 707 | 505 | 700 | | | Output is not escaped |
| #1672 | CoCart – Headless REST API for WooCommerce | 99 | | 26 | 1k+ | | | Non-prefixed global variable |
| #1673 | Nexi XPay | 33 | 496 | 277 | 6k+ | | | Text Domain Mismatch |
| #1674 | SMS Abandoned Cart Recovery ✦ CartBoss | 34 | 67 | 72 | 400 | | | SQL query is not prepared |
| #1675 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 462 | 656 | 200k+ | | | Text Domain Mismatch |
| #1676 | CashBill.pl – Płatności WooCommerce | 31 | 181 | 101 | 900 | | | Output is not escaped |
| #1677 | Cashflows for WooCommerce | 36 | 119 | 36 | 600 | | | Text Domain Mismatch |
| #1678 | Cashfree for WooCommerce | 47 | 21 | 21 | 8k+ | | | Nonce verification recommended |
| #1679 | Catalog Booster & Product Catalog Mode for WooCommerce | 37 | 106 | 168 | 1k+ | | | Non-prefixed function |
| #1680 | Catalog for Woocommerce | 40 | 92 | 75 | 1k+ | | | Output is not escaped |
| #1681 | wModes – Catalog Mode, Product Pricing, Enquiry Forms & Promotions | for WooCommerce | 80 | | 465 | 900 | | | Non-prefixed global variable |
| #1682 | Catch Breadcrumb | 86 | 1 | 29 | 2k+ | | | Non-prefixed global variable |
| #1683 | Catch Gallery | 82 | 1 | 35 | 10k+ | | | Non-prefixed hook name |
| #1684 | Catch IDs | 88 | | 16 | 20k+ | | | Non-prefixed global variable |
| #1685 | Catch Infinite Scroll | 87 | | 20 | 10k+ | | | Non-prefixed global variable |
| #1686 | Catch Scroll Progress Bar | 100 | | 0 | 1k+ | | | No open findings |
| #1687 | Catch Sticky Menu | 100 | | 1 | 2k+ | | | Non-prefixed class |
| #1688 | Catch Web Tools | 100 | | 0 | 10k+ | | | No open findings |
| #1689 | Categories Images | 63 | 10 | 21 | 50k+ | | | wp function not compatible with requires wp |
| #1690 | Categories in Hierarchical Order | 97 | 1 | 5 | 2k+ | | | Non-prefixed function |
| #1691 | Categories Metabox Enhanced | 40 | 77 | 36 | 1k+ | | | Output is not escaped |
| #1692 | Categorify – WordPress Media Library Category & File Manager | 24 | 573 | 1,385 | 1k+ | | | Non-prefixed global variable |
| #1693 | Categorized Tag Cloud | 41 | 44 | 17 | 1k+ | | | Output is not escaped |
| #1694 | Category AJAX Filter — Advanced Filter for Posts & Custom Post Types | 50 | 2 | 435 | 6k+ | | | Non-prefixed global variable |
| #1695 | Category Archive Widget | 51 | 54 | 2 | 700 | | | Output is not escaped |
| #1696 | Category Archives Block | 98 | 14 | 5 | 900 | | | Missing Arg Domain |
| #1697 | Category Checklist Tree | 98 | 3 | 0 | 5k+ | | | Missing direct file access protection |
| #1698 | Posts Order | 59 | 59 | 20 | 1k+ | | | Text Domain Mismatch |
| #1699 | Category Description for WooCommerce | 100 | | 0 | 700 | | | No open findings |
| #1700 | Category Featured Images | 68 | 5 | 12 | 600 | | | Input is not sanitized |