| #1901 | Clean My Archives | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #1902 | Clean Testimonials | 34 | 127 | 87 | 400 | | | Output is not escaped |
| #1903 | Clean WP Admin Menu | 74 | 19 | 13 | 600 | | | Non Singular String Literal Domain |
| #1904 | Cleaner Gallery | 40 | 40 | 8 | 2k+ | | | Unsafe printing function |
| #1905 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 818 | 1,092 | 200k+ | | | Missing nonce verification |
| #1906 | Cleanup Action Scheduler | 22 | 545 | 1,306 | 1k+ | | | Non-prefixed global variable |
| #1907 | Clear Autoptimize Cache Automatically | 93 | 3 | 9 | 4k+ | | | Request data is not unslashed |
| #1908 | Clear Cache Everywhere | 76 | 7 | 17 | 700 | | | Nonce verification recommended |
| #1909 | Clear cache for Timber | 89 | 20 | 1 | 500 | | | wp function not compatible with requires wp |
| #1910 | Clear Cache for Me | 47 | 58 | 8 | 40k+ | | | Text Domain Mismatch |
| #1911 | Clear Floats Button | 98 | 3 | 1 | 2k+ | | | Missing direct file access protection |
| #1912 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | | Text Domain Mismatch |
| #1913 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | | | Non-prefixed function |
| #1914 | Clearpay Gateway for WooCommerce | 37 | 185 | 63 | 1k+ | | | Text Domain Mismatch |
| #1915 | Clever Fox | 91 | 16 | 1 | 30k+ | | | wp function not compatible with requires wp |
| #1916 | Clever Mega Menu for Visual Composer | 38 | 500 | 87 | 1k+ | | | Output is not escaped |
| #1917 | Clever Mega Menu for Elementor | 38 | 835 | 44 | 1k+ | | | Output is not escaped |
| #1918 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #1919 | Official CleverReach® Plugin for WooCommerce | 46 | 37 | 98 | 400 | | | Non-prefixed global variable |
| #1920 | CleverReach® WP | 31 | 103 | 93 | 4k+ | | | Non-prefixed global variable |
| #1921 | Click to Call or Chat Buttons | 43 | 47 | 6 | 1k+ | | | Output is not escaped |
| #1922 | Click to Chat – HoliThemes | 99 | 6 | 2 | 700k+ | | | badly named files |
| #1923 | Click To Tweet | 87 | 8 | 7 | 2k+ | | | trademarked term |
| #1924 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | | | Non-prefixed class |
| #1925 | ClickRank – Ai SEO Automation | 37 | 10 | 226 | 1k+ | | | Direct Query |
| #1926 | ClickShip | 84 | 13 | 5 | 1k+ | | | Output is not escaped |
| #1927 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | | | Unsafe printing function |
| #1928 | Fetchify | 85 | 154 | 19 | 600 | | | Text Domain Mismatch |
| #1929 | Clicky by Yoast | 95 | 10 | 7 | 4k+ | | | Missing direct file access protection |
| #1930 | Clicky Analytics | 33 | 166 | 92 | 10k+ | | | Output is not escaped |
| #1931 | Cliengo – Chatbot | 91 | 4 | 7 | 2k+ | | | Input is not sanitized |
| #1932 | Client Portal – Private user pages and login | 40 | 52 | 29 | 3k+ | | | Output is not escaped |
| #1933 | Client Portal : SuiteDash Direct Login | 40 | 93 | 17 | 1k+ | | | Text Domain Mismatch |
| #1934 | Clio Grow Form | 91 | 179 | 19 | 1k+ | | | Text Domain Mismatch |
| #1935 | Plugin de Clip para WooCommerce | 93 | 13 | 29 | 800 | | | Non-prefixed global variable |
| #1936 | Clixtell | 98 | 10 | 1 | 1k+ | | | Text Domain Mismatch |
| #1937 | Clone / Duplicate Orders for WooCommerce | 99 | 1 | 2 | 1k+ | | | Discouraged text-domain loading |
| #1938 | Clone Posts | 98 | 5 | 5 | 10k+ | | | Missing Arg Domain |
| #1939 | Clone Woo Orders – Free by WP Masters | 73 | 13 | 8 | 900 | | | Output is not escaped |
| #1940 | CloudFilt Bot & Spam Protection | 51 | 11 | 22 | 600 | | | Output is not escaped |
| #1941 | Cloudflare | 35 | 28 | 85 | 200k+ | | | Non-prefixed namespace |
| #1942 | Flexible SSL for CloudFlare | 35 | 9 | 6 | 100k+ | | | Output is not escaped |
| #1943 | Cloudflare Page Cache | 98 | 2 | 4 | 500 | | | trademarked term |
| #1944 | CloudGuard | 41 | 41 | 13 | 1k+ | | | Output is not escaped |
| #1945 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #1946 | CloudPayments Gateway for WooCommerce | 36 | 205 | 70 | 500 | | | Text Domain Mismatch |
| #1947 | CloudSecure WP Security | 29 | 74 | 350 | 100k+ | | | Request data is not unslashed |
| #1948 | Cloudways Site Manager | 91 | 14 | 7 | 20k+ | | | wp function not compatible with requires wp |
| #1949 | Smart Online Order for Clover | 24 | 1,746 | 1,246 | 1k+ | | | Text Domain Mismatch |
| #1950 | Clover Payments for WooCommerce | 42 | 25 | 15 | 2k+ | | | Exception output is not escaped |