| #1951 | Clover Payments for WooCommerce | 42 | 25 | 15 | 2k+ | | | Exception output is not escaped |
| #1952 | CLP – Custom Login Page by NiteoThemes | 36 | 240 | 49 | 700 | | | Output is not escaped |
| #1953 | CLP Varnish Cache | 46 | 15 | 58 | 10k+ | | | Non-prefixed global variable |
| #1954 | CLUEVO LMS, E-Learning Platform | 23 | 1,843 | 1,176 | 400 | | | Text Domain Mismatch |
| #1955 | CM E-Mail Blacklist – Simple email filtering for safer registration | 35 | 269 | 205 | 800 | | | Output is not escaped |
| #1956 | CM Header and Footer – Add custom scripts and styles to your header and footer with ease | 36 | 230 | 198 | 1k+ | | | Output is not escaped |
| #1957 | CM Search And Replace – Optimize content edits with a powerful search and replace tool | 34 | 286 | 111 | 2k+ | | | Output is not escaped |
| #1958 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #1959 | CMB2 | 36 | 148 | 19 | 300k+ | | | Output is not escaped |
| #1960 | CMB2 Field Type: Font Awesome | 86 | 10 | 1 | 400 | | | Offloaded Content |
| #1961 | CMP – Coming Soon & Maintenance Plugin by NiteoThemes | 24 | 949 | 1,336 | 200k+ | | | Non-prefixed global variable |
| #1962 | MomentoPress for Momento360 | 98 | 2 | 3 | 1k+ | | | Missing Version |
| #1963 | Co-Authors Plus | 59 | 2 | 76 | 20k+ | | | Input is not sanitized |
| #1964 | Co-marquage service-public.fr | 31 | 84 | 213 | 1k+ | | | Non-prefixed global variable |
| #1965 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #1966 | CoCart CORS Support | 98 | 2 | 0 | 400 | | | outdated tested upto header |
| #1967 | Code Block Syntax Highlighter for Elementor | 78 | 344 | 3 | 600 | | | Non Singular String Literal Domain |
| #1968 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | | | badly named files |
| #1969 | Code Click to Copy | 83 | 12 | 9 | 700 | | | Non-prefixed function |
| #1970 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #1971 | Code Prettify | 35 | 7 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #1972 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #1973 | Code Snippet DM | 74 | 21 | 2 | 500 | | | Output is not escaped |
| #1974 | Code Snippets | 36 | 34 | 203 | 1m+ | | | Nonce verification recommended |
| #1975 | Code Widget | 44 | 60 | 33 | 4k+ | | | Text Domain Mismatch |
| #1976 | Top-Bar CodeBulls | 40 | 91 | 13 | 700 | | | Text Domain Mismatch |
| #1977 | CodeColorer | 64 | 65 | 266 | 1k+ | | | Non-prefixed global variable |
| #1978 | Vimeotheque – Vimeo WordPress Plugin & Video Gallery | 32 | 642 | 264 | 2k+ | | | Unsafe printing function |
| #1979 | Bitly URL Shortener | 79 | 65 | 22 | 600 | | | Text Domain Mismatch |
| #1980 | Codeless Page Builder | 31 | 415 | 258 | 900 | | | Text Domain Mismatch |
| #1981 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #1982 | CodePen Embed Block | 82 | 8 | 3 | 600 | | | Text Domain Mismatch |
| #1983 | CodePen Embedded Pens Shortcode | 97 | 17 | 0 | 800 | | | wp function not compatible with requires wp |
| #1984 | CodePeople Post Map for Google Maps | 37 | 257 | 31 | 3k+ | | | Unsafe printing function |
| #1985 | Admin Columns | 25 | 613 | 995 | 100k+ | | | Non-prefixed namespace |
| #1986 | CodingBunny Image Optimizer LITE | 100 | | 2 | 400 | | | Non-prefixed class |
| #1987 | codoc | 40 | 19 | 39 | 2k+ | | | Request data is not unslashed |
| #1988 | Cognito Forms | 75 | 13 | 4 | 2k+ | | | wp function not compatible with requires wp |
| #1989 | Coinbase Commerce Payment Gateway for WooCommerce | 94 | 21 | 5 | 4k+ | | | Missing Arg Domain |
| #1990 | CoinGate for WooCommerce | 74 | 35 | 18 | 400 | | | Text Domain Mismatch |
| #1991 | CoinPayments.net Payment Gateway for WooCommerce | 41 | 51 | 32 | 1k+ | | | Text Domain Mismatch |
| #1992 | Coldbox Addons | 97 | 11 | 2 | 800 | | | Missing direct file access protection |
| #1993 | Colete-Online | 30 | 776 | 346 | 600 | | | Text Domain Mismatch |
| #1994 | Colibri Page Builder | 82 | 138 | 31 | 90k+ | | | Missing direct file access protection |
| #1995 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | | | Text Domain Mismatch |
| #1996 | Divi Collage | 27 | 516 | 1,183 | 700 | | | Non-prefixed global variable |
| #1997 | Collapse Magic | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #1998 | Collapsed Archives | 41 | 54 | 4 | 1k+ | | | Output is not escaped |
| #1999 | Collapsible Categories in the Dashboard | 98 | 3 | 0 | 600 | | | Missing direct file access protection |
| #2000 | Collapsing Archives | 64 | 36 | 9 | 3k+ | | | date date |