| #2251 | Bulk Post Category Creator | 91 | 20 | 2 | 1k+ | | | Text Domain Mismatch |
| #2252 | Creativ Demo Importer | 98 | | 43 | 2k+ | | | Non-prefixed global variable |
| #2253 | Creative Addons for Elementor | 44 | 63 | 100 | 800 | | | Missing Arg Domain |
| #2254 | Creative Clans Embed Script | 63 | 10 | 9 | 600 | | | Input is not sanitized |
| #2255 | Creative Commons | 61 | 103 | 17 | 700 | | | Text Domain Mismatch |
| #2256 | Crelly Slider | 36 | 421 | 185 | 10k+ | | | Unsafe printing function |
| #2257 | Cresta Social Messenger | 71 | 9 | 10 | 1k+ | | | Non-prefixed function |
| #2258 | Cresta Posts Box | 59 | 10 | 13 | 1k+ | | | Output is not escaped |
| #2259 | Cresta Social Share Counter | 57 | 12 | 13 | 2k+ | | | Output is not escaped |
| #2260 | Cresta Help Chat | 80 | 6 | 6 | 10k+ | | | Output is not escaped |
| #2261 | Creta Testimonial Showcase | 65 | 28 | 41 | 3k+ | | | Non-prefixed global variable |
| #2262 | Crisp – Live Chat and Chatbot | 40 | 24 | 20 | 20k+ | | | Unsafe printing function |
| #2263 | Reduce Unused CSS Solution with Critical CSS For WP | 96 | 48 | 12 | 1k+ | | | wp function not compatible with requires wp |
| #2264 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #2265 | Cron Logger | 40 | 49 | 36 | 1k+ | | | Output is not escaped |
| #2266 | Cronjob Scheduler | 42 | 20 | 36 | 1k+ | | | Input is not sanitized |
| #2267 | Crop-Thumbnails | 38 | 33 | 27 | 40k+ | | | Missing direct file access protection |
| #2268 | Crowdfundly | 31 | 594 | 402 | 500 | | | Output is not escaped |
| #2269 | CrowdSec | 35 | 130 | 119 | 2k+ | | | Output is not escaped |
| #2270 | Crowdsignal Forms | 100 | | 0 | 200k+ | | | No open findings |
| #2271 | Free Theme Builder for Elementor – CRT Addons (Header, Footer, Archive, WooCommerce & 50+ Widgets) | 23 | 791 | 2,331 | 400 | | | Non-prefixed global variable |
| #2272 | CRUDLab Disable Comments | 38 | 20 | 54 | 700 | | | Missing nonce verification |
| #2273 | Cryout Serious Theme Settings | 40 | 332 | 51 | 40k+ | | | Output is not escaped |
| #2274 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |
| #2275 | Crypto Converter ⚡ Widget | 100 | | 0 | 1k+ | | | No open findings |
| #2276 | Crypto Payment Gateway with Instant Payouts | 100 | | 4 | 1k+ | | | Non-prefixed class |
| #2277 | CryptoCloud – Crypto Payment Gateway | 91 | 13 | 6 | 400 | | | Text Domain Mismatch |
| #2278 | Cryptocurrency Donation Box – Bitcoin & Crypto Donations | 30 | 334 | 284 | 500 | | | Output is not escaped |
| #2279 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #2280 | Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway | 99 | 3 | 4 | 600 | | | Missing direct file access protection |
| #2281 | Cryptocurrency Widgets – Price Ticker & Coins List | 92 | 4 | 36 | 7k+ | | | Non-prefixed global variable |
| #2282 | Cryptocurrency Widgets For Elementor | 90 | 1 | 33 | 1k+ | | | Non-prefixed global variable |
| #2283 | Crypto Price Widgets – CryptoWP | 40 | 103 | 43 | 600 | | | Output is not escaped |
| #2284 | CryptX | 69 | 11 | 30 | 10k+ | | | Missing nonce verification |
| #2285 | CSH Login | 36 | 126 | 41 | 500 | | | Output is not escaped |
| #2286 | Content Security Policy Manager | 68 | 19 | 2 | 2k+ | | | Output is not escaped |
| #2287 | CSS | 89 | 10 | 1 | 500 | | | Missing Arg Domain |
| #2288 | CSS Class Manager – An advanced autocomplete additional css class control for your blocks | 99 | 1 | 2 | 400 | | | Discouraged text-domain loading |
| #2289 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | | | Non-prefixed class |
| #2290 | CSS JS Manager, Async JavaScript, Defer Render Blocking CSS | 34 | 76 | 106 | 1k+ | | | Input is not validated |
| #2291 | CSS Ready Classes for Gravity Forms | 94 | 1 | 1 | 1k+ | | | Output is not escaped |
| #2292 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #2293 | CSSIgniter Shortcodes | 58 | 55 | 2 | 2k+ | | | Output is not escaped |
| #2294 | CSV Import and Exporter | 32 | 83 | 138 | 1k+ | | | Non-prefixed global variable |
| #2295 | CSV Importer | 54 | 24 | 11 | 3k+ | | | Missing direct file access protection |
| #2296 | WP All Import – Import Add-On for ACF | 84 | 3 | 46 | 50k+ | | | Non-prefixed global variable |
| #2297 | Simple Mortgage Calculator | 43 | 67 | 3 | 1k+ | | | Text Domain Mismatch |
| #2298 | CTA Button Styler | 91 | 3 | 39 | 400 | | | Non-prefixed global variable |
| #2299 | Cloudflare SSL by Weslink | 90 | 3 | 7 | 2k+ | | | trademarked term |
| #2300 | CubeWP Forms | 97 | 8 | 3 | 4k+ | | | wp function not compatible with requires wp |