| #3801 | Comment Reply Email Notification | 43 | 44 | 19 | 3k+ | | | Output is not escaped |
| #3802 | Confetti | 42 | 136 | 17 | 3k+ | | | Unsafe printing function |
| #3803 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #3804 | Contact Form DB Divi | 25 | 533 | 1,299 | 3k+ | | | Non-prefixed global variable |
| #3805 | Contact Information Widget | 69 | 35 | 3 | 3k+ | | | Output is not escaped |
| #3806 | Content Slider Block – Slide Through Text or Media Content | 100 | | 1 | 3k+ | | | mismatched plugin name |
| #3807 | Convertful – Your Ultimate On-Site Conversion Tool | 48 | 15 | 34 | 3k+ | | | wp function not compatible with requires wp |
| #3808 | Cooked – Recipe Management | 32 | 462 | 275 | 3k+ | | | Output is not escaped |
| #3809 | CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | 42 | 33 | 49 | 3k+ | | | Output is not escaped |
| #3810 | CoSchedule | 46 | 24 | 66 | 3k+ | | | Nonce verification recommended |
| #3811 | Event Countdown for The Events Calendar | 100 | | 2 | 3k+ | | | Non-prefixed class |
| #3812 | Counters Block – Animated Number Counters, Stats & Dynamic KPIs | 86 | 5 | 14 | 3k+ | | | Missing direct file access protection |
| #3813 | CPO Content Types | 88 | 13 | 25 | 3k+ | | | Missing direct file access protection |
| #3814 | Creta Testimonial Showcase | 65 | 28 | 41 | 3k+ | | | Non-prefixed global variable |
| #3815 | CSV Importer | 54 | 24 | 11 | 3k+ | | | Missing direct file access protection |
| #3816 | Currency Converter Widget | 44 | 37 | 6 | 3k+ | | | Unsafe printing function |
| #3817 | Custom Category Templates | 54 | 11 | 11 | 3k+ | | | Unsafe printing function |
| #3818 | One page checkout and layouts for woocommerce | 38 | 83 | 52 | 3k+ | | | Non-prefixed global variable |
| #3819 | Wbcom Designs – Custom Font Uploader | 35 | 340 | 123 | 3k+ | | | Text Domain Mismatch |
| #3820 | Custom iFrame – Embed PDFs, Videos, and External Content in WordPress (Elementor & Gutenberg) | 91 | 13 | 5 | 3k+ | | | wp function not compatible with requires wp |
| #3821 | Custom Permalink Editor | 62 | 4 | 51 | 3k+ | | | Non-prefixed hook name |
| #3822 | Custom post types, Custom Fields & more | 63 | 101 | 22 | 3k+ | | | Missing Translators Comment |
| #3823 | Custom Price for WooCommerce | 35 | 3 | 9 | 3k+ | | | Non-prefixed global variable |
| #3824 | Custom Related Posts | 39 | 131 | 34 | 3k+ | | | Output is not escaped |
| #3825 | Custom Shipping Methods for WooCommerce – Create Weight based Shipping, Conditional Shipping, Table Rate Shipping and much more | 97 | 2 | 32 | 3k+ | | | Non-prefixed global variable |
| #3826 | Customize Login Image | 43 | 32 | 9 | 3k+ | | | Unsafe printing function |
| #3827 | AOS Animation for SiteOrigin Page Builder | 97 | 2 | 7 | 3k+ | | | Missing Version |
| #3828 | Daisy Titles — Style & Hide Page and Post Titles | 92 | 1 | 5 | 3k+ | | | Discouraged text-domain loading |
| #3829 | Datafeedr Comparison Sets | 38 | 450 | 53 | 3k+ | | | Output is not escaped |
| #3830 | Debug Log Manager Tool | 34 | 44 | 143 | 3k+ | | | Nonce verification recommended |
| #3831 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #3832 | Nexi Checkout | 35 | 45 | 308 | 3k+ | | | Dynamic hook name |
| #3833 | Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes | 93 | 10 | 7 | 3k+ | | | Missing direct file access protection |
| #3834 | Disable Gutenberg Blocks – Block Manager | 81 | 6 | 10 | 3k+ | | | trademarked term |
| #3835 | Disable Post Revision | 81 | 6 | 3 | 3k+ | | | Output is not escaped |
| #3836 | Disable User Gravatar | 95 | 14 | 2 | 3k+ | | | wp function not compatible with requires wp |
| #3837 | Display Categories Widget | 42 | 90 | 4 | 3k+ | | | Output is not escaped |
| #3838 | Display Featured Image In Post List | 99 | 2 | 0 | 3k+ | | | Missing direct file access protection |
| #3839 | Disqus Conditional Load | 41 | 38 | 14 | 3k+ | | | Output is not escaped |
| #3840 | DJ-Accessibility – Accessibility Plugin | 33 | 370 | 48 | 3k+ | | | Text Domain Mismatch |
| #3841 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #3842 | Duo Two-Factor Authentication | 37 | 44 | 61 | 3k+ | | | Missing nonce verification |
| #3843 | Duplicate Widgets | 98 | 6 | 1 | 3k+ | | | Text Domain Mismatch |
| #3844 | Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress | 94 | 1 | 18 | 3k+ | | | Non-prefixed hook name |
| #3845 | Elegant Custom Fonts | 53 | 15 | 17 | 3k+ | | | Output is not escaped |
| #3846 | ElementsReady Addons for Elementor | 23 | 231 | 666 | 3k+ | | | Non-prefixed global variable |
| #3847 | Element Invader – Template Kits for Elementor | 30 | 274 | 130 | 3k+ | | | Output is not escaped |
| #3848 | ElementInvader Addons for Elementor | 96 | 4 | 60 | 3k+ | | | Missing Version |
| #3849 | Elfsight Blocks | 98 | 3 | 2 | 3k+ | | | Not In Footer |
| #3850 | Email Marketing by EmailOctopus | 39 | 43 | 62 | 3k+ | | | Non-prefixed global variable |