| #3951 | Minimum and Maximum Quantity for WooCommerce | 25 | 556 | 1,436 | 3k+ | | | Non-prefixed global variable |
| #3952 | MMWD Remove Add To Cart for WooCommerce | 99 | 6 | 2 | 3k+ | | | Text Domain Mismatch |
| #3953 | PopBox For Elementor | 66 | 31 | 9 | 3k+ | | | Output is not escaped |
| #3954 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #3955 | Mortgage Calculators WP | 73 | 18 | 123 | 3k+ | | | Non-prefixed global variable |
| #3956 | Mosaic Gallery – Advanced Gallery | 67 | 45 | 79 | 3k+ | | | Non-prefixed global variable |
| #3957 | Move Addons for Elementor | 30 | 3,919 | 91 | 3k+ | | | Text Domain Mismatch |
| #3958 | Hide from Search | 35 | 5 | 8 | 3k+ | | | Missing direct file access protection |
| #3959 | MStore API – Create Native Android & iOS Apps On The Cloud | 23 | 618 | 764 | 3k+ | | | SQL query is not prepared |
| #3960 | Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher | 27 | 465 | 345 | 3k+ | | | Text Domain Mismatch |
| #3961 | Name Directory | 38 | 520 | 309 | 3k+ | | | Output is not escaped |
| #3962 | Nav Menu Collapse | 42 | 17 | 39 | 3k+ | | | Missing nonce verification |
| #3963 | Flying Images: Optimize and Lazy Load Images for Faster Page Speed | 40 | 32 | 58 | 3k+ | | | Missing direct file access protection |
| #3964 | Ninja Charts – Interactive Charts and Graphs | 100 | | 0 | 3k+ | | | No open findings |
| #3965 | noindex SEO | 100 | | 0 | 3k+ | | | No open findings |
| #3966 | NS Remove Related Products for WooCommerce | 42 | 95 | 43 | 3k+ | | | Output is not escaped |
| #3967 | WP OAuth Server (OAuth Authentication) | 22 | 189 | 347 | 3k+ | | | Non-prefixed function |
| #3968 | Open Graph Protocol Framework | 75 | 17 | 12 | 3k+ | | | Missing direct file access protection |
| #3969 | Open Graphite | 38 | 380 | 204 | 3k+ | | | Unsafe printing function |
| #3970 | Openpay Cards Plugin | 31 | 166 | 105 | 3k+ | | | Text Domain Mismatch |
| #3971 | OPML Importer | 40 | 35 | 13 | 3k+ | | | Output is not escaped |
| #3972 | Opt-Out for Google Analytics (DSGVO / GDPR) | 24 | 290 | 1,978 | 3k+ | | | Non-prefixed global variable |
| #3973 | Optin Forms – Simple List Building Plugin for WordPress | 37 | 647 | 22 | 3k+ | | | Output is not escaped |
| #3974 | Options for Twenty Twenty | 100 | | 0 | 3k+ | | | No open findings |
| #3975 | WP All Export – Order Export for WooCommerce | 37 | 109 | 111 | 3k+ | | | Text Domain Mismatch |
| #3976 | Order Tracking – WordPress Status Tracking Plugin | 28 | 619 | 772 | 3k+ | | | Unsafe printing function |
| #3977 | OSS Aliyun | 41 | 19 | 40 | 3k+ | | | Request data is not unslashed |
| #3978 | Ozh' Admin Drop Down Menu | 36 | 125 | 43 | 3k+ | | | Output is not escaped |
| #3979 | PagBank for WooCommerce | 68 | 8 | 36 | 3k+ | | | Input is not sanitized |
| #3980 | Page Excerpt | 81 | 11 | 1 | 3k+ | | | Missing Arg Domain |
| #3981 | Page Loader | 76 | 9 | 4 | 3k+ | | | Missing Version |
| #3982 | Pages In Widgets | 41 | 131 | 6 | 3k+ | | | Output is not escaped |
| #3983 | Panda Video | 80 | 29 | 17 | 3k+ | | | Non-prefixed global variable |
| #3984 | Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More | 100 | | 2 | 3k+ | | | Non-prefixed class |
| #3985 | Parallax Section Block – Add Parallax Scrolling Effects to Sections. | 87 | 3 | 22 | 3k+ | | | Non-prefixed global variable |
| #3986 | Patreon WordPress | 31 | 276 | 339 | 3k+ | | | Output is not escaped |
| #3987 | Patterns Kit | 69 | 182 | 5 | 3k+ | | | Missing direct file access protection |
| #3988 | Payment Forms for Paystack | 90 | 494 | 23 | 3k+ | | | Text Domain Mismatch |
| #3989 | Payment Gateways by User Roles for WooCommerce | 99 | 1 | 7 | 3k+ | | | Non-prefixed hook name |
| #3990 | Paytium: Mollie payment forms & donations | 26 | 506 | 551 | 3k+ | | | Unsafe printing function |
| #3991 | Paytm Payment Gateway | 35 | 92 | 104 | 3k+ | | | Missing Arg Domain |
| #3992 | PayTR Taksit Tablosu – WooCommerce | 38 | 67 | 39 | 3k+ | | | Non Singular String Literal Domain |
| #3993 | Paytrail for WooCommerce | 35 | 28 | 46 | 3k+ | | | Non-prefixed global variable |
| #3994 | PDF Forms Filler for CF7 | 36 | 185 | 79 | 3k+ | | | Text Domain Mismatch |
| #3995 | Designil PDPA Thailand | 39 | 131 | 36 | 3k+ | | | Output is not escaped |
| #3996 | Persian Date | 96 | 6 | 0 | 3k+ | | | outdated tested upto header |
| #3997 | Peter’s Post Notes | 36 | 224 | 102 | 3k+ | | | Output is not escaped |
| #3998 | Gallery PhotoBlocks | 23 | 904 | 1,345 | 3k+ | | | Non-prefixed global variable |
| #3999 | phpinfo() WP — Site Health, PHP Compatibility & Server Audit | 25 | 276 | 704 | 3k+ | | | Non-prefixed global variable |
| #4000 | Piotnet Forms | 25 | 187 | 374 | 3k+ | | | Alternative PHP tag found |