| #4101 | Smooth scrolling with Lenis | 97 | 3 | 0 | 3k+ | | | outdated tested upto header |
| #4102 | SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | 24 | 831 | 1,903 | 3k+ | | | Non-prefixed global variable |
| #4103 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #4104 | Pinyin Slugs | 97 | | 1 | 3k+ | | | Plugin menu slug uses __FILE__ |
| #4105 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 63 | 30 | 134 | 3k+ | | | Direct Query |
| #4106 | SpeakOut! Email Petitions | 20 | 850 | 994 | 3k+ | | | Missing nonce verification |
| #4107 | Spiffy Calendar | 33 | 473 | 243 | 3k+ | | | Output is not escaped |
| #4108 | Splide Carousel Block | 100 | 1 | 0 | 3k+ | | | Missing direct file access protection |
| #4109 | Split Test For Elementor | 32 | 98 | 132 | 3k+ | | | Non-prefixed global variable |
| #4110 | Sp*tify Play Button for WordPress | 54 | 21 | 15 | 3k+ | | | Text Domain Mismatch |
| #4111 | SQLite Database Integration | 29 | 161 | 89 | 3k+ | | | Exception output is not escaped |
| #4112 | Static 404 | 85 | 1 | 7 | 3k+ | | | Input is not sanitized |
| #4113 | Stock Market Ticker | 38 | 69 | 14 | 3k+ | | | Output is not escaped |
| #4114 | Storefront Footer Bar | 91 | 6 | 2 | 3k+ | | | Missing Arg Domain |
| #4115 | Title Toggle for Storefront Theme | 68 | 16 | 9 | 3k+ | | | Output is not escaped |
| #4116 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #4117 | Subtitles | 86 | 4 | 9 | 3k+ | | | Non-prefixed hook name |
| #4118 | Surbma | Yoast SEO Breadcrumb Shortcode | 98 | 1 | 8 | 3k+ | | | trademarked term |
| #4119 | Swipe Slider – Make dynamic slider with solid, gradient, or image background | 83 | 2 | 15 | 3k+ | | | Non-prefixed global variable |
| #4120 | Sync Post With Other Site | 39 | 179 | 21 | 3k+ | | | Non Singular String Literal Domain |
| #4121 | TableKit: Table Builder Blocks for Gutenberg | 56 | 80 | 20 | 3k+ | | | Missing Translators Comment |
| #4122 | Table Of Content Block – Auto-Generate Clickable Table of Contents | 35 | 2 | 1 | 3k+ | | | Hidden files included |
| #4123 | Tableberg – Simple Gutenberg Table Block | 98 | 3 | 4 | 3k+ | | | date date |
| #4124 | Tabs Widget for Page Builder | 72 | 22 | 7 | 3k+ | | | Text Domain Mismatch |
| #4125 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 26 | 351 | 232 | 3k+ | | | Unsafe printing function |
| #4126 | Testimonial Slider | 34 | 448 | 262 | 3k+ | | | Unsafe printing function |
| #4127 | Text Replace | 41 | 55 | 12 | 3k+ | | | Output is not escaped |
| #4128 | Text To Speech TTS Accessibility | 93 | | 165 | 3k+ | | | Non-prefixed hook name |
| #4129 | Typing Text – Add Animated Typing Effects to Headings or Text | 78 | 4 | 25 | 3k+ | | | Non-prefixed class |
| #4130 | Text Unfold For Elementor | 88 | 122 | 0 | 3k+ | | | Text Domain Mismatch |
| #4131 | Themeflection Numbers – Number Counter and Animated Numbers | 55 | 224 | 73 | 3k+ | | | Text Domain Mismatch |
| #4132 | Product Compare for WooCommerce | 38 | 55 | 191 | 3k+ | | | Non-prefixed global variable |
| #4133 | The Courier Guy Shipping for WooCommerce | 35 | 57 | 107 | 3k+ | | | Missing nonce verification |
| #4134 | Themify Event Post | 25 | 397 | 143 | 3k+ | | | Output is not escaped |
| #4135 | Themify Icons | 35 | 33 | 12 | 3k+ | | | Output is not escaped |
| #4136 | Thumbnail Upscale | 99 | 2 | 0 | 3k+ | | | Missing direct file access protection |
| #4137 | Timeline Block – Beautiful Timeline Builder | 99 | 26 | 1 | 3k+ | | | Text Domain Mismatch |
| #4138 | Timeline Module for Divi | 84 | 16 | 11 | 3k+ | | | Text Domain Mismatch |
| #4139 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |
| #4140 | Mobile Detect | 90 | 4 | 1 | 3k+ | | | Exception output is not escaped |
| #4141 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 27 | 25 | 1,320 | 3k+ | | | Non-prefixed global variable |
| #4142 | Accessibility Tools & Alt Text Finder | 38 | 36 | 56 | 3k+ | | | Text Domain Mismatch |
| #4143 | Linguator AI – Auto Translate & Create Multilingual Sites | 99 | 4 | 1 | 3k+ | | | wp function not compatible with requires wp |
| #4144 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #4145 | TrustMate.io – WooCommerce integration | 36 | 255 | 101 | 3k+ | | | Output is not escaped |
| #4146 | Twenty Eleven Theme Extensions | 38 | 35 | 30 | 3k+ | | | Output is not escaped |
| #4147 | Typebot | 59 | 17 | 9 | 3k+ | | | Output is not escaped |
| #4148 | Ultimate Cursor – Interactive and Animated Cursor and Background Effects Toolkit | 100 | | 1 | 3k+ | | | Non-prefixed constant |
| #4149 | Ultimate Floating Widgets – Make popup sidebars | 50 | 48 | 14 | 3k+ | | | Output is not escaped |
| #4150 | Ultimate Noindex Nofollow Tool II | 40 | 38 | 51 | 3k+ | | | Input is not validated |