| #4351 | User Posts Limit | 44 | 82 | 22 | 2k+ | | | Output is not escaped |
| #4352 | AAArdvark Accessibility Reports | 55 | 62 | 42 | 700 | | | Non-prefixed global variable |
| #4353 | Widget Visibility Time Scheduler | 42 | 70 | 34 | 1k+ | | | Output is not escaped |
| #4354 | WP Courseware for WooCommerce | 35 | 55 | 49 | 1k+ | | | Text Domain Mismatch |
| #4355 | WooCommerce Product Dependencies | 39 | 44 | 60 | 3k+ | | | Missing nonce verification |
| #4356 | iControlWP | 47 | 45 | 59 | 1k+ | | | Missing direct file access protection |
| #4357 | ActiveTrail – Contact Form 7 | 42 | 18 | 85 | 600 | | | Missing nonce verification |
| #4358 | Advanced Custom Fields: Number Slider | 47 | 99 | 4 | 400 | | | Output is not escaped |
| #4359 | Authenticator | 41 | 59 | 44 | 1k+ | | | Output is not escaped |
| #4360 | Contact form 7 TO API + Basic Auth | 40 | 73 | 30 | 1k+ | | | Non Singular String Literal Domain |
| #4361 | Variation Price Display For WooCommerce | 77 | 87 | 16 | 900 | | | Text Domain Mismatch |
| #4362 | Easy Elementor Addons – Addons Pack for Elementor Page Builder | 54 | 35 | 68 | 1k+ | | | Post Not In exclude |
| #4363 | Inpost Paczkomaty | 41 | 35 | 68 | 8k+ | | | Text Domain Mismatch |
| #4364 | Social Sharing Plugin – Kiwi | 41 | 23 | 80 | 4k+ | | | Non-prefixed global variable |
| #4365 | Roles & Capabilities | 44 | 24 | 79 | 1k+ | | | Nonce verification recommended |
| #4366 | Modern Cart – WooCommerce Side Cart & Popup Cart | 86 | 8 | 95 | 50k+ | | | Non-prefixed global variable |
| #4367 | Pago por Redsys | 50 | 44 | 59 | 700 | | | Text Domain Mismatch |
| #4368 | Simple Product Options for WooCommerce | 41 | 62 | 41 | 3k+ | | | Output is not escaped |
| #4369 | Search & Replace | 36 | 50 | 53 | 100k+ | | | Missing nonce verification |
| #4370 | SimpleShop | 38 | 52 | 51 | 1k+ | | | date date |
| #4371 | Skimlinks Affiliate Marketing Tool | 37 | 84 | 19 | 800 | | | wp function not compatible with requires wp |
| #4372 | MultiStep Checkout for WooCommerce | 60 | 46 | 57 | 4k+ | | | Non Singular String Literal Text |
| #4373 | Payment Gateway bKash for WC | 93 | 96 | 7 | 1k+ | | | Text Domain Mismatch |
| #4374 | WP Help | 40 | 49 | 54 | 9k+ | | | Unsafe printing function |
| #4375 | WP Post Signature | 37 | 90 | 13 | 1k+ | | | Unsafe printing function |
| #4376 | Accordions | 55 | 1 | 101 | 20k+ | | | slow db query meta query |
| #4377 | ACF: Google Font Selector | 39 | 57 | 45 | 3k+ | | | Output is not escaped |
| #4378 | Add to Cart Button Custom Text | 42 | 98 | 4 | 9k+ | | | Text Domain Mismatch |
| #4379 | Admin Bar Editor – Toolbar Customization with User Role based access & Custom menus | 38 | 56 | 46 | 3k+ | | | Output is not escaped |
| #4380 | Contact Form 7 BWP reCAPTCHA Extension | 48 | 92 | 10 | 400 | | | Non Singular String Literal Domain |
| #4381 | Customify | 95 | 1 | 101 | 10k+ | | | Non-prefixed global variable |
| #4382 | Enhanced Recent Posts | 35 | 78 | 24 | 400 | | | Output is not escaped |
| #4383 | Gutenverse News – News Blocks for Blog & Magazine Sites | 39 | 37 | 65 | 800 | | | Non-prefixed hook name |
| #4384 | hpb seo plugin for WordPress | 39 | 15 | 87 | 2k+ | | | Non-prefixed global variable |
| #4385 | Coming Soon & Maintenance Mode Page & Under Construction | 78 | 35 | 67 | 10k+ | | | Non-prefixed global variable |
| #4386 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | | | Non-prefixed function |
| #4387 | QR Redirector | 39 | 48 | 54 | 4k+ | | | Output is not escaped |
| #4388 | Random Post Plugin – Redirect URL to Post | 40 | 28 | 74 | 3k+ | | | Nonce verification recommended |
| #4389 | ST Demo Importer | 40 | 27 | 75 | 800 | | | Missing nonce verification |
| #4390 | WC Moneris Payment Gateway | 56 | 82 | 20 | 900 | | | Text Domain Mismatch |
| #4391 | WP Date and Time Shortcode | 40 | 90 | 12 | 10k+ | | | Output is not escaped |
| #4392 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | | | Output is not escaped |
| #4393 | WP Table Builder – Drag & Drop Table Builder | 57 | 63 | 39 | 50k+ | | | Not Allowed |
| #4394 | BuddyPress Default Cover Photo | 39 | 62 | 39 | 500 | | | Output is not escaped |
| #4395 | Bulk Add Terms | 40 | 74 | 27 | 800 | | | Text Domain Mismatch |
| #4396 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | | | Non-prefixed function |
| #4397 | Custom Metadata Manager | 39 | 81 | 20 | 800 | | | Output is not escaped |
| #4398 | Elements Hive for Breakdance | 35 | 76 | 25 | 1k+ | | | Output is not escaped |
| #4399 | FlyWP Helper – Page Cache, Page Optimization, Emails for FlyWP Server Control Panel | 40 | 20 | 81 | 4k+ | | | Non-prefixed global variable |
| #4400 | GoSMTP – SMTP for WordPress | 39 | 59 | 42 | 500k+ | | | Output is not escaped |