| #4501 | WPGraphQL | 35 | 10 | 86 | 30k+ | | | Non-prefixed hook name |
| #4502 | WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce | 61 | 22 | 74 | 1k+ | | | Non-prefixed global variable |
| #4503 | WP-Slimbox2 Plugin | 39 | 77 | 19 | 3k+ | | | Unsafe printing function |
| #4504 | WPGraphQL Smart Cache | 71 | 87 | 9 | 6k+ | | | Text Domain Mismatch |
| #4505 | WebToffee Gift Cards for WooCommerce | 95 | 92 | 4 | 1k+ | | | wp function not compatible with requires wp |
| #4506 | Avacy CMP | 47 | 5 | 90 | 500 | | | Non-prefixed global variable |
| #4507 | Boxtal – Shipping solution | 86 | 3 | 92 | 9k+ | | | Non-prefixed global variable |
| #4508 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 44 | 24 | 71 | 50k+ | | | Non-prefixed constant |
| #4509 | Cecabank WooCommerce Plugin | 38 | 63 | 32 | 3k+ | | | Text Domain Mismatch |
| #4510 | Contact Form 7 | 69 | 56 | 39 | 10m+ | | | Missing direct file access protection |
| #4511 | Custom Database Applications by Caspio | 36 | 32 | 63 | 400 | | | Input is not sanitized |
| #4512 | Dropdown multisite selector | 41 | 82 | 13 | 900 | | | Unsafe printing function |
| #4513 | Gateway AqayePardakht for Woocommerce | 47 | 72 | 23 | 4k+ | | | Text Domain Mismatch |
| #4514 | Holded integration | 55 | 72 | 23 | 2k+ | | | Non Singular String Literal Domain |
| #4515 | JetHost Total Care – Security & Enhancements | 45 | 10 | 85 | 800 | | | Direct Query |
| #4516 | Maintenance Page | 37 | 62 | 33 | 3k+ | | | Output is not escaped |
| #4517 | MAS Brands for WooCommerce | 56 | 80 | 15 | 10k+ | | | Text Domain Mismatch |
| #4518 | RDP Wiki Embed | 38 | 69 | 26 | 400 | | | Output is not escaped |
| #4519 | Recurring PayPal Donations | 41 | 48 | 47 | 800 | | | Text Domain Mismatch |
| #4520 | Shortcoder — Create Shortcodes for Anything | 37 | 25 | 70 | 100k+ | | | Non-prefixed global variable |
| #4521 | SKP WP Admin Login Captcha | 39 | 77 | 18 | 1k+ | | | Output is not escaped |
| #4522 | Theme Switcha – Easily Switch Themes for Development and Testing | 43 | 42 | 53 | 7k+ | | | Output is not escaped |
| #4523 | Transients Manager | 42 | 45 | 50 | 20k+ | | | Output is not escaped |
| #4524 | Commerce7 for WordPress | 91 | 2 | 93 | 900 | | | Non-prefixed global variable |
| #4525 | Add Chat App Button | 41 | 82 | 12 | 2k+ | | | Output is not escaped |
| #4526 | Private Store for WooCommerce B2B & Wholesale by B2BKing | 70 | 86 | 8 | 600 | | | Text Domain Mismatch |
| #4527 | Basic SEO Pack | 42 | 86 | 8 | 700 | | | Output is not escaped |
| #4528 | Čeština: zalomení řádků | 41 | 86 | 8 | 6k+ | | | Text Domain Mismatch |
| #4529 | Chatbot for WordPress by Collect.chat ⚡️ | 38 | 58 | 36 | 6k+ | | | Unsafe printing function |
| #4530 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #4531 | Custom Menu | 43 | 83 | 11 | 400 | | | wp function not compatible with requires wp |
| #4532 | Display Categories Widget | 42 | 90 | 4 | 3k+ | | | Output is not escaped |
| #4533 | Dynamic Animations for Elementor | 88 | 77 | 17 | 1k+ | | | Non Singular String Literal Domain |
| #4534 | Easy GDPR Consent Forms – MailChimp | 57 | 72 | 22 | 500 | | | Text Domain Mismatch |
| #4535 | Elemailer Lite – Elementor email template & campaign builder | 38 | 44 | 50 | 5k+ | | | Output is not escaped |
| #4536 | Google Webfont Optimizer | 36 | 45 | 49 | 700 | | | Output is not escaped |
| #4537 | Icon List | 59 | 83 | 11 | 1k+ | | | Text Domain Mismatch |
| #4538 | Lazy Load XT | 41 | 87 | 7 | 600 | | | Non Singular String Literal Domain |
| #4539 | Quick and Easy Testimonials | 55 | 62 | 32 | 3k+ | | | Non Singular String Literal Domain |
| #4540 | Slide everything for Elementor | 61 | 93 | 1 | 6k+ | | | Text Domain Mismatch |
| #4541 | Logo Slider , Logo Carousel , Logo showcase , Client Logo | 38 | 72 | 22 | 1k+ | | | Output is not escaped |
| #4542 | Teachable | 93 | 19 | 75 | 500 | | | Non-prefixed global variable |
| #4543 | Country Based Restrictions for WooCommerce | 41 | 27 | 67 | 5k+ | | | Request data is not unslashed |
| #4544 | WP Duplicate Page | 35 | 44 | 50 | 60k+ | | | Text Domain Mismatch |
| #4545 | Related Products Slider for WooCommerce – Boost Sales with Smart Product Recommendations | 61 | 81 | 13 | 1k+ | | | Text Domain Mismatch |
| #4546 | WPC Badge Management for WooCommerce | 35 | 13 | 81 | 2k+ | | | Missing nonce verification |
| #4547 | X-Currency – The Ultimate WooCommerce currency switcher for a smoother shopping experience | 77 | 17 | 77 | 1k+ | | | Non-prefixed global variable |
| #4548 | You can quote me on that | 39 | 57 | 37 | 400 | | | Output is not escaped |
| #4549 | Gateway zibal for Woocommerce | 44 | 70 | 24 | 6k+ | | | Text Domain Mismatch |
| #4550 | AVIF Uploader | 51 | 49 | 44 | 4k+ | | | Missing Arg Domain |