| #5551 | Contact Form 7 IE DatePicker and Number Spinner Fix | 97 | 5 | 5 | 1k+ | | | trademarked term |
| #5552 | Contact Form 7 GetResponse Extension | 40 | 88 | 18 | 1k+ | | | Text Domain Mismatch |
| #5553 | Contact Form Query | 100 | | 0 | 1k+ | | | No open findings |
| #5554 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | | | Text Domain Mismatch |
| #5555 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 24 | 529 | 357 | 1k+ | | | Text Domain Mismatch |
| #5556 | Contact List – Online Staff Directory & Address Book | 33 | 118 | 342 | 1k+ | | | Nonce verification recommended |
| #5557 | Content Anchor Links | 90 | 6 | 5 | 1k+ | | | Non-prefixed hook name |
| #5558 | Content Blocks Builder – Create blocks, repeater blocks with carousel, grid, popup layouts | 98 | | 38 | 1k+ | | | Non-prefixed hook name |
| #5559 | Content Copy Protection & Disable Right Click | 45 | 47 | 17 | 1k+ | | | Output is not escaped |
| #5560 | Content Mask | 35 | 50 | 350 | 1k+ | | | Non-prefixed global variable |
| #5561 | ContentRemover – remover titles, dates, author | 99 | 1 | 2 | 1k+ | | | Discouraged text-domain loading |
| #5562 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 1k+ | | | Non-prefixed global variable |
| #5563 | Continuous Image Carousel With Lightbox | 36 | 255 | 129 | 1k+ | | | Output is not escaped |
| #5564 | Contribuinte Checkout | 41 | 30 | 30 | 1k+ | | | Output is not escaped |
| #5565 | Awin Publisher MasterTag | 82 | 6 | 6 | 1k+ | | | Non-prefixed global variable |
| #5566 | Convert Rank Math FAQ to Accordion | 93 | 2 | 0 | 1k+ | | | Output is not escaped |
| #5567 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 26 | 159 | 297 | 1k+ | | | Non-prefixed global variable |
| #5568 | cookie-cat | 81 | 14 | 27 | 1k+ | | | Non-prefixed function |
| #5569 | GDPR Cookie Consent Notice Box | 35 | 46 | 17 | 1k+ | | | Output is not escaped |
| #5570 | Cookie Notice & Consent | 41 | 101 | 29 | 1k+ | | | Output is not escaped |
| #5571 | Cookie Wow PDPA Banner | 96 | 7 | 6 | 1k+ | | | Missing direct file access protection |
| #5572 | CookiePro | Simplify Compliance with GDPR & EU Cookie Laws | 90 | 37 | 5 | 1k+ | | | Missing Arg Domain |
| #5573 | Core Web Vitals & PageSpeed Booster | 77 | 346 | 65 | 1k+ | | | Text Domain Mismatch |
| #5574 | Corona Virus Data | 40 | 279 | 27 | 1k+ | | | Unsafe printing function |
| #5575 | CorvusPay WooCommerce Payment Gateway | 37 | 29 | 141 | 1k+ | | | Missing nonce verification |
| #5576 | Counter Block | 98 | 4 | 2 | 1k+ | | | Missing direct file access protection |
| #5577 | Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress | 51 | 3 | 116 | 1k+ | | | Missing nonce verification |
| #5578 | Counter-Hits | 98 | 4 | 2 | 1k+ | | | Missing direct file access protection |
| #5579 | Country Code Selector | 38 | 91 | 20 | 1k+ | | | Unsafe printing function |
| #5580 | Polylang – Country Detection | 89 | 4 | 7 | 1k+ | | | Input is not sanitized |
| #5581 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #5582 | Coupon & Discount Code Reveal Button | 89 | 37 | 10 | 1k+ | | | wp function not compatible with requires wp |
| #5583 | Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | 35 | 30 | 168 | 1k+ | | | Non-prefixed global variable |
| #5584 | CP Blocks | 36 | 46 | 38 | 1k+ | | | wp function not compatible with requires wp |
| #5585 | CP Multi View Events Calendar | 26 | 86 | 439 | 1k+ | | | Non-prefixed global variable |
| #5586 | Crafty Social Buttons | 37 | 279 | 27 | 1k+ | | | Non Singular String Literal Domain |
| #5587 | Bulk Post Category Creator | 91 | 20 | 2 | 1k+ | | | Text Domain Mismatch |
| #5588 | Cresta Social Messenger | 71 | 9 | 10 | 1k+ | | | Non-prefixed function |
| #5589 | Cresta Posts Box | 59 | 10 | 13 | 1k+ | | | Output is not escaped |
| #5590 | Reduce Unused CSS Solution with Critical CSS For WP | 96 | 48 | 12 | 1k+ | | | wp function not compatible with requires wp |
| #5591 | CRM Perks Forms – WordPress Form Builder | 24 | 819 | 577 | 1k+ | | | Output is not escaped |
| #5592 | Cron Logger | 40 | 49 | 36 | 1k+ | | | Output is not escaped |
| #5593 | Cronjob Scheduler | 42 | 20 | 36 | 1k+ | | | Input is not sanitized |
| #5594 | Crypto Converter ⚡ Widget | 100 | | 0 | 1k+ | | | No open findings |
| #5595 | Crypto Payment Gateway with Instant Payouts | 100 | | 4 | 1k+ | | | Non-prefixed class |
| #5596 | Cryptocurrency Widgets For Elementor | 90 | 1 | 33 | 1k+ | | | Non-prefixed global variable |
| #5597 | CSS JS Manager, Async JavaScript, Defer Render Blocking CSS | 34 | 76 | 106 | 1k+ | | | Input is not validated |
| #5598 | CSS Ready Classes for Gravity Forms | 94 | 1 | 1 | 1k+ | | | Output is not escaped |
| #5599 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #5600 | CSV Import and Exporter | 32 | 83 | 138 | 1k+ | | | Non-prefixed global variable |