| #4101 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #4102 | Pinyin Slugs | 97 | | 1 | 3k+ | | | Plugin menu slug uses __FILE__ |
| #4103 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 63 | 18 | 136 | 3k+ | | | Direct Query |
| #4104 | SpeakOut! Email Petitions | 20 | 850 | 994 | 3k+ | | | Missing nonce verification |
| #4105 | Spiffy Calendar | 33 | 473 | 243 | 3k+ | | | Output is not escaped |
| #4106 | Splide Carousel Block | 100 | 1 | 0 | 3k+ | | | Missing direct file access protection |
| #4107 | Split Test For Elementor | 32 | 98 | 132 | 3k+ | | | Non-prefixed global variable |
| #4108 | Sp*tify Play Button for WordPress | 54 | 21 | 15 | 3k+ | | | Text Domain Mismatch |
| #4109 | SQLite Database Integration | 29 | 161 | 89 | 3k+ | | | Exception output is not escaped |
| #4110 | Static 404 | 85 | 1 | 7 | 3k+ | | | Input is not sanitized |
| #4111 | Stock Market Ticker | 38 | 69 | 14 | 3k+ | | | Output is not escaped |
| #4112 | Storefront Footer Bar | 91 | 6 | 2 | 3k+ | | | Missing Arg Domain |
| #4113 | Title Toggle for Storefront Theme | 68 | 16 | 9 | 3k+ | | | Output is not escaped |
| #4114 | Stylish Price List – Price Table Builder & QR Code Restaurant Menu | 22 | 674 | 678 | 3k+ | | | Output is not escaped |
| #4115 | Subtitles | 86 | 4 | 9 | 3k+ | | | Non-prefixed hook name |
| #4116 | Surbma | Yoast SEO Breadcrumb Shortcode | 98 | 1 | 8 | 3k+ | | | trademarked term |
| #4117 | Swipe Slider – Make dynamic slider with solid, gradient, or image background | 83 | 2 | 15 | 3k+ | | | Non-prefixed global variable |
| #4118 | Sync Post With Other Site | 38 | 179 | 24 | 3k+ | | | Non Singular String Literal Domain |
| #4119 | Tableberg – Simple Gutenberg Table Block | 98 | 3 | 4 | 3k+ | | | date date |
| #4120 | Tabs Widget for Page Builder | 72 | 22 | 7 | 3k+ | | | Text Domain Mismatch |
| #4121 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 26 | 351 | 232 | 3k+ | | | Unsafe printing function |
| #4122 | Testimonial Slider | 34 | 448 | 262 | 3k+ | | | Unsafe printing function |
| #4123 | Text Replace | 41 | 55 | 12 | 3k+ | | | Output is not escaped |
| #4124 | Text To Speech TTS Accessibility | 93 | | 161 | 3k+ | | | Non-prefixed hook name |
| #4125 | Typing Text – Add Animated Typing Effects to Headings or Text | 78 | 4 | 25 | 3k+ | | | Non-prefixed class |
| #4126 | Text Unfold For Elementor | 88 | 122 | 0 | 3k+ | | | Text Domain Mismatch |
| #4127 | Themeflection Numbers – Number Counter and Animated Numbers | 55 | 224 | 73 | 3k+ | | | Text Domain Mismatch |
| #4128 | Product Compare for WooCommerce | 82 | 6 | 42 | 3k+ | | | Non-prefixed global variable |
| #4129 | The Courier Guy Shipping for WooCommerce | 35 | 57 | 107 | 3k+ | | | Missing nonce verification |
| #4130 | Themify Event Post | 25 | 397 | 143 | 3k+ | | | Output is not escaped |
| #4131 | Themify Icons | 35 | 33 | 12 | 3k+ | | | Output is not escaped |
| #4132 | Thumbnail Upscale | 99 | 2 | 0 | 3k+ | | | Missing direct file access protection |
| #4133 | Timeline Block – Beautiful Timeline Builder | 99 | 27 | 1 | 3k+ | | | Text Domain Mismatch |
| #4134 | Timeline Module for Divi | 84 | 16 | 11 | 3k+ | | | Text Domain Mismatch |
| #4135 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |
| #4136 | Mobile Detect | 90 | 4 | 1 | 3k+ | | | Exception output is not escaped |
| #4137 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 61 | 16 | 1,167 | 3k+ | | | Non-prefixed global variable |
| #4138 | Accessibility Tools & Alt Text Finder | 38 | 36 | 56 | 3k+ | | | Text Domain Mismatch |
| #4139 | Linguator AI – Auto Translate & Create Multilingual Sites | 99 | 4 | 1 | 3k+ | | | wp function not compatible with requires wp |
| #4140 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #4141 | TrustMate.io – WooCommerce integration | 36 | 251 | 97 | 3k+ | | | Output is not escaped |
| #4142 | Twenty Eleven Theme Extensions | 38 | 35 | 30 | 3k+ | | | Output is not escaped |
| #4143 | Typebot | 59 | 17 | 9 | 3k+ | | | Output is not escaped |
| #4144 | Ultimate Cursor – Interactive and Animated Cursor and Background Effects Toolkit | 73 | 3 | 12 | 3k+ | | | Nonce verification recommended |
| #4145 | Ultimate Floating Widgets – Make popup sidebars | 50 | 48 | 14 | 3k+ | | | Output is not escaped |
| #4146 | Ultimate Noindex Nofollow Tool II | 40 | 38 | 51 | 3k+ | | | Input is not validated |
| #4147 | Ultimate Member – Online Users | 58 | 25 | 4 | 3k+ | | | Output is not escaped |
| #4148 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #4149 | Urvanov Syntax Highlighter | 30 | 221 | 87 | 3k+ | | | Output is not escaped |
| #4150 | User Activity Tracking and Log | 51 | 28 | 237 | 3k+ | | | Non-prefixed global variable |