| #4251 | WP Remove Query Strings From Static Resources | 98 | 40 | 5 | 3k+ | | | Text Domain Mismatch |
| #4252 | WP-REST-API V2 Menus | 96 | 5 | 4 | 3k+ | | | trademarked term |
| #4253 | Search Insights – Privacy-Friendly Search Analytics | 82 | 7 | 50 | 3k+ | | | Non-prefixed global variable |
| #4254 | WP Simple HTML Sitemap | 99 | 2 | 3 | 3k+ | | | trademarked term |
| #4255 | WP Simple Mail Sender | 78 | 21 | 6 | 3k+ | | | Non Singular String Literal Domain |
| #4256 | WP-Slimbox2 Plugin | 39 | 77 | 19 | 3k+ | | | Unsafe printing function |
| #4257 | WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups | 38 | 299 | 58 | 3k+ | | | Non Singular String Literal Domain |
| #4258 | WP Widget in Navigation | 71 | 37 | 15 | 3k+ | | | Non Singular String Literal Domain |
| #4259 | WP125 | 31 | 178 | 184 | 3k+ | | | Unsafe printing function |
| #4260 | SEO Auto Linker | 39 | 97 | 62 | 3k+ | | | Unsafe printing function |
| #4261 | WPMobile.App | 23 | 2,983 | 1,533 | 3k+ | | | Output is not escaped |
| #4262 | WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets | 98 | 1 | 17 | 3k+ | | | Post Not In exclude |
| #4263 | WPC Free Shipping Bar for WooCommerce | 93 | | 18 | 3k+ | | | Non-prefixed class |
| #4264 | WPC Grouped Product for WooCommerce | 84 | | 45 | 3k+ | | | Nonce verification recommended |
| #4265 | WPC Linked Variation for WooCommerce | 98 | | 15 | 3k+ | | | Non-prefixed class |
| #4266 | WPC Product Videos for WooCommerce | 98 | | 15 | 3k+ | | | Non-prefixed class |
| #4267 | Premium Packages – Sell Digital Products Securely | 20 | 2,027 | 2,234 | 3k+ | | | Non-prefixed global variable |
| #4268 | WP fail2ban Blocklist | 36 | 61 | 63 | 3k+ | | | SQL query is not prepared |
| #4269 | Wp Favs – Plugin Manager | 34 | 238 | 153 | 3k+ | | | Text Domain Mismatch |
| #4270 | Loyalty Points Rewards and Referral for WooCommerce – WPLoyalty | 76 | 2,207 | 760 | 3k+ | | | Text Domain Mismatch |
| #4271 | Active Campaign & Contact Form 7 | 43 | 40 | 27 | 3k+ | | | Output is not escaped |
| #4272 | WpRedesigned – Beautiful Custom Admin Theme | 97 | 3 | 4 | 3k+ | | | trademarked term |
| #4273 | WPS Notice Center | 71 | 12 | 7 | 3k+ | | | Unsafe printing function |
| #4274 | wpsection | 77 | 131 | 554 | 3k+ | | | Non-prefixed global variable |
| #4275 | Local Business Schema (JSON-LD) Lite | 90 | 155 | 8 | 3k+ | | | Text Domain Mismatch |
| #4276 | WpStream – Live Streaming, Video on Demand, Pay Per View | 24 | 1,724 | 742 | 3k+ | | | Text Domain Mismatch |
| #4277 | WPTerm | 42 | 61 | 89 | 3k+ | | | Output is not escaped |
| #4278 | Weather Underground | 38 | 64 | 27 | 3k+ | | | Output is not escaped |
| #4279 | XML for Google Merchant Center | 29 | 52 | 312 | 3k+ | | | Non-prefixed global variable |
| #4280 | YayPricing – WooCommerce Dynamic Pricing & Discounts | 30 | 174 | 186 | 3k+ | | | Non-prefixed global variable |
| #4281 | YITH WooCommerce Featured Video | 31 | 383 | 1,434 | 3k+ | | | Non-prefixed global variable |
| #4282 | YITH WooCommerce Product Bundles | 28 | 404 | 1,480 | 3k+ | | | Non-prefixed global variable |
| #4283 | YITH WooCommerce Waitlist | 24 | 420 | 1,500 | 3k+ | | | Non-prefixed global variable |
| #4284 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | | Non-prefixed global variable |
| #4285 | Zoho Campaigns | 38 | 3 | 129 | 3k+ | | | Non-prefixed global variable |
| #4286 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #4287 | Image Gallery Block | 84 | 9 | 22 | 2k+ | | | Non-prefixed global variable |
| #4288 | aapanel WP Toolkit | 71 | 20 | 18 | 2k+ | | | wp function not compatible with requires wp |
| #4289 | aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | 54 | 8 | 382 | 2k+ | | | Non-prefixed global variable |
| #4290 | Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | 24 | 162 | 790 | 2k+ | | | Non-prefixed global variable |
| #4291 | Accessibility by AudioEye | 95 | 17 | 16 | 2k+ | | | Non-prefixed global variable |
| #4292 | Accordion Slider | 29 | 391 | 447 | 2k+ | | | Unsafe printing function |
| #4293 | Accordion Toggle | 82 | 17 | 11 | 2k+ | | | Non-prefixed class |
| #4294 | Advanced Custom Fields : CPT Options Pages | 35 | 37 | 11 | 2k+ | | | Output is not escaped |
| #4295 | ACF Galerie 4 | 77 | 16 | 23 | 2k+ | | | Text Domain Mismatch |
| #4296 | ACF Hide Layout | 98 | 4 | 2 | 2k+ | | | Discouraged text-domain loading |
| #4297 | ACF: Image Hotspots Field | 35 | 26 | 5 | 2k+ | | | Text Domain Mismatch |
| #4298 | ACF Nav Menu Field | 85 | 16 | 6 | 2k+ | | | Text Domain Mismatch |
| #4299 | ACF: Rus-To-Lat | 66 | 15 | 11 | 2k+ | | | Output is not escaped |
| #4300 | ActiveLayer Anti-Spam: Spam Protection for Forms & Comments | 96 | | 2 | 2k+ | | | Database parameter is not escaped |