| #4401 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #4402 | Plugin BlueX for WooCommerce | 29 | 431 | 216 | 2k+ | | | Text Domain Mismatch |
| #4403 | Booking.com Official Search Box | 42 | 36 | 32 | 2k+ | | | Output is not escaped |
| #4404 | BuddyPress Activity Shortcode | 73 | 9 | 14 | 2k+ | | | Non-prefixed hook name |
| #4405 | Britetechs Companion | 37 | 966 | 613 | 2k+ | | | Text Domain Mismatch |
| #4406 | Browser Theme Color | 83 | 4 | 2 | 2k+ | | | Output is not escaped |
| #4407 | BugSnag Error Monitoring plugin | 39 | 52 | 96 | 2k+ | | | wp function not compatible with requires wp |
| #4408 | Bulk Change Media Author | 42 | 25 | 20 | 2k+ | | | Unsafe printing function |
| #4409 | Bulk NoIndex & NoFollow Toolkit | 39 | 72 | 172 | 2k+ | | | Nonce verification recommended |
| #4410 | Bulk Term Generator – Import multiple tags, categories, and taxonomies easily | 66 | 8 | 31 | 2k+ | | | Request data is not unslashed |
| #4411 | Announcement & Notification Banner – Bulletin | 23 | 930 | 1,576 | 2k+ | | | Non-prefixed global variable |
| #4412 | Business Reviews – Display Customer Reviews from Popular Sites | 90 | 4 | 4 | 2k+ | | | Non-prefixed class |
| #4413 | Button | 80 | 65 | 28 | 2k+ | | | Text Domain Mismatch |
| #4414 | Custom Buttons for WooCommerce – Add To Cart Button for Product Types | 61 | 58 | 4 | 2k+ | | | Text Domain Mismatch |
| #4415 | Buy Now Button for WooCommerce | 74 | 9 | 11 | 2k+ | | | Nonce verification recommended |
| #4416 | Addi – Cuotas que se adaptan a ti | 33 | 106 | 209 | 2k+ | | | Direct Query |
| #4417 | UseStrict's Calendly Embedder | 35 | 4 | 1 | 2k+ | | | Hidden files included |
| #4418 | Event Calendar – Calendar | 24 | 1,111 | 1,262 | 2k+ | | | Text Domain Mismatch |
| #4419 | Canada Post Shipping For WooCommerce | 92 | 4 | 0 | 2k+ | | | Output is not escaped |
| #4420 | PiWeb Cancel order / Refund request for WooCommerce | 76 | 40 | 49 | 2k+ | | | wp function not compatible with requires wp |
| #4421 | Canonical Link | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #4422 | Carousel Horizontal Posts Content Slider | 36 | 271 | 59 | 2k+ | | | Text Domain Mismatch |
| #4423 | Cart Notices for WooCommerce | 23 | 639 | 474 | 2k+ | | | Text Domain Mismatch |
| #4424 | Catch Breadcrumb | 86 | 1 | 29 | 2k+ | | | Non-prefixed global variable |
| #4425 | Catch Sticky Menu | 100 | | 1 | 2k+ | | | Non-prefixed class |
| #4426 | Categories in Hierarchical Order | 97 | 1 | 5 | 2k+ | | | Non-prefixed function |
| #4427 | Category Icon | 100 | | 1 | 2k+ | | | Non-prefixed class |
| #4428 | Category Posts in Custom Menu | 49 | 19 | 18 | 2k+ | | | Output is not escaped |
| #4429 | CDEKDelivery | 46 | | 75 | 2k+ | | | Nonce verification recommended |
| #4430 | CF7 Google Captcha Load After Page | 87 | 7 | 2 | 2k+ | | | Output is not escaped |
| #4431 | Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms | 29 | 236 | 369 | 2k+ | | | Non-prefixed global variable |
| #4432 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #4433 | UniqueID for Contact Form 7 | 64 | 21 | 18 | 2k+ | | | Text Domain Mismatch |
| #4434 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #4435 | Popup for CF7 with Sweet Alert | 35 | 26 | 12 | 2k+ | | | Text Domain Mismatch |
| #4436 | Change Text Case | 92 | 4 | 1 | 2k+ | | | Missing Arg Domain |
| #4437 | Chaport — Live Chat & Chatbots | 98 | 5 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #4438 | Checkfront Online Booking System | 70 | 32 | 16 | 2k+ | | | wp function not compatible with requires wp |
| #4439 | Christmasify! | 63 | 18 | 7 | 2k+ | | | Output is not escaped |
| #4440 | Civic Cookie Control | 33 | 1,881 | 219 | 2k+ | | | Text Domain Mismatch |
| #4441 | Clarity – Ad blocker for WordPress | 89 | 5 | 19 | 2k+ | | | Non-prefixed hook name |
| #4442 | Classic Menu in Navigation Block | 99 | 1 | 3 | 2k+ | | | Non-prefixed class |
| #4443 | Classic Text Widget | 63 | 25 | 1 | 2k+ | | | Output is not escaped |
| #4444 | Cleaner Gallery | 40 | 40 | 8 | 2k+ | | | Unsafe printing function |
| #4445 | Clear Floats Button | 98 | 3 | 1 | 2k+ | | | Missing direct file access protection |
| #4446 | Newsletter Sign-Up for CleverReach | 31 | 174 | 72 | 2k+ | | | Output is not escaped |
| #4447 | Click to top | 72 | 22 | 8 | 2k+ | | | Output is not escaped |
| #4448 | Click To Tweet | 87 | 8 | 7 | 2k+ | | | trademarked term |
| #4449 | Cliengo – Chatbot | 91 | 4 | 7 | 2k+ | | | Input is not sanitized |
| #4450 | Clover Payments for WooCommerce | 42 | 25 | 15 | 2k+ | | | Exception output is not escaped |