| #4451 | Cognito Forms | 75 | 13 | 4 | 2k+ | | | wp function not compatible with requires wp |
| #4452 | Color Mobile Browser Address Bar | 88 | 5 | 0 | 2k+ | | | Output is not escaped |
| #4453 | Colorful Categories | 41 | 20 | 20 | 2k+ | | | Output is not escaped |
| #4454 | Comfortable Reading | 71 | 16 | 8 | 2k+ | | | Output is not escaped |
| #4455 | Comment Form Js Validation | 70 | 23 | 8 | 2k+ | | | Missing Arg Domain |
| #4456 | Comments Form Star Rating Plugin for WordPress | 84 | 3 | 10 | 2k+ | | | Missing nonce verification |
| #4457 | Comments Import & Export | 85 | 112 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #4458 | Compact Archives | 90 | 8 | 14 | 2k+ | | | Non-prefixed function |
| #4459 | Comunas de Chile para WooCommerce | 90 | 5 | 6 | 2k+ | | | trademarked term |
| #4460 | Conditional Blocks – Advanced Content Visibility Control for WordPress | 90 | 10 | 22 | 2k+ | | | Missing direct file access protection |
| #4461 | PiWeb Conditional cart fee / Extra charge rule for WooCommerce | 37 | 164 | 214 | 2k+ | | | Text Domain Mismatch |
| #4462 | Conditional Logic Emails, Fields, Redirect for Elementor Forms | 75 | 312 | 31 | 2k+ | | | wp function not compatible with requires wp |
| #4463 | Conekta Payment Gateway | 33 | 240 | 61 | 2k+ | | | Text Domain Mismatch |
| #4464 | Configurable Tag Cloud (CTC) | 39 | 126 | 121 | 2k+ | | | Output is not escaped |
| #4465 | Connector GravityForms and MailerLite | 91 | 8 | 2 | 2k+ | | | Missing Translators Comment |
| #4466 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #4467 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | | | Text Domain Mismatch |
| #4468 | Contact Form 7 Widget | 41 | 70 | 4 | 2k+ | | | Output is not escaped |
| #4469 | Contact Form Plugin | 33 | 47 | 220 | 2k+ | | | Non-prefixed function |
| #4470 | Content Update Scheduler | 89 | 2 | 17 | 2k+ | | | Non-prefixed global variable |
| #4471 | Content Visibility for Divi Builder | 39 | 184 | 59 | 2k+ | | | Non Singular String Literal Domain |
| #4472 | ContentProtector – password protect your page, post or text | 95 | 1 | 3 | 2k+ | | | Non-prefixed class |
| #4473 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #4474 | Convert to Blocks | 89 | 2 | 11 | 2k+ | | | Non-prefixed hook name |
| #4475 | Cookie Information – Cookie Banner with Consent Mode v2 | 35 | 185 | 28 | 2k+ | | | Output is not escaped |
| #4476 | Cookie Law Bar | 45 | 29 | 20 | 2k+ | | | Output is not escaped |
| #4477 | CoolClock – a Javascript Analog Clock | 79 | 21 | 9 | 2k+ | | | Output is not escaped |
| #4478 | Countdown Timer Block – Animated Countdown for Events or Launches | 100 | | 1 | 2k+ | | | mismatched plugin name |
| #4479 | Counting Number Block | 100 | | 0 | 2k+ | | | No open findings |
| #4480 | Custom Post Type Editor | 98 | 4 | 2 | 2k+ | | | Missing direct file access protection |
| #4481 | Creativ Demo Importer | 98 | | 42 | 2k+ | | | Non-prefixed global variable |
| #4482 | Cresta Social Share Counter | 57 | 12 | 13 | 2k+ | | | Output is not escaped |
| #4483 | CrowdSec | 35 | 130 | 119 | 2k+ | | | Output is not escaped |
| #4484 | Content Security Policy Manager | 68 | 19 | 2 | 2k+ | | | Output is not escaped |
| #4485 | CSSIgniter Shortcodes | 58 | 55 | 2 | 2k+ | | | Output is not escaped |
| #4486 | Cloudflare SSL by Weslink | 90 | 3 | 7 | 2k+ | | | trademarked term |
| #4487 | Curator.io | 91 | 3 | 9 | 2k+ | | | Nonce verification recommended |
| #4488 | Currency per Product for WooCommerce | 35 | 46 | 24 | 2k+ | | | Text Domain Mismatch |
| #4489 | Current Menu Item for Custom Post Types | 48 | 18 | 30 | 2k+ | | | Non-prefixed global variable |
| #4490 | Custom Archive Titles | 69 | 39 | 4 | 2k+ | | | Output is not escaped |
| #4491 | Custom Category Template | 69 | 13 | 8 | 2k+ | | | Missing Arg Domain |
| #4492 | Custom Classes | 85 | 5 | 8 | 2k+ | | | Request data is not unslashed |
| #4493 | Custom Currency for WooCommerce | 70 | 63 | 5 | 2k+ | | | Missing direct file access protection |
| #4494 | Additional Custom Emails & Recipients for WooCommerce | 35 | 1 | 0 | 2k+ | | | Hidden files included |
| #4495 | Custom field finder | 75 | 9 | 3 | 2k+ | | | Output is not escaped |
| #4496 | Custom Login Logo – Easily Add a Logo to Your WordPress Login Page | 99 | 1 | 2 | 2k+ | | | mismatched plugin name |
| #4497 | Custom Login Page Templates – Change Logo, Background and CSS | 66 | 25 | 5 | 2k+ | | | Missing Arg Domain |
| #4498 | Custom Menu Wizard Widget | 38 | 326 | 30 | 2k+ | | | Output is not escaped |
| #4499 | Custom Header Footer Scripts for Customizer | 88 | 6 | 5 | 2k+ | | | Non-prefixed function |
| #4500 | Custom Scrollbar | 27 | 184 | 191 | 2k+ | | | Output is not escaped |