| #4951 | TW Pagination | 41 | 90 | 23 | 1k+ | | | Non Singular String Literal Domain |
| #4952 | TagPages | 76 | 13 | 4 | 1k+ | | | Missing Arg Domain |
| #4953 | Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution | 25 | 173 | 726 | 1k+ | | | Non-prefixed global variable |
| #4954 | Bop Search Box Item Type For Nav Menus | 41 | 52 | 14 | 1k+ | | | Output is not escaped |
| #4955 | Flexible Subscriptions | 35 | 46 | 249 | 1k+ | | | Non-prefixed global variable |
| #4956 | I Order Terms | 44 | 40 | 24 | 1k+ | | | Output is not escaped |
| #4957 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #4958 | History Timeline for Biography, Company History & Event Timeline | 78 | 29 | 37 | 1k+ | | | Non-prefixed global variable |
| #4959 | Permissions Editor for Ninja Forms | 35 | 29 | 6 | 1k+ | | | Output is not escaped |
| #4960 | 果果推送 | 37 | 31 | 56 | 1k+ | | | Nonce verification recommended |
| #4961 | Collapsed Archives | 41 | 54 | 4 | 1k+ | | | Output is not escaped |
| #4962 | Advanced Category and Custom Taxonomy Image | 100 | | 2 | 1k+ | | | Non-prefixed class |
| #4963 | ChatBot Conversational AI Support | 41 | 72 | 32 | 1k+ | | | Short PHP open tag found |
| #4964 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | | | Output is not escaped |
| #4965 | Masonry Image Gallery Block | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4966 | WP SendFox | 34 | 296 | 118 | 1k+ | | | Text Domain Mismatch |
| #4967 | Add Featured Image Custom Link | 89 | 3 | 6 | 1k+ | | | Request data is not unslashed |
| #4968 | Fan Page Widget by ThemeNcode | 40 | 108 | 3 | 1k+ | | | Output is not escaped |
| #4969 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #4970 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #4971 | Evermore | 64 | 8 | 12 | 1k+ | | | Input is not validated |
| #4972 | EasyIndex | 34 | 74 | 135 | 1k+ | | | Missing nonce verification |
| #4973 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |
| #4974 | Classic Visual Editor Options | 100 | | 0 | 1k+ | | | No open findings |
| #4975 | Social Media Icons Widget | 72 | 181 | 10 | 1k+ | | | badly named files |
| #4976 | Disable Thumbnails, Threshold and Image Options | 99 | 1 | 1 | 1k+ | | | outdated tested upto header |
| #4977 | Marijuana Age Verify | 23 | 1,154 | 2,630 | 1k+ | | | Non-prefixed global variable |
| #4978 | Russian Post and EMS for WooCommerce | 68 | 16 | 47 | 1k+ | | | Non-prefixed global variable |
| #4979 | Check Conflicts | 83 | 36 | 12 | 1k+ | | | Missing Arg Domain |
| #4980 | Manual Related Posts | 40 | 51 | 32 | 1k+ | | | Output is not escaped |
| #4981 | Tab Ultimate | 34 | 107 | 138 | 1k+ | | | Output is not escaped |
| #4982 | Gutena Star Ratings | 97 | 6 | 1 | 1k+ | | | Missing Arg Domain |
| #4983 | ONTRApages | 53 | 16 | 27 | 1k+ | | | Output is not escaped |
| #4984 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #4985 | Razorpay Payment Button Elementor Plugin | 20 | 479 | 62 | 1k+ | | | Exception output is not escaped |
| #4986 | Automatic image ALT attributes | 98 | 4 | 0 | 1k+ | | | Missing direct file access protection |
| #4987 | Clio Grow Form | 91 | 179 | 19 | 1k+ | | | Text Domain Mismatch |
| #4988 | Download Media Library | 49 | 22 | 40 | 1k+ | | | Text Domain Mismatch |
| #4989 | PhotoSwipe | 92 | 4 | 9 | 1k+ | | | Not In Footer |
| #4990 | Smart Maintenance Mode | 38 | 137 | 128 | 1k+ | | | Output is not escaped |
| #4991 | WC Builder – WooCommerce Page Builder for WPBakery | 36 | 647 | 50 | 1k+ | | | Text Domain Mismatch |
| #4992 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 47 | 5 | 58 | 1k+ | | | Interpolated SQL is not prepared |
| #4993 | WPBakery Page Builder Simple All Responsive | 88 | 4 | 6 | 1k+ | | | Missing direct file access protection |
| #4994 | MomentoPress for Momento360 | 98 | 2 | 3 | 1k+ | | | Missing Version |
| #4995 | Bradmax Player | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4996 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | | | Direct Query |
| #4997 | AffiliateWP – Leaderboard | 49 | 68 | 13 | 1k+ | | | Output is not escaped |
| #4998 | HTTP Security Header | 99 | 1 | 1 | 1k+ | | | Discouraged text-domain loading |
| #4999 | Accordion Slider Gallery | 29 | 379 | 142 | 1k+ | | | Text Domain Mismatch |
| #5000 | Related Products Manager for WooCommerce | 79 | 9 | 43 | 1k+ | | | Non-prefixed global variable |