| #3901 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #3902 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | | | curl curl setopt |
| #3903 | Sharing buttons shortcode for Jetpack | 98 | 3 | 2 | 800 | | | Missing direct file access protection |
| #3904 | Animation Pack | 99 | 1 | 6 | 800 | | | Non-prefixed hook name |
| #3905 | JJ NextGen JQuery Slider | 39 | 221 | 7 | 800 | | | Output is not escaped |
| #3906 | Omnipress | 24 | 169 | 245 | 800 | | | Non-prefixed global variable |
| #3907 | GamiPress – Link | 61 | 32 | 5 | 800 | | | Output is not escaped |
| #3908 | TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More | 37 | 878 | 59 | 800 | | | Output is not escaped |
| #3909 | Include Mastodon Feed | 90 | 11 | 3 | 800 | | | Non-prefixed global variable |
| #3910 | Before After Image | 99 | | 5 | 900 | | | Non-prefixed constant |
| #3911 | Ozow Gateway for WooCommerce | 97 | 2 | 10 | 800 | | | Non-prefixed constant |
| #3912 | Easy WP Page Navigation | 52 | 60 | 8 | 800 | | | Non Singular String Literal Domain |
| #3913 | Product Notices for WooCommerce | 97 | 130 | 2 | 800 | | | Text Domain Mismatch |
| #3914 | Query Posts | 63 | 53 | 6 | 800 | | | Output is not escaped |
| #3915 | Star Rating Field For Contact Form 7 | 51 | 36 | 7 | 800 | | | Output is not escaped |
| #3916 | Storefront Add Slider | 92 | 11 | 1 | 800 | | | Text Domain Mismatch |
| #3917 | Sendle Shipping Plugin | 37 | 91 | 64 | 800 | | | wp function not compatible with requires wp |
| #3918 | Gutena Recent Post Custom Tag | 97 | 7 | 2 | 800 | | | Missing Arg Domain |
| #3919 | Monster Widget | 98 | 3 | 4 | 800 | | | Non-prefixed hook name |
| #3920 | Bulk Featured Image | 40 | 69 | 117 | 800 | | | Output is not escaped |
| #3921 | WP Router | 41 | 29 | 13 | 800 | | | Exception output is not escaped |
| #3922 | MyWorks Sync for WooCommerce & Xero | 29 | 1 | 1,080 | 800 | | | Non-prefixed global variable |
| #3923 | Schema Default Image | 96 | 5 | 4 | 800 | | | Deprecated parameter: load_plugin_textdomain parameter 2 |
| #3924 | qTranslate X Cleanup and WPML Import | 38 | 167 | 102 | 800 | | | Text Domain Mismatch |
| #3925 | whatwedo ACF Cleaner | 61 | 8 | 20 | 800 | | | Input is not validated |
| #3926 | Recurring PayPal Donations | 41 | 48 | 47 | 800 | | | Text Domain Mismatch |
| #3927 | Custom Post Type Attachment | 34 | 153 | 49 | 800 | | | wp function not compatible with requires wp |
| #3928 | WC Search Orders By Product | 40 | 47 | 66 | 800 | | | Nonce verification recommended |
| #3929 | BuddyCommerce: WooCommerce and BuddyPress Integration | 56 | 29 | 19 | 800 | | | Output is not escaped |
| #3930 | Super List Block | 99 | 3 | 0 | 800 | | | Missing direct file access protection |
| #3931 | Last Updated Shortcode | 97 | 3 | 4 | 800 | | | Non-prefixed global variable |
| #3932 | WP Widget Clipboard – Duplicate widgets intuitively | 42 | 51 | 19 | 800 | | | Output is not escaped |
| #3933 | PE Easy Slider | 42 | 190 | 10 | 800 | | | Output is not escaped |
| #3934 | Mu Manager – Manage mu-plugins like standard plugins | 80 | 21 | 18 | 800 | | | Missing Arg Domain |
| #3935 | Recent Posts FlexSlider | 81 | 13 | 1 | 800 | | | Output is not escaped |
| #3936 | BuddyPress Edit Activity | 41 | 28 | 26 | 800 | | | Output is not escaped |
| #3937 | JetHost Total Care – Security & Enhancements | 45 | 10 | 85 | 800 | | | Direct Query |
| #3938 | Order Limit For WooCommerce ( Free Version ) | 100 | | 1 | 800 | | | trademarked term |
| #3939 | Simple Statistics for Feeds | 40 | 64 | 131 | 800 | | | Nonce verification recommended |
| #3940 | Eway Payment Gateway | 30 | 509 | 92 | 800 | | | Missing Translators Comment |
| #3941 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | | | Unsafe printing function |
| #3942 | WP Sanitize Accented Uploads | 68 | 15 | 16 | 800 | | | Quoted Simple Placeholder |
| #3943 | Black Widgets For Elementor | 36 | 2,608 | 19 | 800 | | | Text Domain Mismatch |
| #3944 | Advanced Custom Fields: reCAPTCHA Field | 34 | 104 | 53 | 800 | | | Text Domain Mismatch |
| #3945 | Tiempo | 50 | 53 | 8 | 800 | | | Output is not escaped |
| #3946 | Logo Carousel – Display Brand or Client Logos in Slider | 38 | 524 | 42 | 800 | | | Output is not escaped |
| #3947 | Datawrapper oEmbed | 98 | 3 | 0 | 800 | | | Missing direct file access protection |
| #3948 | REST API Custom Fields | 40 | 44 | 16 | 800 | | | Text Domain Mismatch |
| #3949 | Username | 77 | 5 | 8 | 700 | | | Deprecated function: screen_icon |
| #3950 | LH Copy Media File | 89 | 21 | 5 | 800 | | | wp function not compatible with requires wp |