| #4001 | APG Google Video Sitemap Feed | 34 | 96 | 45 | 800 | | | Output is not escaped |
| #4002 | Skimlinks Affiliate Marketing Tool | 37 | 84 | 19 | 800 | | | wp function not compatible with requires wp |
| #4003 | WPReplace内容字符替换插件 | 33 | 209 | 195 | 800 | | | Non Singular String Literal Domain |
| #4004 | Currency Switcher for WooCommerce | 35 | 166 | 61 | 800 | | | Text Domain Mismatch |
| #4005 | Gravity Forms Approvals Add-On | 59 | 17 | 6 | 800 | | | Output is not escaped |
| #4006 | Alt Text Tools | 94 | 1 | 1 | 800 | | | Not In Footer |
| #4007 | Hide Prices for WooCommerce | 98 | 4 | 3 | 800 | | | Missing direct file access protection |
| #4008 | WP Resized Image Quality | 54 | 19 | 9 | 800 | | | Output is not escaped |
| #4009 | Multiple Form Instances Add-on for Gravity Forms | 82 | 5 | 5 | 800 | | | Missing direct file access protection |
| #4010 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,844 | 800 | | | Non-prefixed global variable |
| #4011 | CC BMI Calculator | 40 | 135 | 7 | 800 | | | Output is not escaped |
| #4012 | Shipping Zone Duplicator for WooCommerce | 77 | 10 | 14 | 800 | | | Nonce verification recommended |
| #4013 | Quform Mailchimp | 39 | 65 | 147 | 800 | | | Nonce verification recommended |
| #4014 | Feedback Company | 41 | 63 | 36 | 800 | | | Output is not escaped |
| #4015 | Online Contact Widget-多合一在线客服插件 | 26 | 708 | 80 | 800 | | | Non Singular String Literal Domain |
| #4016 | Plugin de Clip para WooCommerce | 93 | 13 | 29 | 800 | | | Non-prefixed global variable |
| #4017 | Visibility Controls for Editor Blocks | 100 | 1 | 1 | 900 | | | Discouraged text-domain loading |
| #4018 | iFrame Block | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #4019 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #4020 | Application Passwords Enable | 100 | 1 | 0 | 800 | | | invalid tested upto minor |
| #4021 | Coinbase Business Gateway for WooCommerce | 25 | 569 | 1,317 | 800 | | | Non-prefixed global variable |
| #4022 | Location Pack for WooCommerce | 89 | | 14 | 800 | | | Non-prefixed global variable |
| #4023 | Expand + Collapse Funk | 96 | 8 | 5 | 800 | | | Missing Arg Domain |
| #4024 | User Notes | 100 | 1 | 0 | 800 | | | Missing Translators Comment |
| #4025 | External Links Overview | 35 | 57 | 200 | 800 | | | Non-prefixed global variable |
| #4026 | Antideo Email Validator | 35 | 38 | 98 | 800 | | | Missing nonce verification |
| #4027 | LH Agree to Terms | 41 | 59 | 32 | 800 | | | Output is not escaped |
| #4028 | Service Showcase | 41 | 41 | 597 | 800 | | | Non-prefixed global variable |
| #4029 | ELEX WooCommerce Dynamic Pricing and Discounts | 25 | 478 | 748 | 800 | | | Text Domain Mismatch |
| #4030 | Fullscreen Galleria | 52 | 37 | 10 | 800 | | | Output is not escaped |
| #4031 | Flodesk for Elementor Pro | 90 | 3 | 0 | 800 | | | Exception output is not escaped |
| #4032 | Bulk Actions Select All | 53 | 26 | 22 | 800 | | | Text Domain Mismatch |
| #4033 | WP Delete User Accounts | 80 | 10 | 7 | 800 | | | Missing direct file access protection |
| #4034 | WP Post Disclaimer | 49 | 34 | 27 | 800 | | | Output is not escaped |
| #4035 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | | | Output is not escaped |
| #4036 | Block Comment Spam Bots | 35 | 31 | 17 | 800 | | | Output is not escaped |
| #4037 | Simple Mastodon Verification | 99 | 1 | 0 | 800 | | | outdated tested upto header |
| #4038 | Organic Widget Area Block | 94 | 5 | 4 | 800 | | | Text Domain Mismatch |
| #4039 | ShinyStat Widget | 72 | 14 | 2 | 800 | | | Output is not escaped |
| #4040 | Admin Sticky Sidebar | 98 | 2 | 3 | 800 | | | Missing direct file access protection |
| #4041 | WPThumb | 70 | 30 | 9 | 800 | | | Output is not escaped |
| #4042 | Phone Validator with Flags for WooCommerce | 92 | 3 | 2 | 900 | | | badly named files |
| #4043 | Blog-in-Blog | 34 | 64 | 93 | 800 | | | Non-prefixed function |
| #4044 | Set Price Note (Units, Offers, Editions) for WooCommerce | 26 | 596 | 1,307 | 800 | | | Non-prefixed global variable |
| #4045 | Append extensions on Pages | 84 | 7 | 3 | 800 | | | Missing direct file access protection |
| #4046 | Social Shop for WooCommerce | 38 | 51 | 24 | 800 | | | Output is not escaped |
| #4047 | Clean My Archives | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #4048 | Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft | 29 | 487 | 262 | 800 | | | Text Domain Mismatch |
| #4049 | Contact Form 7 Get and Show Parameter from URL | 79 | 3 | 10 | 800 | | | Input is not sanitized |
| #4050 | htaccess protect | 39 | 28 | 33 | 800 | | | Input is not validated |
