| #4051 | Blog-in-Blog | 34 | 64 | 93 | 800 | | | Non-prefixed function |
| #4052 | Set Price Note (Units, Offers, Editions) for WooCommerce | 26 | 596 | 1,307 | 800 | | | Non-prefixed global variable |
| #4053 | Append extensions on Pages | 84 | 7 | 3 | 800 | | | Missing direct file access protection |
| #4054 | Social Shop for WooCommerce | 38 | 51 | 24 | 800 | | | Output is not escaped |
| #4055 | Clean My Archives | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #4056 | Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft | 29 | 487 | 262 | 800 | | | Text Domain Mismatch |
| #4057 | Contact Form 7 Get and Show Parameter from URL | 79 | 3 | 10 | 800 | | | Input is not sanitized |
| #4058 | htaccess protect | 39 | 28 | 33 | 800 | | | Input is not validated |
| #4059 | Property Hive Stamp Duty Calculator | 72 | 39 | 2 | 800 | | | Text Domain Mismatch |
| #4060 | Meteo | 50 | 58 | 9 | 800 | | | Output is not escaped |
| #4061 | Gutena Team – Team Slider and Grid | 97 | 6 | 2 | 800 | | | Missing Arg Domain |
| #4062 | Logo Switcher | 68 | 14 | 2 | 800 | | | Output is not escaped |
| #4063 | Expiring Posts | 40 | 52 | 20 | 900 | | | Missing Arg Domain |
| #4064 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #4065 | snappify | 99 | 1 | 1 | 800 | | | outdated tested upto header |
| #4066 | Blank | 96 | 6 | 0 | 900 | | | Missing direct file access protection |
| #4067 | 코드엠샵 마이사이트 – MSHOP MY SITE | 36 | 58 | 55 | 800 | | | Output is not escaped |
| #4068 | Taxonomy Filter | 41 | 143 | 40 | 800 | | | Output is not escaped |
| #4069 | SiteNarrator Text-to-Speech Widget | 82 | 12 | 4 | 800 | | | Output is not escaped |
| #4070 | Reading Position Indicator | 90 | 2 | 23 | 800 | | | Dynamic hook name |
| #4071 | Disable Block Editor | 98 | 3 | 1 | 800 | | | Missing direct file access protection |
| #4072 | Educare – Students & Result Management System | 28 | 1,114 | 1,043 | 800 | | | Missing nonce verification |
| #4073 | TOCHAT.BE | 73 | 2 | 71 | 800 | | | Request data is not unslashed |
| #4074 | CBX User Online & Last Login | 86 | 3 | 87 | 800 | | | Non-prefixed global variable |
| #4075 | Hide Price Until User Login For Woocommerce | 99 | 1 | 1 | 800 | | | Discouraged text-domain loading |
| #4076 | RT Slider | 89 | 9 | 2 | 800 | | | Missing direct file access protection |
| #4077 | Auto Post Expiration | 81 | 12 | 4 | 800 | | | Text Domain Mismatch |
| #4078 | WP Flow Plus | 37 | 175 | 146 | 800 | | | Output is not escaped |
| #4079 | Bus Ticket Booking with Seat Reservation | 36 | 145 | 192 | 800 | | | Non-prefixed global variable |
| #4080 | Offcanvas Mobile Menu | 80 | 22 | 7 | 800 | | | Missing direct file access protection |
| #4081 | WP Minify Fix | 20 | 306 | 380 | 800 | | | Output is not escaped |
| #4082 | Send Emails with Resend | 93 | 3 | 0 | 900 | | | Setting is missing a sanitization callback |
| #4083 | Disable Admin Bar | 96 | 5 | 1 | 800 | | | Missing direct file access protection |
| #4084 | Agreeable | 37 | 40 | 67 | 800 | | | Unsafe printing function |
| #4085 | WP Counter | 36 | 86 | 43 | 800 | | | Output is not escaped |
| #4086 | Inactive User Deleter | 33 | 453 | 170 | 800 | | | Output is not escaped |
| #4087 | Shortcode Empty Paragraph Fix | 97 | 4 | 0 | 800 | | | Missing direct file access protection |
| #4088 | Яндекс.ПДС Пингер / Yandex Site search pinger | 64 | 21 | 5 | 800 | | | Output is not escaped |
| #4089 | UltraPress – AI Assistant, Chatbot & SEO | 59 | 12 | 38 | 800 | | | Non-prefixed global variable |
| #4090 | Mass Email To Users | 40 | 84 | 81 | 800 | | | Output is not escaped |
| #4091 | Country Access Blocker | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4092 | Admin Dashboard Last Edits | 91 | 5 | 0 | 800 | | | Missing Translators Comment |
| #4093 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | | | Text Domain Mismatch |
| #4094 | Animation Builder – An interface for adding scroll-triggered animations | 43 | 7 | 67 | 800 | | | Missing Version |
| #4095 | Advanced Custom Fields: Accordion Tab Field | 74 | 14 | 11 | 800 | | | Missing Version |
| #4096 | ElasticPress Debugging Add-On | 98 | 2 | 10 | 800 | | | Non-prefixed hook name |
| #4097 | Force Email Login | 35 | 5 | 0 | 800 | | | Hidden files included |
| #4098 | ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators | 70 | 9 | 12 | 800 | | | Output is not escaped |
| #4099 | Advanced Custom Fields: Archive Templates | 74 | 11 | 7 | 800 | | | Output is not escaped |
| #4100 | WP Bannerize Pro | 32 | 281 | 216 | 800 | | | Text Domain Mismatch |