| #4101 | Mass Email To Users | 40 | 84 | 81 | 800 | | | Output is not escaped |
| #4102 | Country Access Blocker | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4103 | Admin Dashboard Last Edits | 91 | 5 | 0 | 800 | | | Missing Translators Comment |
| #4104 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | | | Text Domain Mismatch |
| #4105 | Animation Builder – An interface for adding scroll-triggered animations | 43 | 7 | 67 | 800 | | | Missing Version |
| #4106 | Advanced Custom Fields: Accordion Tab Field | 74 | 14 | 11 | 800 | | | Missing Version |
| #4107 | ElasticPress Debugging Add-On | 98 | 2 | 10 | 800 | | | Non-prefixed hook name |
| #4108 | Force Email Login | 35 | 5 | 0 | 800 | | | Hidden files included |
| #4109 | ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators | 70 | 9 | 12 | 800 | | | Output is not escaped |
| #4110 | Advanced Custom Fields: Archive Templates | 74 | 11 | 7 | 800 | | | Output is not escaped |
| #4111 | WP Bannerize Pro | 32 | 281 | 216 | 800 | | | Text Domain Mismatch |
| #4112 | Gutena PhotoFeed | 97 | 8 | 2 | 800 | | | Missing Arg Domain |
| #4113 | Sales Tax Reports For WooCommerce | 40 | 50 | 65 | 900 | | | Output is not escaped |
| #4114 | Geo Blocker – Control Site Access by Region and IP | 42 | 10 | 64 | 1k+ | | | Direct Query |
| #4115 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | | | Unsafe printing function |
| #4116 | پلاگین پرداخت دلخواه | 20 | 584 | 446 | 900 | | | Text Domain Mismatch |
| #4117 | X Addons for Elementor | 99 | 2 | 0 | 900 | | | Missing direct file access protection |
| #4118 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | | | Output is not escaped |
| #4119 | WEN Responsive Columns | 78 | 13 | 6 | 800 | | | Unsafe printing function |
| #4120 | Country Dropdown For Contact Form 7 | 85 | 17 | 4 | 800 | | | Text Domain Mismatch |
| #4121 | JSM Show Term Metadata | 40 | 14 | 64 | 800 | | | Nonce verification recommended |
| #4122 | Ultimate Fields | 23 | 371 | 458 | 600 | | | Alternative PHP tag found |
| #4123 | ForumWP – Forum & Discussion Board | 82 | 22 | 444 | 800 | | | Non-prefixed global variable |
| #4124 | Featured Image in Content | 98 | 3 | 1 | 700 | | | Missing direct file access protection |
| #4125 | Payment Gateway for PhonePe and for Woocommerce | 69 | 15 | 14 | 900 | | | Non Singular String Literal Domain |
| #4126 | Customizer for WooCommerce | 72 | 10 | 13 | 800 | | | Nonce verification recommended |
| #4127 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #4128 | XT Event Widget for Social Events | 35 | 3 | 55 | 800 | | | Non-prefixed global variable |
| #4129 | CPS | Age Verification | 40 | 127 | 35 | 800 | | | Unsafe printing function |
| #4130 | Order Tracker for WooCommerce – Track Customer Order | 99 | 1 | 1 | 900 | | | outdated tested upto header |
| #4131 | Nice Search | 81 | 4 | 5 | 900 | | | Input is not sanitized |
| #4132 | CodePen Embedded Pens Shortcode | 97 | 17 | 0 | 800 | | | wp function not compatible with requires wp |
| #4133 | WP Revisions Limit | 74 | 16 | 14 | 800 | | | Missing Arg Domain |
| #4134 | Insert Code by Angie Makes | 51 | 43 | 8 | 900 | | | Output is not escaped |
| #4135 | SVG Icon Block | 99 | 2 | 0 | 900 | | | wp function not compatible with requires wp |
| #4136 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #4137 | GPX Viewer | 71 | 10 | 26 | 900 | | | Missing Version |
| #4138 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | | | Non Singular String Literal Domain |
| #4139 | wpuntexturize | 98 | 1 | 6 | 900 | | | trademarked term |
| #4140 | OffCanvas / Drawer – Responsive Slide-In Drawer & Popup System | 92 | 6 | 2 | 900 | | | Missing direct file access protection |
| #4141 | WooCommerce New Product Badge | 91 | 8 | 8 | 800 | | | Text Domain Mismatch |
| #4142 | Custom Post Type Sticky | 93 | 10 | 6 | 800 | | | Text Domain Mismatch |
| #4143 | Freshdesk (official) | 23 | 194 | 386 | 800 | | | Non-prefixed function |
| #4144 | Remove Image Links | 91 | 5 | 10 | 800 | | | Non-prefixed function |
| #4145 | Echelon Widgets for SiteOrigin | 33 | 667 | 5 | 800 | | | Output is not escaped |
| #4146 | CashBill.pl – Płatności WooCommerce | 31 | 181 | 101 | 900 | | | Output is not escaped |
| #4147 | Wishlist for WooCommerce | 98 | 2 | 10 | 900 | | | Non-prefixed constant |
| #4148 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 800 | | | Non-prefixed global variable |
| #4149 | Requirements Checklist | 40 | 200 | 22 | 900 | | | Output is not escaped |
| #4150 | ELEX WooCommerce USPS Shipping Method | 74 | 139 | 45 | 900 | | | Text Domain Mismatch |