| #4151 | Freshdesk (official) | 23 | 194 | 386 | 800 | | | Non-prefixed function |
| #4152 | Remove Image Links | 91 | 5 | 10 | 800 | | | Non-prefixed function |
| #4153 | Echelon Widgets for SiteOrigin | 33 | 667 | 5 | 800 | | | Output is not escaped |
| #4154 | CashBill.pl – Płatności WooCommerce | 31 | 181 | 101 | 900 | | | Output is not escaped |
| #4155 | Wishlist for WooCommerce | 98 | 2 | 10 | 900 | | | Non-prefixed constant |
| #4156 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 800 | | | Non-prefixed global variable |
| #4157 | Requirements Checklist | 40 | 200 | 22 | 900 | | | Output is not escaped |
| #4158 | ELEX WooCommerce USPS Shipping Method | 74 | 139 | 45 | 900 | | | Text Domain Mismatch |
| #4159 | Weight/Country Shipping for WooCommerce | 79 | 10 | 2 | 900 | | | Unsafe printing function |
| #4160 | Sticky Floating Button (Book Now, Contact, Call To Action…) | 42 | 95 | 26 | 900 | | | Missing Arg Domain |
| #4161 | Quick Edit Yoast SEO | 80 | 5 | 12 | 900 | | | Request data is not unslashed |
| #4162 | Backup Bolt | 22 | 580 | 1,313 | 800 | | | Non-prefixed global variable |
| #4163 | MS Custom Login | 41 | 117 | 6 | 900 | | | Unsafe printing function |
| #4164 | The School Management – Education & Learning ERP | 25 | 1 | 2,858 | 800 | | | Non-prefixed global variable |
| #4165 | Mighty Pros & Cons | 35 | 12 | 6 | 800 | | | Text Domain Mismatch |
| #4166 | Mass Delete Unused Tags | 42 | 21 | 9 | 800 | | | Output is not escaped |
| #4167 | Device Mockups | 97 | 7 | 3 | 900 | | | Missing direct file access protection |
| #4168 | Stockdio Historical Chart | 39 | 65 | 16 | 800 | | | Output is not escaped |
| #4169 | Featured Post | 40 | 36 | 18 | 800 | | | Output is not escaped |
| #4170 | Current Year Shortcode VICT | 100 | | 0 | 900 | | | No open findings |
| #4171 | Contact Form 7 styler for Elementor Page Builder | 40 | 126 | 10 | 900 | | | Unsafe printing function |
| #4172 | Tooltip for Gravity Forms | 96 | 23 | 10 | 900 | | | Text Domain Mismatch |
| #4173 | Custom Dashboard Help Widget | 44 | 73 | 12 | 800 | | | Output is not escaped |
| #4174 | Propovoice: All-in-One Client Management System | 92 | 13 | 41 | 800 | | | Non-prefixed global variable |
| #4175 | SiteEase Bulk Delete Manager | 49 | 50 | 72 | 900 | | | Direct Query |
| #4176 | BinancePay Checkout for WooCommerce | 84 | 5 | 14 | 800 | | | Input is not validated |
| #4177 | Validate Audio Attribution | 99 | 2 | 0 | 900 | | | Missing direct file access protection |
| #4178 | CBX Map for Google Map & OpenStreetMap | 99 | 2 | 0 | 900 | | | Missing direct file access protection |
| #4179 | WP Core Update Cleaner | 98 | 1 | 5 | 900 | | | trademarked term |
| #4180 | DarkLooks – Dark Mode Switcher For WordPress | 35 | 195 | 21 | 900 | | | Text Domain Mismatch |
| #4181 | QR Code Creator | 98 | 1 | 3 | 900 | | | Non-prefixed class |
| #4182 | Bulk Post Importer | 84 | 1 | 38 | 800 | | | Missing nonce verification |
| #4183 | Multipage | 40 | 72 | 28 | 900 | | | Unsafe printing function |
| #4184 | Robots.txt Quick Editor | 94 | 1 | 4 | 900 | | | Request data is not unslashed |
| #4185 | Video Embedder | 97 | 16 | 1 | 800 | | | wp function not compatible with requires wp |
| #4186 | Remove Broken Images | 100 | 1 | 0 | 900 | | | wp function not compatible with requires wp |
| #4187 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |
| #4188 | GM Block Bots | 92 | 1 | 3 | 800 | | | Input is not sanitized |
| #4189 | Wishlist for WooCommerce | 99 | 2 | 1 | 900 | | | wp function not compatible with requires wp |
| #4190 | Simple HTTPS Redirect | 64 | 19 | 5 | 900 | | | Output is not escaped |
| #4191 | Snapchat Pixel for WooCommerce | 98 | 2 | 1 | 800 | | | outdated tested upto header |
| #4192 | Variation Price Display For WooCommerce | 77 | 87 | 16 | 900 | | | Text Domain Mismatch |
| #4193 | BeyondWords – Text-to-Speech | 99 | 2 | 0 | 800 | | | outdated tested upto header |
| #4194 | Cache External Scripts | 76 | 21 | 4 | 900 | | | Output is not escaped |
| #4195 | Physical Custom Upload Folder for Real Media Library | 81 | 4 | 9 | 900 | | | Nonce verification recommended |
| #4196 | Login with Vipps and MobilePay | 34 | 263 | 174 | 900 | | | Output is not escaped |
| #4197 | Mailster Google Analytics | 63 | 26 | 9 | 900 | | | Output is not escaped |
| #4198 | WDV About Me Widget | 38 | 150 | 8 | 900 | | | Output is not escaped |
| #4199 | CopySafe Web Protection – Copy Protect Images | 100 | | 2 | 800 | | | mismatched plugin name |
| #4200 | Advanced Custom Fields: Limiter Field | 49 | 57 | 12 | 900 | | | Output is not escaped |