| #4201 | WDV About Me Widget | 38 | 150 | 8 | 900 | | | Output is not escaped |
| #4202 | CopySafe Web Protection – Copy Protect Images | 100 | | 2 | 800 | | | mismatched plugin name |
| #4203 | Advanced Custom Fields: Limiter Field | 49 | 57 | 12 | 900 | | | Output is not escaped |
| #4204 | Snitch | 87 | 5 | 19 | 800 | | | Nonce verification recommended |
| #4205 | Seraphinite Post .DOCX Source | 23 | 1,156 | 110 | 900 | | | Output is not escaped |
| #4206 | Disable Yoast's Structured Data | 97 | 4 | 3 | 900 | | | trademarked term |
| #4207 | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 21 | 668 | 1,569 | 800 | | | Non-prefixed global variable |
| #4208 | Prevent Concurrent Logins | 97 | 2 | 10 | 900 | | | Non-prefixed function |
| #4209 | UTM Event Tracker and Analytics, UTM Grabber | 76 | 2 | 19 | 900 | | | Interpolated SQL is not prepared |
| #4210 | Open Links In New Tab | 89 | 5 | 3 | 900 | | | Missing direct file access protection |
| #4211 | NHS Blocks | 87 | 6 | 6 | 900 | | | Non-prefixed global variable |
| #4212 | Genesis Club Lite | 25 | 513 | 317 | 900 | | | Output is not escaped |
| #4213 | Advanced Datepicker – Restrict Date for Elementor Forms | 95 | 114 | 1 | 900 | | | wp function not compatible with requires wp |
| #4214 | RV Embed PDF | 97 | 5 | 0 | 900 | | | Missing direct file access protection |
| #4215 | Disable Welcome Messages and Tips | 98 | 3 | 0 | 800 | | | Missing direct file access protection |
| #4216 | Sessions | 33 | 196 | 103 | 900 | | | Output is not escaped |
| #4217 | WPML Shortcodes | 84 | 7 | 12 | 900 | | | Non-prefixed function |
| #4218 | UTM for Woocommerce | 35 | 14 | 4 | 800 | | | Output is not escaped |
| #4219 | Waymark | 72 | 16 | 32 | 900 | | | Missing direct file access protection |
| #4220 | Nút Bấm Liên Hệ Dibrother | 91 | 5 | 2 | 900 | | | Missing Arg Domain |
| #4221 | Custom Posts Per Page | 66 | 20 | 2 | 900 | | | Unsafe printing function |
| #4222 | Dobby | 97 | 3 | 2 | 900 | | | Dynamic hook name |
| #4223 | VG WORT METIS | 28 | 150 | 317 | 900 | | | Nonce verification recommended |
| #4224 | SCSS WP Editor | 38 | 111 | 40 | 900 | | | Exception output is not escaped |
| #4225 | Seriously Simple Transcripts | 82 | 35 | 3 | 900 | | | Text Domain Mismatch |
| #4226 | Express, Certified Post, Bike Delivery and Iranian Postal Companies for WooCommerce | 99 | 1 | 2 | 900 | | | Non-prefixed function |
| #4227 | Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring | 32 | 196 | 160 | 900 | | | Text Domain Mismatch |
| #4228 | Countdown Timer | 33 | 311 | 17 | 900 | | | Text Domain Mismatch |
| #4229 | ProvenExpert | 98 | 8 | 10 | 900 | | | wp function not compatible with requires wp |
| #4230 | HT Mega – Absolute Addons for WPBakery Page Builder | 31 | 2,740 | 115 | 900 | | | Text Domain Mismatch |
| #4231 | Category Archives Block | 98 | 14 | 5 | 900 | | | Missing Arg Domain |
| #4232 | Meks Easy Maps | 82 | 13 | 13 | 900 | | | Input is not sanitized |
| #4233 | Address Autocomplete Anything | 40 | 94 | 32 | 900 | | | Unsafe printing function |
| #4234 | Easy Flash Embed | 83 | 9 | 1 | 900 | | | Output is not escaped |
| #4235 | Webmention | 33 | 64 | 89 | 900 | | | Output is not escaped |
| #4236 | Dashboard Commander | 69 | 13 | 2 | 900 | | | Output is not escaped |
| #4237 | Bulk Order Form for WooCommerce | 81 | 8 | 98 | 900 | | | Non-prefixed hook name |
| #4238 | Links shortcode | 40 | 73 | 13 | 900 | | | Unsafe printing function |
| #4239 | Copyscape Premium | 40 | 148 | 133 | 800 | | | SQL query is not prepared |
| #4240 | 12 Step Meeting List | 22 | 156 | 593 | 900 | | | Non-prefixed global variable |
| #4241 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #4242 | Simple Sticky Header on Scroll | 70 | 31 | 8 | 900 | | | Output is not escaped |
| #4243 | Yandex.Metrika | 42 | 15 | 20 | 900 | | | Unsafe printing function |
| #4244 | Medialist | 98 | 1 | 4 | 900 | | | Missing Version |
| #4245 | WebTotem Security | 21 | 1,110 | 213 | 900 | | | Text Domain Mismatch |
| #4246 | SEOPress for MainWP | 61 | 240 | 106 | 900 | | | Text Domain Mismatch |
| #4247 | onepay Payment Gateway For WooCommerce | 70 | 49 | 13 | 900 | | | Text Domain Mismatch |
| #4248 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | | | Output is not escaped |
| #4249 | Clone Woo Orders – Free by WP Masters | 73 | 13 | 8 | 900 | | | Output is not escaped |
| #4250 | Autocomplete For Relevanssi | 35 | 30 | 9 | 900 | | | Unsafe printing function |