| #4251 | Delay Redirects | 75 | 5 | 8 | 900 | | | Request data is not unslashed |
| #4252 | Nelio Popups | 99 | 5 | 0 | 900 | | | Missing direct file access protection |
| #4253 | Auto Ping Booster Free | 50 | 18 | 21 | 900 | | | Setting is missing a sanitization callback |
| #4254 | Slider Revolution Search Replace | 65 | 5 | 14 | 900 | | | Input is not validated |
| #4255 | Zeffy Donate Button | 90 | 3 | 0 | 1k+ | | | Output is not escaped |
| #4256 | Smart Attachment Page Remove | 44 | 82 | 3 | 900 | | | Output is not escaped |
| #4257 | WPZOOM Beaver Builder Templates | 35 | 3 | 5 | 900 | | | trademarked term |
| #4258 | Use Administrator Password | 93 | 2 | 4 | 900 | | | Non-prefixed hook name |
| #4259 | WP Theme Changelogs | 68 | 13 | 18 | 900 | | | Nonce verification recommended |
| #4260 | Photospace Responsive Gallery | 83 | 115 | 14 | 900 | | | Text Domain Mismatch |
| #4261 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | | | Output is not escaped |
| #4262 | FV Antispam | 26 | 332 | 239 | 900 | | | Output is not escaped |
| #4263 | WP Mailgun SMTP | 38 | 99 | 51 | 900 | | | Text Domain Mismatch |
| #4264 | Display Tweets | 29 | 135 | 135 | 900 | | | Non-prefixed global variable |
| #4265 | Quick Child Theme Generator | 40 | 22 | 74 | 900 | | | Request data is not unslashed |
| #4266 | WP Geo | 35 | 180 | 84 | 900 | | | Output is not escaped |
| #4267 | Formsite | Embed online forms to collect orders, registrations, leads, and surveys | 98 | 3 | 2 | 900 | | | Missing direct file access protection |
| #4268 | Hide Archive Label | 100 | | 0 | 900 | | | No open findings |
| #4269 | Elmo | 91 | 6 | 2 | 900 | | | Missing direct file access protection |
| #4270 | Mini Ajax Cart for WooCommerce | 35 | 297 | 240 | 900 | | | Text Domain Mismatch |
| #4271 | Block Guide Lines | 91 | 6 | 3 | 900 | | | Non-prefixed function |
| #4272 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #4273 | Widgets for Thumbtack Reviews | 96 | | 349 | 900 | | | Non-prefixed global variable |
| #4274 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #4275 | Simple Sticky Add To Cart For WooCommerce | 33 | 401 | 70 | 900 | | | Text Domain Mismatch |
| #4276 | Connect SendGrid for Emails | 59 | 37 | 103 | 900 | | | Missing direct file access protection |
| #4277 | Exchange Rates | 100 | | 0 | 900 | | | No open findings |
| #4278 | Simple User Listing | 50 | 27 | 56 | 900 | | | Non-prefixed global variable |
| #4279 | WPSSO Tune WP Image Editors | 91 | 35 | 10 | 900 | | | Missing Translators Comment |
| #4280 | TinyMCE VisualBlocks | 98 | 3 | 1 | 900 | | | Missing direct file access protection |
| #4281 | Price Table Block | 81 | 15 | 16 | 900 | | | file system operations mkdir |
| #4282 | WP Updates Settings | 79 | 7 | 8 | 900 | | | Unsafe printing function |
| #4283 | Google Web Fonts Customizer (GWFC) | 74 | 48 | 4 | 900 | | | Text Domain Mismatch |
| #4284 | EDD Auto Register | 89 | 13 | 7 | 900 | | | Missing Translators Comment |
| #4285 | Allow Numeric Slugs | 96 | 5 | 2 | 900 | | | Direct Query |
| #4286 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #4287 | AdminPad | 100 | | 0 | 900 | | | No open findings |
| #4288 | First Order Coupon Manager for WooCommerce | 95 | 10 | 3 | 900 | | | Text Domain Mismatch |
| #4289 | Nepali Date Converter | 97 | 2 | 25 | 900 | | | Non-prefixed function |
| #4290 | Wp Tracking Codes | 81 | 7 | 12 | 900 | | | Nonce verification recommended |
| #4291 | Responsive video embed | 98 | 6 | 3 | 900 | | | Text Domain Mismatch |
| #4292 | Support Me | 70 | 12 | 6 | 900 | | | Unsafe printing function |
| #4293 | WP Prefix Changer | 47 | 27 | 16 | 900 | | | Missing Arg Domain |
| #4294 | Per Page Sidebars | 67 | 12 | 11 | 900 | | | Input is not validated |
| #4295 | HT Builder – WordPress Theme Builder for Elementor | 37 | 142 | 41 | 1k+ | | | Output is not escaped |
| #4296 | Opal Service | 28 | 339 | 329 | 900 | | | Non-prefixed global variable |
| #4297 | Custom CSS and JS | 83 | 11 | 1 | 900 | | | Output is not escaped |
| #4298 | Video Gallery by Huzzaz | 97 | 5 | 2 | 900 | | | Non Enqueued Script |
| #4299 | FPG – Endereço automático por Cep no Checkout | 97 | 3 | 2 | 900 | | | outdated tested upto header |
| #4300 | Issuu PDF Sync | 35 | 159 | 28 | 900 | | | Text Domain Mismatch |