| #4351 | Pagebar2 | 81 | 19 | 37 | 900 | | | Non-prefixed global variable |
| #4352 | Clone / Duplicate Orders for WooCommerce | 99 | 1 | 2 | 1k+ | | | Discouraged text-domain loading |
| #4353 | Scroll Styler | 35 | 52 | 21 | 900 | | | Output is not escaped |
| #4354 | Pushly | 100 | 1 | 0 | 900 | | | Missing direct file access protection |
| #4355 | Яндекс Поделиться | 86 | 9 | 4 | 900 | | | Unsafe printing function |
| #4356 | Subresource Integrity (SRI) Manager | 35 | 26 | 94 | 900 | | | Request data is not unslashed |
| #4357 | Templatiq | 38 | 31 | 94 | 900 | | | Non-prefixed hook name |
| #4358 | Dublin Core Metadata Generator | 39 | 74 | 15 | 900 | | | Output is not escaped |
| #4359 | Infinity TNC Divi Modules | 98 | 2 | 5 | 900 | | | Non-prefixed global variable |
| #4360 | Swifty Image Widget | 39 | 114 | 28 | 900 | | | Output is not escaped |
| #4361 | Gulf currencies Symbols for WooCommerce – رمز الريال السعودي والدرهم الإماراتي | 94 | | 6 | 900 | | | Nonce verification recommended |
| #4362 | Template List Metabox | 68 | 14 | 10 | 900 | | | Missing Arg Domain |
| #4363 | Shipping Packages for WooCommerce – Dropship from multiple locations like AliExpress, eBay, Amazon, Etsy | 38 | 94 | 26 | 900 | | | Non Singular String Literal Domain |
| #4364 | BjornTech Accounting Report for WooCommerce | 99 | 2 | 1 | 900 | | | wp function not compatible with requires wp |
| #4365 | Comments Shortcode | 98 | 3 | 1 | 900 | | | Missing direct file access protection |
| #4366 | Hide Title | 68 | 13 | 6 | 900 | | | Output is not escaped |
| #4367 | Advanced Custom Fields – Location Field add-on | 48 | 51 | 6 | 900 | | | Output is not escaped |
| #4368 | Attachment Taxonomies | 89 | 1 | 8 | 900 | | | Input is not sanitized |
| #4369 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #4370 | Gravity Fieldset for Gravity Forms | 73 | 14 | 1 | 900 | | | Output is not escaped |
| #4371 | NodeInfo(2) | 99 | 1 | 1 | 900 | | | Missing direct file access protection |
| #4372 | All-in-one Chat Button by anychat.one | 37 | 119 | 69 | 900 | | | Text Domain Mismatch |
| #4373 | Paydibs Gateway for WooCommerce | 95 | 1 | 4 | 1k+ | | | Discouraged text-domain loading |
| #4374 | Local Delivery Drivers for WooCommerce | 24 | 1,832 | 1,483 | 900 | | | Non-prefixed global variable |
| #4375 | HTTP/2 Server Push | 97 | 4 | 1 | 900 | | | Missing direct file access protection |
| #4376 | Shippit for WooCommerce | 44 | 127 | 26 | 900 | | | Text Domain Mismatch |
| #4377 | WP Travel Gutenberg Blocks | 28 | 485 | 157 | 900 | | | Output is not escaped |
| #4378 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |
| #4379 | Post Order By Category | 78 | 1 | 12 | 900 | | | Missing nonce verification |
| #4380 | Z-Credit Checkout – WooCommerce Payment Gateway | 41 | 151 | 22 | 900 | | | Text Domain Mismatch |
| #4381 | Koalendar – Easy Appointment Scheduling & Booking Plugin | 97 | 8 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #4382 | Yektanet Ecommerce | 40 | 45 | 103 | 1k+ | | | Request data is not unslashed |
| #4383 | Noted! | 35 | 5 | 22 | 1k+ | | | Non-prefixed global variable |
| #4384 | Jobber | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4385 | Simple Org Chart | 56 | 15 | 29 | 900 | | | Missing Version |
| #4386 | Auto Post Expire | 99 | 1 | 2 | 1k+ | | | Mixed line endings |
| #4387 | Széchenyi 2020 Logo | 89 | 140 | 9 | 1k+ | | | Text Domain Mismatch |
| #4388 | New Order Notification for WooCommerce | 45 | 21 | 42 | 900 | | | Output is not escaped |
| #4389 | Subscribe Button by AddToAny | 40 | 93 | 47 | 900 | | | Output is not escaped |
| #4390 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | 20 | 736 | 2,112 | 900 | | | Non-prefixed global variable |
| #4391 | CP Multi View Events Calendar | 26 | 86 | 439 | 900 | | | Non-prefixed global variable |
| #4392 | Dashify: WooCommerce admin dashboard theme | 40 | 16 | 131 | 900 | | | Nonce verification recommended |
| #4393 | Image & Text Widget | 89 | 4 | 4 | 900 | | | Missing Version |
| #4394 | Backend Payments for WooCommerce | 35 | 63 | 42 | 900 | | | Exception output is not escaped |
| #4395 | Codeless Page Builder | 31 | 415 | 258 | 900 | | | Text Domain Mismatch |
| #4396 | Elementic | 66 | 22 | 9 | 900 | | | Text Domain Mismatch |
| #4397 | Duplicate TEC Event | 67 | 12 | 10 | 900 | | | date date |
| #4398 | Flowplayer Video Player | 86 | 8 | 7 | 900 | | | Output is not escaped |
| #4399 | Parallax Slider Block | 82 | 15 | 12 | 900 | | | file system operations mkdir |
| #4400 | Address correction autocomplete for Woo | 67 | 19 | 9 | 1k+ | | | Text Domain Mismatch |
