| #4401 | Pantheon HUD | 90 | 4 | 6 | 1k+ | | | Input is not sanitized |
| #4402 | Featured Image Zoom | 97 | 4 | 1 | 900 | | | Missing direct file access protection |
| #4403 | Image Refresh | 35 | 4 | 6 | 900 | | | Dynamic hook name |
| #4404 | Popup with fancybox | 35 | 196 | 168 | 900 | | | Unsafe printing function |
| #4405 | Replace Google Fonts with Bunny Fonts | 91 | 6 | 1 | 900 | | | wp function not compatible with requires wp |
| #4406 | Advanced All in One Admin Search by WP Spotlight | 42 | 25 | 25 | 900 | | | Missing Version |
| #4407 | WP All Import – Import SEO Settings for All In One SEO | 65 | 19 | 11 | 900 | | | Output is not escaped |
| #4408 | Simple Membership MailChimp Integration | 45 | 34 | 27 | 900 | | | curl curl setopt |
| #4409 | AJAX Hits Counter + Popular Posts Widget | 37 | 247 | 44 | 900 | | | Output is not escaped |
| #4410 | Gift Wrapping for WooCommerce | 72 | 2 | 16 | 1k+ | | | Missing nonce verification |
| #4411 | Simple Site Verify | 70 | 20 | 0 | 900 | | | Output is not escaped |
| #4412 | Customizer Reset – Export & Import | 88 | 6 | 9 | 900 | | | wp function not compatible with requires wp |
| #4413 | Visual Editor Biography | 79 | 11 | 3 | 900 | | | Missing Arg Domain |
| #4414 | Order Status History for WooCommerce | 36 | 210 | 171 | 1k+ | | | Output is not escaped |
| #4415 | Yumpu E-Paper publishing | 98 | 2 | 2 | 1k+ | | | Missing direct file access protection |
| #4416 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #4417 | WP Popup | 32 | 539 | 65 | 1k+ | | | Text Domain Mismatch |
| #4418 | WP Insert Code | 88 | 6 | 4 | 1k+ | | | trademarked term |
| #4419 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #4420 | Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls | 68 | 21 | 18 | 900 | | | Output is not escaped |
| #4421 | Subscriber by BestWebSoft | 26 | 550 | 376 | 900 | | | Text Domain Mismatch |
| #4422 | Advanced Custom Fields: oEmbed Field | 44 | 36 | 13 | 900 | | | Text Domain Mismatch |
| #4423 | WP PDF Generator | 84 | 21 | 22 | 1k+ | | | Request data is not unslashed |
| #4424 | Anything Order by Terms | 39 | 48 | 93 | 1k+ | | | Direct Query |
| #4425 | Admin Tweaks | 24 | 1,507 | 206 | 900 | | | Text Domain Mismatch |
| #4426 | Media Credit | 35 | 28 | 35 | 1k+ | | | Non-prefixed global variable |
| #4427 | Substack Importer | 39 | 33 | 33 | 1k+ | | | Missing nonce verification |
| #4428 | Payment Gateway Payoneer For WooCommerce | 51 | 9 | 35 | 900 | | | Input is not validated |
| #4429 | System Dashboard | 32 | 91 | 205 | 1k+ | | | Request data is not unslashed |
| #4430 | WP Revision Master | 39 | 96 | 29 | 900 | | | Text Domain Mismatch |
| #4431 | Remove invalid menu items | 98 | 3 | 2 | 1k+ | | | Missing Version |
| #4432 | avalex – Automatisch sichere Rechtstexte | 37 | 25 | 85 | 1k+ | | | Direct Query |
| #4433 | Faktur Pro for WooCommerce | 26 | 416 | 218 | 1k+ | | | Text Domain Mismatch |
| #4434 | WP Compiler | 35 | 33 | 20 | 1k+ | | | Output is not escaped |
| #4435 | ValidateCertify Free | 37 | 123 | 97 | 1k+ | | | Text Domain Mismatch |
| #4436 | Log Deprecated Notices | 38 | 92 | 73 | 900 | | | Text Domain Mismatch |
| #4437 | Visual Bible Verse of the Day Widget | 71 | 27 | 1 | 900 | | | Output is not escaped |
| #4438 | Guaranteed Reviews Company (Société des Avis Garantis) | 36 | 369 | 197 | 1k+ | | | Output is not escaped |
| #4439 | Image Comparison Block | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #4440 | Easy Digital Downloads Free Link | 91 | 11 | 3 | 1k+ | | | Short PHP open tag found |
| #4441 | Color and Image Swatches for Variable Product Attributes | 32 | 173 | 111 | 1k+ | | | Output is not escaped |
| #4442 | Book Review Block | 91 | 11 | 2 | 1k+ | | | block api version too low |
| #4443 | Crafty Social Buttons | 37 | 279 | 27 | 900 | | | Non Singular String Literal Domain |
| #4444 | Show User Registration Date | 96 | 4 | 4 | 1k+ | | | Non-prefixed function |
| #4445 | Recent Posts Plus | 38 | 111 | 4 | 1k+ | | | Output is not escaped |
| #4446 | Non-Purchasable WooCommerce Products | 72 | 14 | 13 | 1k+ | | | Input is not validated |
| #4447 | Timed Content For Beaver Builder | 81 | 29 | 8 | 1k+ | | | date date |
| #4448 | Simple Google Photos Grid | 41 | 48 | 2 | 1k+ | | | Output is not escaped |
| #4449 | WP Admin Audit | 24 | 1,051 | 781 | 1k+ | | | error log print r |
| #4450 | Pending Submission Notifications | 89 | 4 | 3 | 1k+ | | | Non-prefixed function |