| #4451 | Database Snapshots – WPvivid | 36 | 66 | 108 | 1k+ | | | Direct Query |
| #4452 | WP Disable Site Health | 93 | 4 | 4 | 1k+ | | | trademarked term |
| #4453 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #4454 | Most And Least Read Posts Widget | 38 | 130 | 24 | 1k+ | | | Output is not escaped |
| #4455 | Interactive World Map | 29 | 684 | 341 | 1k+ | | | Text Domain Mismatch |
| #4456 | Easy Share Solution For WordPress | 48 | 15 | 33 | 900 | | | Output is not escaped |
| #4457 | WPOSS阿里云对象存储 | 19 | 269 | 315 | 900 | | | Non-prefixed namespace |
| #4458 | YaySwatches – Variation Swatches for WooCommerce | 68 | 281 | 14 | 1k+ | | | Text Domain Mismatch |
| #4459 | ingenidev, UAE – AED Currency Symbol Changer | مغير رمز عملة الدرهم الإماراتي | 99 | | 3 | 900 | | | plugin header nonexistent domain path |
| #4460 | HD Quiz – Save Results Light | 86 | 4 | 8 | 1k+ | | | Missing nonce verification |
| #4461 | Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance | 38 | 23 | 104 | 1k+ | | | Direct Query |
| #4462 | Usermaven | 42 | 36 | 77 | 1k+ | | | Request data is not unslashed |
| #4463 | WPPizza – A Restaurant Plugin | 18 | 4,689 | 2,703 | 1k+ | | | Text Domain Mismatch |
| #4464 | Headline Analyzer | 50 | 13 | 31 | 1k+ | | | Nonce verification recommended |
| #4465 | Mailster SendGrid Integration | 83 | 23 | 3 | 1k+ | | | Missing Translators Comment |
| #4466 | Slightly troublesome permalink | 63 | 24 | 10 | 1k+ | | | Non Singular String Literal Domain |
| #4467 | Anonymous Restricted Content | 43 | 22 | 24 | 1k+ | | | Unsafe printing function |
| #4468 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget | 30 | 231 | 102 | 1k+ | | | Non Singular String Literal Domain |
| #4469 | Sticky Notes for WP Dashboard | 94 | 13 | 4 | 1k+ | | | wp function not compatible with requires wp |
| #4470 | Notiqoo – Order Notification & Customer Chat for WooCommerce | 52 | 11 | 187 | 1k+ | | | Non-prefixed global variable |
| #4471 | WT GeoTargeting | 32 | 89 | 43 | 1k+ | | | Output is not escaped |
| #4472 | WPKoi Templates for Elementor | 44 | 937 | 25 | 5k+ | | | Text Domain Mismatch |
| #4473 | Debug Log Viewer | 37 | 26 | 83 | 1k+ | | | Missing nonce verification |
| #4474 | Shoppable Images (Lookbook) for WooCommerce | 86 | 21 | 31 | 6k+ | | | Missing direct file access protection |
| #4475 | Podcast Player – Your Podcasting Companion | 46 | 14 | 133 | 10k+ | | | Non-prefixed global variable |
| #4476 | Export All URLs | 99 | 2 | 1 | 50k+ | | | five star reviews detected |
| #4477 | CSV Import and Exporter | 32 | 83 | 138 | 1k+ | | | Non-prefixed global variable |
| #4478 | Cronjob Scheduler | 42 | 20 | 36 | 1k+ | | | Input is not sanitized |
| #4479 | Bulk Edit YOAST SEO fields in Spreadsheet | 61 | 56 | 16 | 1k+ | | | Non Singular String Literal Domain |
| #4480 | Custom Link Widget | 67 | 28 | 0 | 1k+ | | | Output is not escaped |
| #4481 | Dark Mode Toggle | 100 | | 0 | 2k+ | | | No open findings |
| #4482 | Login Security Captcha | 100 | | 0 | 10k+ | | | No open findings |
| #4483 | mb.YTPlayer for background videos | 38 | 80 | 29 | 1k+ | | | Unsafe printing function |
| #4484 | WPGraphQL | 35 | 10 | 86 | 30k+ | | | Non-prefixed hook name |
| #4485 | Content Mask | 35 | 50 | 350 | 1k+ | | | Non-prefixed global variable |
| #4486 | SimpleTOC – Table of Contents Block | 35 | 10 | 0 | 10k+ | | | Setting is missing a sanitization callback |
| #4487 | SKT Addons for Elementor | 44 | 611 | 383 | 1k+ | | | Text Domain Mismatch |
| #4488 | Thumbnails and Featured Images | 78 | 16 | 14 | 1k+ | | | Short PHP open tag found |
| #4489 | What Template File Am I Viewing? | 96 | 7 | 0 | 1k+ | | | wp function not compatible with requires wp |
| #4490 | SendPulse Email Marketing Newsletter | 77 | 8 | 7 | 1k+ | | | Output is not escaped |
| #4491 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #4492 | Popup addon for Ninja Forms | 40 | 121 | 25 | 1k+ | | | Output is not escaped |
| #4493 | Insert Amz Images | 39 | 79 | 44 | 1k+ | | | Output is not escaped |
| #4494 | Woobox | 97 | 5 | 3 | 1k+ | | | trademarked term |
| #4495 | Sensei LMS Post to Course Creator | 91 | 6 | 7 | 1k+ | | | Missing Translators Comment |
| #4496 | Admin Toolbar Menus | 98 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #4497 | LexonRank: AI Link Building, Free Backlinks & SEO Automation | 55 | 15 | 20 | 1k+ | | | Nonce verification recommended |
| #4498 | Openpay SPEI Plugin | 34 | 112 | 14 | 1k+ | | | Exception output is not escaped |
| #4499 | ACF: Advanced Taxonomy Selector | 41 | 56 | 15 | 1k+ | | | Output is not escaped |
| #4500 | Country and State Selection Addon for Gravity Forms | 61 | 14 | 26 | 1k+ | | | Non-prefixed constant |