| #4551 | MAS Elementor | 89 | 19 | 216 | 1k+ | | | Non-prefixed hook name |
| #4552 | Known Agents – Track AI Bots and Crawlers, Block Scrapers, Analyze LLM Referral Traffic | 57 | 37 | 12 | 1k+ | | | Setting is missing a sanitization callback |
| #4553 | Checkout Terms Conditions Popup for WooCommerce | 35 | 76 | 30 | 1k+ | | | Output is not escaped |
| #4554 | QR Code Woocommerce | 44 | 37 | 36 | 1k+ | | | Output is not escaped |
| #4555 | Módulo PagSeguro | 37 | 90 | 46 | 1k+ | | | Unsafe printing function |
| #4556 | Admin Custom Font | 39 | 34 | 25 | 1k+ | | | Unsafe printing function |
| #4557 | Easy Photo Album | 37 | 360 | 43 | 1k+ | | | Text Domain Mismatch |
| #4558 | Custom Content Width | 86 | 8 | 0 | 1k+ | | | Text Domain Mismatch |
| #4559 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #4560 | Narrative Publisher | 44 | 28 | 37 | 1k+ | | | Text Domain Mismatch |
| #4561 | Smart Archives Reloaded | 39 | 78 | 36 | 1k+ | | | Non Singular String Literal Domain |
| #4562 | Popup Message Notifier for Contact Form 7 | 85 | 17 | 2 | 1k+ | | | Short PHP open tag found |
| #4563 | WP Telegram Login & Register | 95 | 11 | 21 | 1k+ | | | Non-prefixed global variable |
| #4564 | Buttons to Edit Next/Previous Post | 80 | 12 | 1 | 1k+ | | | Output is not escaped |
| #4565 | USERCENTRICS CMP | 56 | 44 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #4566 | Unit Price for WooCommerce | 44 | 112 | 63 | 1k+ | | | Output is not escaped |
| #4567 | Bulk Post Category Creator | 91 | 20 | 2 | 1k+ | | | Text Domain Mismatch |
| #4568 | 3D Viewer Block – Interactive 3D Model Display | 99 | | 3 | 1k+ | | | Non-prefixed constant |
| #4569 | Starter Sites | 42 | 62 | 25 | 1k+ | | | Output is not escaped |
| #4570 | Contact Form 7 Translate Messages Extension | 77 | 10 | 5 | 1k+ | | | Output is not escaped |
| #4571 | Integration for WooCommerce and QuickBooks | 35 | 263 | 125 | 1k+ | | | Output is not escaped |
| #4572 | TriPay Payment Gateway | 45 | 478 | 44 | 1k+ | | | Text Domain Mismatch |
| #4573 | Mailster Contact Form 7 | 68 | 35 | 20 | 1k+ | | | Text Domain Mismatch |
| #4574 | Export Order Items for WooCommerce | 31 | 100 | 108 | 1k+ | | | Text Domain Mismatch |
| #4575 | Bopo – WooCommerce Product Bundle Builder | 66 | 137 | 135 | 1k+ | | | Text Domain Mismatch |
| #4576 | GDPR Cookie Consent Notice Box | 35 | 46 | 17 | 1k+ | | | Output is not escaped |
| #4577 | WP Charts and Graphs – WordPress Chart Plugin | 62 | 8 | 29 | 1k+ | | | Input is not sanitized |
| #4578 | Aitasi Coming Soon | 30 | 516 | 186 | 1k+ | | | Output is not escaped |
| #4579 | Convert Rank Math FAQ to Accordion | 93 | 2 | 0 | 1k+ | | | Output is not escaped |
| #4580 | BuddyPress Members Only | 37 | 184 | 80 | 1k+ | | | Text Domain Mismatch |
| #4581 | de_DE | 95 | 16 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #4582 | Accesibilidad Web con el Widget de AccedeMe | 60 | 22 | 23 | 1k+ | | | Text Domain Mismatch |
| #4583 | Bg RuTube Embed | 53 | 19 | 21 | 1k+ | | | Unsafe printing function |
| #4584 | Simple Event Planner | 27 | 149 | 346 | 1k+ | | | Non-prefixed global variable |
| #4585 | SuperSaaS – online appointment scheduling | 42 | 79 | 10 | 1k+ | | | Text Domain Mismatch |
| #4586 | WP 4 Me Title Remover | 71 | 17 | 13 | 1k+ | | | Missing direct file access protection |
| #4587 | Events Maker by dFactory | 22 | 588 | 819 | 1k+ | | | Output is not escaped |
| #4588 | UPI QR Code Payment Gateway | 42 | 179 | 28 | 1k+ | | | Text Domain Mismatch |
| #4589 | DPO Pay for WooCommerce | 47 | 28 | 41 | 1k+ | | | Non Singular String Literal Text |
| #4590 | Decimal Product Quantity for WooCommerce | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4591 | Header Footer Custom Html | 40 | 95 | 22 | 1k+ | | | Unsafe printing function |
| #4592 | AppPresser – Mobile App Framework | 29 | 262 | 214 | 1k+ | | | Text Domain Mismatch |
| #4593 | Flexible FAQ | 58 | 27 | 26 | 1k+ | | | Text Domain Mismatch |
| #4594 | Ultimate Watermark – Image Watermark, Image Protection & Bulk Watermarking | 27 | 164 | 303 | 1k+ | | | Nonce verification recommended |
| #4595 | Show IP address | 70 | 6 | 20 | 1k+ | | | Input is not sanitized |
| #4596 | Batch Comment Spam Deletion | 46 | 22 | 15 | 1k+ | | | Nonce verification recommended |
| #4597 | Sidebar Manager Light | 31 | 221 | 76 | 1k+ | | | Text Domain Mismatch |
| #4598 | xili-tidy-tags | 35 | 224 | 157 | 1k+ | | | Output is not escaped |
| #4599 | ZeroBounce Email Verification & Validation | 38 | 299 | 162 | 900 | | | Text Domain Mismatch |
| #4600 | Event Block | 98 | 5 | 1 | 1k+ | | | Missing direct file access protection |