| #4801 | Ultimate Data Table Addon For Elementor | 76 | 8 | 0 | 1k+ | | | Exception output is not escaped |
| #4802 | Widget Classes | 77 | 5 | 7 | 1k+ | | | Missing nonce verification |
| #4803 | ImageMagick Sharpen Resized Images | 54 | 22 | 6 | 1k+ | | | Output is not escaped |
| #4804 | Wired Impact Volunteer Management | 35 | 253 | 175 | 1k+ | | | Output is not escaped |
| #4805 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #4806 | PDF Flipbook, WPBakery Addon – Unreal FlipBook | 36 | 400 | 92 | 1k+ | | | Non Singular String Literal Domain |
| #4807 | Counter-Hits | 98 | 4 | 2 | 1k+ | | | Missing direct file access protection |
| #4808 | Range Slider Addon for Gravity Forms | 92 | | 3 | 1k+ | | | Missing nonce verification |
| #4809 | WP YouTube Player | 61 | 14 | 17 | 1k+ | | | Output is not escaped |
| #4810 | Media Library File Download | 23 | 615 | 1,286 | 1k+ | | | Non-prefixed global variable |
| #4811 | Image Carousel For Divi | 23 | 569 | 1,309 | 1k+ | | | Non-prefixed global variable |
| #4812 | Remove Meta Generators | 97 | 5 | 5 | 1k+ | | | wp function not compatible with requires wp |
| #4813 | WPHindi – Type in Hindi in WordPress | 95 | 7 | 9 | 1k+ | | | Not In Footer |
| #4814 | Mailster reCaptcha | 84 | 4 | 15 | 1k+ | | | Missing nonce verification |
| #4815 | Comment Image | 44 | 19 | 23 | 1k+ | | | Output is not escaped |
| #4816 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #4817 | Polaroid Gallery | 38 | 105 | 20 | 1k+ | | | Unsafe printing function |
| #4818 | AffiliateWP – WooCommerce Redirect Affiliates | 79 | 27 | 7 | 1k+ | | | Text Domain Mismatch |
| #4819 | Simple Image XML Sitemap | 37 | 119 | 16 | 1k+ | | | Output is not escaped |
| #4820 | Powerful Posts Per Page (PPPP) | 35 | 4 | 1 | 1k+ | | | Hidden files included |
| #4821 | Passwordless Login | 41 | 40 | 24 | 1k+ | | | Output is not escaped |
| #4822 | Overwrite Uploads | 97 | 3 | 4 | 1k+ | | | Missing direct file access protection |
| #4823 | Pantheon Migrations | 57 | 15 | 26 | 1k+ | | | Output is not escaped |
| #4824 | Email Blacklist For Elementor Forms | 92 | 7 | 5 | 1k+ | | | Text Domain Mismatch |
| #4825 | Broadcast | 38 | 21 | 107 | 1k+ | | | Direct Query |
| #4826 | GET Params | 83 | 3 | 8 | 1k+ | | | Nonce verification recommended |
| #4827 | Sticky Header by ThematoSoup | 83 | 20 | 5 | 1k+ | | | Non Singular String Literal Domain |
| #4828 | WC Speed Repair | 42 | 34 | 74 | 1k+ | | | Non-prefixed global variable |
| #4829 | WSB HUB3 | 35 | 36 | 109 | 1k+ | | | Missing nonce verification |
| #4830 | Event Timeline – Vertical Timeline | 34 | 26 | 684 | 1k+ | | | Non-prefixed global variable |
| #4831 | CM Header and Footer – Add custom scripts and styles to your header and footer with ease | 36 | 230 | 198 | 1k+ | | | Output is not escaped |
| #4832 | StreamWeasels YouTube Integration | 24 | 544 | 1,384 | 1k+ | | | Non-prefixed global variable |
| #4833 | WP Healthcheck | 58 | 37 | 73 | 1k+ | | | Non-prefixed global variable |
| #4834 | PDF Thumbnails | 92 | 5 | 2 | 1k+ | | | Missing Arg Domain |
| #4835 | GSheetConnector For Ninja Forms | 32 | 165 | 93 | 1k+ | | | Unsafe printing function |
| #4836 | Remove Protected In Title | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #4837 | WebDefender Security – Protection & AntiSpam | 70 | 176 | 61 | 1k+ | | | wp function not compatible with requires wp |
| #4838 | Exit Popup | 42 | 51 | 5 | 1k+ | | | Output is not escaped |
| #4839 | Groups 404 Redirect | 47 | 35 | 33 | 1k+ | | | Non Singular String Literal Domain |
| #4840 | Sovrn | 43 | 9 | 29 | 1k+ | | | Input is not sanitized |
| #4841 | Always Edit In HTML | 77 | 7 | 5 | 1k+ | | | Output is not escaped |
| #4842 | Calculated fields for ACF | 66 | 5 | 18 | 1k+ | | | Non-prefixed global variable |
| #4843 | Widget for Google Reviews | 97 | 3 | 4 | 1k+ | | | Discouraged text-domain loading |
| #4844 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | | | Output is not escaped |
| #4845 | Remove RSS Feed | 92 | 5 | 0 | 1k+ | | | Missing Arg Domain |
| #4846 | Slideshow | 97 | 4 | 2 | 1k+ | | | Post Not In exclude |
| #4847 | Easy 3D Viewer | 32 | 399 | 241 | 1k+ | | | Text Domain Mismatch |
| #4848 | WP REST Yoast Meta | 97 | 2 | 8 | 1k+ | | | trademarked term |
| #4849 | Simple Google Analytics Tracking | 91 | 6 | 2 | 1k+ | | | Missing direct file access protection |
| #4850 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | | | Text Domain Mismatch |