| #4001 | Add Pinterest conversion tags for Pinterest Ads + Site verification | 40 | 88 | 26 | 1k+ | | | Output is not escaped |
| #4002 | Add & Replace Affiliate Links for Amazon | 40 | 39 | 52 | 600 | | | Output is not escaped |
| #4003 | Subscribe Button by AddToAny | 40 | 93 | 47 | 900 | | | Output is not escaped |
| #4004 | Address Autocomplete Anything | 40 | 94 | 32 | 900 | | | Unsafe printing function |
| #4005 | Admin Search | 40 | 31 | 47 | 1k+ | | | Output is not escaped |
| #4006 | Advanced Admin Search | 40 | 79 | 48 | 600 | | | Non Singular String Literal Text |
| #4007 | Advanced Country Blocker | 40 | 23 | 77 | 2k+ | | | Exception output is not escaped |
| #4008 | Advanced Custom Fields: Font Awesome Field | 40 | 332 | 70 | 90k+ | | | Text Domain Mismatch |
| #4009 | Advanced IP Blocker | 40 | 94 | 44 | 2k+ | | | Exception output is not escaped |
| #4010 | Advanced WooCommerce Product Gallery Slider | 40 | 42 | 48 | 3k+ | | | Non-prefixed global variable |
| #4011 | Advanced WPLink | 40 | 67 | 19 | 1k+ | | | Text Domain Mismatch |
| #4012 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 600 | | | Text Domain Mismatch |
| #4013 | AJAX Thumbnail Rebuild | 40 | 38 | 14 | 30k+ | | | Unsafe printing function |
| #4014 | Allow Multiple Accounts | 40 | 115 | 19 | 9k+ | | | Non Singular String Literal Domain |
| #4015 | Alt Magic: AI Image Alt Text Generator for WP & Image Rename | 40 | 55 | 118 | 1k+ | | | Direct Query |
| #4016 | amCharts: Charts and Maps | 40 | 263 | 113 | 2k+ | | | Text Domain Mismatch |
| #4017 | Analytics Cat – Google Analytics Made Easy | 40 | 83 | 27 | 6k+ | | | Text Domain Mismatch |
| #4018 | Animated Live Wall Gallery | 40 | 27 | 72 | 2k+ | | | Request data is not unslashed |
| #4019 | Athemes Toolbox | 40 | 254 | 58 | 3k+ | | | Text Domain Mismatch |
| #4020 | Atomic Edge Security – Firewall, Malware Scan and Login Security | 40 | 12 | 184 | 700 | | | Non-prefixed global variable |
| #4021 | Attachment Importer | 40 | 24 | 76 | 3k+ | | | Input is not sanitized |
| #4022 | Auto Upload Images | 40 | 62 | 13 | 20k+ | | | Unsafe printing function |
| #4023 | Autocomplete LearnDash Lessons and Topics | 40 | 46 | 16 | 1k+ | | | Missing Arg Domain |
| #4024 | AutoConvert Greeklish Permalinks | 40 | 116 | 13 | 30k+ | | | Text Domain Mismatch |
| #4025 | Mastodon Autopost | 40 | 41 | 50 | 800 | | | Output is not escaped |
| #4026 | AxiaChat AI – Free AI Chatbot (Answers Customers Automatically) | 40 | 2 | 135 | 2k+ | | | Interpolated SQL is not prepared |
| #4027 | Back To The Top Button | 40 | 31 | 271 | 4k+ | | | Non-prefixed global variable |
| #4028 | Bangladeshi Payment Gateways – Make Payment Using QR Code | 40 | 40 | 36 | 5k+ | | | Output is not escaped |
| #4029 | Basic Interactive World Map | 40 | 94 | 54 | 1k+ | | | Text Domain Mismatch |
| #4030 | bbPress WP Tweaks | 40 | 147 | 18 | 1k+ | | | Output is not escaped |
| #4031 | Better Internal Link Search | 40 | 23 | 48 | 1k+ | | | strip tags strip tags |
| #4032 | BH Custom CSS3 Preloader – Just play and play | 40 | 439 | 26 | 900 | | | Text Domain Mismatch |
| #4033 | Billingo Official for WooCommerce | 40 | 25 | 37 | 3k+ | | | Output is not escaped |
| #4034 | Black Studio TinyMCE Widget | 40 | 39 | 28 | 200k+ | | | Output is not escaped |
| #4035 | Broken Link Notifier | 40 | 11 | 193 | 1k+ | | | Non-prefixed global variable |
| #4036 | Bubble Menu – Floating Button Menu with Sticky Navigation | 40 | 2 | 216 | 1k+ | | | Nonce verification recommended |
| #4037 | BuddyPress Profile Completion | 40 | 28 | 30 | 500 | | | Output is not escaped |
| #4038 | Bulk Add Terms | 40 | 74 | 27 | 800 | | | Text Domain Mismatch |
| #4039 | Bulk Delete Comments | 40 | 16 | 61 | 5k+ | | | Direct Query |
| #4040 | Bulk Featured Image | 40 | 69 | 117 | 800 | | | Output is not escaped |
| #4041 | Bulk Move | 40 | 85 | 44 | 9k+ | | | Unsafe printing function |
| #4042 | Buy one Get one Free – BOGO discount rule maker for WooCommerce | 40 | 119 | 57 | 400 | | | Text Domain Mismatch |
| #4043 | Coming soon Page | 40 | 24 | 18 | 500 | | | Text Domain Mismatch |
| #4044 | Custom Cart Link for WooCommerce | 40 | 24 | 16 | 700 | | | Unsafe printing function |
| #4045 | Catalog for Woocommerce | 40 | 92 | 75 | 1k+ | | | Output is not escaped |
| #4046 | Categories Metabox Enhanced | 40 | 77 | 36 | 1k+ | | | Output is not escaped |
| #4047 | Category Featured Images Extended | 40 | 177 | 40 | 400 | | | Text Domain Mismatch |
| #4048 | CC BMI Calculator | 40 | 135 | 7 | 800 | | | Output is not escaped |
| #4049 | CleverReach Integration for Contact Form 7 | 40 | 103 | 43 | 700 | | | Text Domain Mismatch |
| #4050 | Contact form 7 TO API + Basic Auth | 40 | 73 | 30 | 1k+ | | | Non Singular String Literal Domain |