| #4251 | Url Rewrite Analyzer | 40 | 73 | 23 | 400 | | | Unsafe printing function |
| #4252 | UsersWP – ReCaptcha | 40 | 80 | 17 | 3k+ | | | Text Domain Mismatch |
| #4253 | UTM Leads Tracker – XLPlugins | 40 | 21 | 38 | 400 | | | Output is not escaped |
| #4254 | Visibility Control for LearnDash | 40 | 55 | 23 | 1k+ | | | Missing Arg Domain |
| #4255 | Visibility Control for LearnPress | 40 | 52 | 19 | 700 | | | Missing Arg Domain |
| #4256 | Visma Pay for Woocommerce | 40 | 27 | 37 | 2k+ | | | Output is not escaped |
| #4257 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | | | Output is not escaped |
| #4258 | Visual Editor Custom Buttons | 40 | 30 | 48 | 4k+ | | | Output is not escaped |
| #4259 | WP Sticky Button – Click to Chat | 40 | 73 | 64 | 10k+ | | | Non-prefixed global variable |
| #4260 | WooBooster Partial COD for WooCommerce | 40 | 90 | 51 | 500 | | | Text Domain Mismatch |
| #4261 | Where Did You Hear About Us Checkout Field for WooCommerce | 40 | 57 | 66 | 1k+ | | | Output is not escaped |
| #4262 | WC Search Orders By Product | 40 | 47 | 66 | 800 | | | Nonce verification recommended |
| #4263 | Webo-facto | 40 | 10 | 90 | 800 | | | Input is not sanitized |
| #4264 | Weight Based Pricing for WooCommerce | 40 | 167 | 86 | 600 | | | Text Domain Mismatch |
| #4265 | Wider Admin Menu | 40 | 76 | 17 | 2k+ | | | Output is not escaped |
| #4266 | Widget Builder | 40 | 40 | 52 | 500 | | | Non-prefixed global variable |
| #4267 | Widget Menuizer | 40 | 44 | 26 | 600 | | | Missing Arg Domain |
| #4268 | Widget Visibility Without Jetpack | 40 | 74 | 47 | 5k+ | | | Text Domain Mismatch |
| #4269 | Widgets Control | 40 | 92 | 47 | 800 | | | Output is not escaped |
| #4270 | Wonder Video Embed | 40 | 94 | 4 | 4k+ | | | Output is not escaped |
| #4271 | Payment Gateway – nexi Alpha Bank for WooCommerce | 40 | 28 | 45 | 1k+ | | | Missing nonce verification |
| #4272 | WPC Frequently Bought Together for WooCommerce | 40 | 63 | 109 | 10k+ | | | Output is not escaped |
| #4273 | Preview E-mails for WooCommerce | 40 | 35 | 37 | 30k+ | | | Unsafe printing function |
| #4274 | NP Quote Request for WooCommerce | 40 | 91 | 145 | 9k+ | | | Non-prefixed global variable |
| #4275 | Total Sales Counts for WooCommerce | 40 | 121 | 62 | 700 | | | SQL query is not prepared |
| #4276 | yubikey-plugin | 40 | 64 | 33 | 400 | | | Text Domain Mismatch |
| #4277 | All In One SEO Pack for WooCommerce | 40 | 57 | 25 | 3k+ | | | Text Domain Mismatch |
| #4278 | Simple Registration for WooCommerce | 40 | 27 | 55 | 4k+ | | | Missing nonce verification |
| #4279 | WooSidebars | 40 | 43 | 37 | 100k+ | | | Missing Translators Comment |
| #4280 | Word Balloon | 40 | 20 | 125 | 10k+ | | | Request data is not unslashed |
| #4281 | WP Ajax Load More Pagination and Infinite Scroll | 40 | 63 | 15 | 400 | | | Output is not escaped |
| #4282 | WP Compress for MainWP | 40 | 20 | 36 | 700 | | | Output is not escaped |
| #4283 | Custom CSS/JS | 40 | 58 | 34 | 700 | | | Text Domain Mismatch |
| #4284 | WP Date and Time Shortcode | 40 | 90 | 12 | 10k+ | | | Output is not escaped |
| #4285 | WP Discord Invite | 40 | 73 | 42 | 400 | | | Unsafe printing function |
| #4286 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |
| #4287 | WP Help | 40 | 49 | 54 | 10k+ | | | Unsafe printing function |
| #4288 | WP All Import – Job Listing Import for WP Job Manager | 40 | 35 | 27 | 2k+ | | | Output is not escaped |
| #4289 | WP Keyword Suggest | 40 | 29 | 41 | 500 | | | Non Singular String Literal Domain |
| #4290 | Media Library Categories | 40 | 29 | 49 | 20k+ | | | Output is not escaped |
| #4291 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | | | Output is not escaped |
| #4292 | WP Multisite Content Copier/Updater | 40 | 19 | 144 | 800 | | | Interpolated SQL is not prepared |
| #4293 | WP Nav Plus | 40 | 95 | 13 | 1k+ | | | Output is not escaped |
| #4294 | WP Paint – WordPress Image Editor | 40 | 30 | 29 | 6k+ | | | Missing Arg Domain |
| #4295 | WP Posts Carousel | 40 | 199 | 12 | 3k+ | | | Unsafe printing function |
| #4296 | QR code MeCard/vCard generator | 40 | 322 | 21 | 2k+ | | | Unsafe printing function |
| #4297 | WP Reroute Email | 40 | 141 | 106 | 1k+ | | | Output is not escaped |
| #4298 | Sentry for WordPress | 40 | 80 | 40 | 10k+ | | | Text Domain Mismatch |
| #4299 | Social Share Buttons & Analytics Plugin – GetSocial.io | 40 | 97 | 25 | 2k+ | | | Output is not escaped |
| #4300 | WP Tab Widget | 40 | 128 | 32 | 10k+ | | | Output is not escaped |