| #4301 | Sentry for WordPress | 40 | 80 | 40 | 10k+ | | | Text Domain Mismatch |
| #4302 | Social Share Buttons & Analytics Plugin – GetSocial.io | 40 | 97 | 25 | 2k+ | | | Output is not escaped |
| #4303 | WP Tab Widget | 40 | 128 | 32 | 10k+ | | | Output is not escaped |
| #4304 | WP Theme Test | 40 | 21 | 39 | 7k+ | | | Input is not sanitized |
| #4305 | WPC Force Sells for WooCommerce | 40 | 38 | 97 | 600 | | | Output is not escaped |
| #4306 | WPC Smart Price Filter for WooCommerce | 40 | 23 | 62 | 600 | | | Nonce verification recommended |
| #4307 | WPFront Notification Bar | 40 | 222 | 44 | 50k+ | | | Output is not escaped |
| #4308 | WPS Menu Exporter | 40 | 47 | 22 | 10k+ | | | Output is not escaped |
| #4309 | XLTab – Accordions and Tabs for Elementor Page Builder | 40 | 317 | 65 | 1k+ | | | Text Domain Mismatch |
| #4310 | Yektanet Ecommerce | 40 | 45 | 103 | 1k+ | | | Request data is not unslashed |
| #4311 | My YouTube Channel | 40 | 54 | 38 | 5k+ | | | Output is not escaped |
| #4312 | Zippy | 40 | 43 | 31 | 9k+ | | | Output is not escaped |
| #4313 | Simple Counter | 41 | 60 | 12 | 1k+ | | | Unsafe printing function |
| #4314 | AMP for WP – Accelerated Mobile Pages | 41 | 656 | 2,401 | 80k+ | | | Non-prefixed global variable |
| #4315 | ACF: Advanced Taxonomy Selector | 41 | 56 | 15 | 1k+ | | | Output is not escaped |
| #4316 | Ad Auto Insert H | 41 | 496 | 15 | 1k+ | | | Non Singular String Literal Domain |
| #4317 | Add-on Contact Form 7 – MailPoet 3 | 41 | 88 | 12 | 3k+ | | | Output is not escaped |
| #4318 | Add Chat App Button | 41 | 82 | 12 | 2k+ | | | Output is not escaped |
| #4319 | AddQuicktag | 41 | 86 | 10 | 100k+ | | | Output is not escaped |
| #4320 | Advance Bank Payment Transfer Gateway | 41 | 105 | 62 | 1k+ | | | Text Domain Mismatch |
| #4321 | ACF: Google Map Extended | 41 | 141 | 8 | 700 | | | Text Domain Mismatch |
| #4322 | Advanced Excerpt | 41 | 69 | 43 | 70k+ | | | Unsafe printing function |
| #4323 | AffiliateWP – Affiliate Product Rates | 41 | 84 | 24 | 1k+ | | | Output is not escaped |
| #4324 | Age Verify | 41 | 29 | 31 | 1k+ | | | Output is not escaped |
| #4325 | AH Display Widgets | 41 | 52 | 16 | 8k+ | | | Text Domain Mismatch |
| #4326 | Schema – All In One Schema Rich Snippets | 41 | 598 | 180 | 30k+ | | | Text Domain Mismatch |
| #4327 | Alma – Pay in installments or later for WooCommerce | 41 | 116 | 68 | 1k+ | | | Exception output is not escaped |
| #4328 | Amazon Link Engine | 41 | 38 | 17 | 2k+ | | | Output is not escaped |
| #4329 | Amazon Web Services | 41 | 53 | 21 | 5k+ | | | Missing Translators Comment |
| #4330 | Announcer – Sticky Message Banner & Notification Bar | 41 | 110 | 27 | 10k+ | | | Output is not escaped |
| #4331 | Antispam | 41 | 11 | 41 | 400 | | | Missing nonce verification |
| #4332 | ATP Call Now | 41 | 98 | 7 | 700 | | | Output is not escaped |
| #4333 | Authenticator | 41 | 59 | 44 | 1k+ | | | Output is not escaped |
| #4334 | Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) | 41 | 175 | 26 | 100k+ | | | Unsafe printing function |
| #4335 | Autocomplete Google Address | 41 | 22 | 67 | 2k+ | | | Nonce verification recommended |
| #4336 | Avatar Manager | 41 | 29 | 41 | 5k+ | | | Unsafe printing function |
| #4337 | AxiaChat AI – Free AI Chatbot (Answers Customers Automatically) | 41 | 1 | 135 | 2k+ | | | Interpolated SQL is not prepared |
| #4338 | Backend Designer | 41 | 50 | 11 | 1k+ | | | Output is not escaped |
| #4339 | Beam me up Scotty – Back to Top Button | 41 | 71 | 38 | 1k+ | | | Output is not escaped |
| #4340 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #4341 | Book Now | 41 | 75 | 14 | 1k+ | | | Output is not escaped |
| #4342 | Bop Search Box Item Type For Nav Menus | 41 | 52 | 14 | 1k+ | | | Output is not escaped |
| #4343 | BuddyPress Xprofile Custom Field Types | 41 | 39 | 189 | 4k+ | | | Missing nonce verification |
| #4344 | BuddyPress Edit Activity | 41 | 28 | 26 | 800 | | | Output is not escaped |
| #4345 | Bulk Delete Comments | 41 | 15 | 61 | 5k+ | | | Direct Query |
| #4346 | Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) | 41 | 16 | 37 | 1k+ | | | Missing nonce verification |
| #4347 | Bulk Images to Posts | 41 | 55 | 5 | 1k+ | | | Unsafe printing function |
| #4348 | Buzzsprout Podcasting | 41 | 75 | 13 | 5k+ | | | Non Singular String Literal Domain |
| #4349 | Cache control by Cacholong | 41 | 87 | 30 | 500 | | | Non Singular String Literal Domain |
| #4350 | Carbon Copy | 41 | 64 | 89 | 3k+ | | | Text Domain Mismatch |