| #4351 | Cache control by Cacholong | 41 | 87 | 30 | 500 | | | Non Singular String Literal Domain |
| #4352 | Carbon Copy | 41 | 64 | 89 | 3k+ | | | Text Domain Mismatch |
| #4353 | Easy Social Like Box – Popup – Sidebar Widget | 41 | 218 | 91 | 7k+ | | | Text Domain Mismatch |
| #4354 | Categorized Tag Cloud | 41 | 44 | 17 | 1k+ | | | Output is not escaped |
| #4355 | Category Wise Search | 41 | 58 | 9 | 500 | | | Output is not escaped |
| #4356 | Čeština: zalomení řádků | 41 | 86 | 8 | 6k+ | | | Text Domain Mismatch |
| #4357 | Conditional Fields for Contact Form 7 | 41 | 113 | 52 | 100k+ | | | Output is not escaped |
| #4358 | CF7 Invisible reCAPTCHA | 41 | 19 | 52 | 7k+ | | | Request data is not unslashed |
| #4359 | Submission DOM tracking for Contact Form 7 | 41 | 144 | 8 | 400 | | | Text Domain Mismatch |
| #4360 | ChatBot Conversational AI Support | 41 | 72 | 32 | 1k+ | | | Short PHP open tag found |
| #4361 | Checklist | 41 | 62 | 25 | 400 | | | Text Domain Mismatch |
| #4362 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | | | Unsafe printing function |
| #4363 | CloudGuard | 41 | 41 | 13 | 1k+ | | | Output is not escaped |
| #4364 | CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree | 41 | 121 | 96 | 50k+ | | | Unsafe printing function |
| #4365 | CoinPayments.net Payment Gateway for WooCommerce | 41 | 51 | 32 | 1k+ | | | Text Domain Mismatch |
| #4366 | Collapsed Archives | 41 | 54 | 4 | 1k+ | | | Output is not escaped |
| #4367 | Colorful Categories | 41 | 20 | 20 | 2k+ | | | Output is not escaped |
| #4368 | Comments Like Dislike | 41 | 172 | 20 | 5k+ | | | Non Singular String Literal Domain |
| #4369 | Contact Form 7 Captcha | 41 | 7 | 75 | 100k+ | | | Request data is not unslashed |
| #4370 | Contact Form 7 Widget | 41 | 70 | 4 | 2k+ | | | Output is not escaped |
| #4371 | Content Widget | 41 | 72 | 9 | 400 | | | Output is not escaped |
| #4372 | Contribuinte Checkout | 41 | 30 | 30 | 1k+ | | | Output is not escaped |
| #4373 | Controlled Admin Access | 41 | 22 | 40 | 10k+ | | | Nonce verification recommended |
| #4374 | Cookie Notice & Consent | 41 | 101 | 29 | 1k+ | | | Output is not escaped |
| #4375 | Simple Website Banner | 41 | 106 | 8 | 700 | | | Output is not escaped |
| #4376 | CurrencyConverter | 41 | 629 | 6 | 700 | | | Non Singular String Literal Domain |
| #4377 | Custom Meta | 41 | 23 | 29 | 700 | | | Output is not escaped |
| #4378 | Custom Post Type Cleanup | 41 | 70 | 12 | 1k+ | | | Output is not escaped |
| #4379 | Custom Recent Posts Widget | 41 | 63 | 4 | 1k+ | | | Output is not escaped |
| #4380 | Dashboard Notepad | 41 | 29 | 34 | 10k+ | | | Missing nonce verification |
| #4381 | Database for CF7 | 41 | 37 | 32 | 2k+ | | | Text Domain Mismatch |
| #4382 | Debug Bar | 41 | 64 | 25 | 20k+ | | | Output is not escaped |
| #4383 | Developer Loggers for Simple History | 41 | 46 | 28 | 400 | | | Text Domain Mismatch |
| #4384 | DevVN Local Store | 41 | 84 | 28 | 1k+ | | | Unsafe printing function |
| #4385 | Dinamize | 41 | 41 | 65 | 500 | | | Output is not escaped |
| #4386 | Disable Everything | 41 | 90 | 16 | 30k+ | | | Output is not escaped |
| #4387 | Disqus Conditional Load | 41 | 38 | 14 | 3k+ | | | Output is not escaped |
| #4388 | DigitalOcean Spaces Sync | 41 | 80 | 8 | 500 | | | Text Domain Mismatch |
| #4389 | Dropdown multisite selector | 41 | 82 | 13 | 1k+ | | | Unsafe printing function |
| #4390 | GDPR tools: Cookie notice + privacy | 41 | 67 | 8 | 6k+ | | | Unsafe printing function |
| #4391 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #4392 | Duplicate Post Page Menu & Custom Post Type | 41 | 35 | 11 | 10k+ | | | Text Domain Mismatch |
| #4393 | Duplicate Page and Post | 41 | 26 | 21 | 80k+ | | | Unsafe printing function |
| #4394 | Easy Random Quotes | 41 | 42 | 14 | 500 | | | Output is not escaped |
| #4395 | Edit Lock | 41 | 47 | 22 | 500 | | | Non Singular String Literal Domain |
| #4396 | Email Address Encoder | 41 | 109 | 8 | 100k+ | | | wp function not compatible with requires wp |
| #4397 | Embed Chessboard | 41 | 103 | 9 | 600 | | | Text Domain Mismatch |
| #4398 | Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam | 41 | 21 | 53 | 500 | | | Missing nonce verification |
| #4399 | Extra User Details | 41 | 84 | 15 | 1k+ | | | Non Singular String Literal Domain |
| #4400 | Fast Chat Button | 41 | 24 | 188 | 1k+ | | | Non-prefixed global variable |