| #4551 | WP Media folders | 41 | 19 | 74 | 3k+ | | | Direct Query |
| #4552 | WP Modal Popup with Cookie Integration | 41 | 88 | 13 | 1k+ | | | Unsafe printing function |
| #4553 | Pledged Plugins PCI Gateway for NMI and WooCommerce | 41 | 160 | 42 | 3k+ | | | Text Domain Mismatch |
| #4554 | WP Permalink Translator | 41 | 34 | 21 | 2k+ | | | Unsafe printing function |
| #4555 | WP Router | 41 | 29 | 13 | 800 | | | Exception output is not escaped |
| #4556 | WP Test Email | 41 | 32 | 28 | 20k+ | | | Unsafe printing function |
| #4557 | User Login Notifier for WordPress | 41 | 72 | 26 | 1k+ | | | Output is not escaped |
| #4558 | WPS Hide Login | 41 | 34 | 72 | 2m+ | | | Nonce verification recommended |
| #4559 | Export WooCommerce Orders, Products, Customers & Coupons to Google Sheets | 41 | 45 | 35 | 700 | | | Output is not escaped |
| #4560 | Simple Accessibility Button | 41 | 33 | 171 | 900 | | | Non-prefixed global variable |
| #4561 | Z-Credit Checkout – WooCommerce Payment Gateway | 41 | 151 | 22 | 1k+ | | | Text Domain Mismatch |
| #4562 | Zilla Portfolio | 41 | 139 | 15 | 400 | | | Text Domain Mismatch |
| #4563 | Pricing Table – Responsive & Easy | 42 | 117 | 148 | 3k+ | | | Non-prefixed global variable |
| #4564 | ActiveTrail – Contact Form 7 | 42 | 18 | 85 | 600 | | | Missing nonce verification |
| #4565 | Add to Cart Button Custom Text | 42 | 98 | 4 | 10k+ | | | Text Domain Mismatch |
| #4566 | Add to Home Screen & Progressive Web App | 42 | 23 | 68 | 1k+ | | | Request data is not unslashed |
| #4567 | Admin Options Pages | 42 | 3 | 284 | 500 | | | Nonce verification recommended |
| #4568 | Advanced FAQ Manager | 42 | 9 | 59 | 2k+ | | | Input is not sanitized |
| #4569 | Affiliate Link Tracker | 42 | 24 | 49 | 400 | | | Request data is not unslashed |
| #4570 | Agoda Affiliate Partners Text Link Generator | 42 | 4 | 40 | 500 | | | Interpolated SQL is not prepared |
| #4571 | Post Grid Master — Post Grids & AJAX Filters | 42 | 44 | 115 | 1k+ | | | Non-prefixed global variable |
| #4572 | All-in-one Like Widget | 42 | 165 | 2 | 1k+ | | | Text Domain Mismatch |
| #4573 | Open Currency Converter | 42 | 59 | 19 | 1k+ | | | Unsafe printing function |
| #4574 | Asesor de Cookies RGPD para normativa europea | 42 | 27 | 32 | 20k+ | | | Missing nonce verification |
| #4575 | Automatic NBSP | 42 | 24 | 16 | 3k+ | | | Output is not escaped |
| #4576 | AweSplash – Just Splash Page | 42 | 39 | 34 | 500 | | | Output is not escaped |
| #4577 | 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 | 42 | 17 | 38 | 2k+ | | | Input is not sanitized |
| #4578 | Basic SEO Pack | 42 | 86 | 8 | 700 | | | Output is not escaped |
| #4579 | Bazz CallBack widget | 42 | 51 | 22 | 3k+ | | | Unsafe printing function |
| #4580 | Block Temporary Email | 42 | 33 | 13 | 500 | | | Unsafe printing function |
| #4581 | Booking.com Official Search Box | 42 | 36 | 32 | 2k+ | | | Output is not escaped |
| #4582 | BP Auto Group Join | 42 | 55 | 55 | 700 | | | Output is not escaped |
| #4583 | Bulk Change Media Author | 42 | 25 | 20 | 2k+ | | | Unsafe printing function |
| #4584 | CCAvenue Payment Gateway for WooCommerce | 42 | 53 | 40 | 3k+ | | | Text Domain Mismatch |
| #4585 | Custom Spinner for Contact Form 7 | 42 | 36 | 11 | 1k+ | | | Output is not escaped |
| #4586 | HTML Template for CF7 | 42 | 21 | 27 | 1k+ | | | Non-prefixed global variable |
| #4587 | Change Background Color for Pages, Posts, Widgets | 42 | 35 | 7 | 500 | | | Text Domain Mismatch |
| #4588 | Chartbeat | 42 | 33 | 18 | 1k+ | | | Output is not escaped |
| #4589 | Cities Shipping Zones for WooCommerce | 42 | 94 | 44 | 4k+ | | | Text Domain Mismatch |
| #4590 | Clover Payments for WooCommerce | 42 | 25 | 15 | 2k+ | | | Exception output is not escaped |
| #4591 | Comment Blacklist Updater | 42 | 45 | 15 | 1k+ | | | Output is not escaped |
| #4592 | Comment Reply Email | 42 | 21 | 23 | 500 | | | Unsafe printing function |
| #4593 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | | | Unsafe printing function |
| #4594 | Confetti | 42 | 136 | 17 | 3k+ | | | Unsafe printing function |
| #4595 | Contact Form 7 add confirm | 42 | 31 | 51 | 50k+ | | | Text Domain Mismatch |
| #4596 | Contador de Visitas | 42 | 37 | 25 | 500 | | | SQL query is not prepared |
| #4597 | Cookie Notify | 42 | 15 | 54 | 400 | | | Input is not validated |
| #4598 | CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | 42 | 33 | 49 | 3k+ | | | Output is not escaped |
| #4599 | Cronjob Scheduler | 42 | 20 | 36 | 1k+ | | | Input is not sanitized |
| #4600 | Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin | 42 | 472 | 181 | 400 | | | Text Domain Mismatch |