| #5051 | Add-on WooCommerce – MailPoet 3 | 48 | 30 | 21 | 600 | | | Output is not escaped |
| #5052 | Mailster Live | 48 | 22 | 37 | 600 | | | Missing Translators Comment |
| #5053 | bxSlider integration for WordPress | 48 | 126 | 21 | 500 | | | Text Domain Mismatch |
| #5054 | Library Bookshelves | 48 | 12 | 59 | 500 | | | Nonce verification recommended |
| #5055 | Whitelist IP For Limit Login Attempts | 48 | 18 | 12 | 500 | | | Output is not escaped |
| #5056 | BP Simple Private | 48 | 19 | 12 | 500 | | | Output is not escaped |
| #5057 | Comment Notifier | 48 | 10 | 55 | 400 | | | Non-prefixed global variable |
| #5058 | AffiliateWP – Store Credit | 48 | 47 | 21 | 400 | | | Output is not escaped |
| #5059 | Contact Form 7 BWP reCAPTCHA Extension | 48 | 92 | 10 | 400 | | | Non Singular String Literal Domain |
| #5060 | MWW Disclaimer Buttons | 48 | 21 | 16 | 400 | | | Output is not escaped |
| #5061 | CookieFox – Cookie Notice | 48 | 14 | 19 | 400 | | | Output is not escaped |
| #5062 | Trust Payments Gateway for WooCommerce | 48 | 35 | 29 | 400 | | | Missing Translators Comment |
| #5063 | Simple Regenerate Slug | 48 | 18 | 6 | 400 | | | Unsafe printing function |
| #5064 | Simple Custom Post Order | 47 | 9 | 76 | 300k+ | | | Direct Query |
| #5065 | XML Sitemap & Google News | 47 | 270 | 224 | 100k+ | | | Non-prefixed global variable |
| #5066 | 3CX Free Live Chat, Calls & Messaging | 47 | 24 | 16 | 100k+ | | | Output is not escaped |
| #5067 | Real Media Library: Media Library Folder & File Manager | 47 | 1 | 365 | 100k+ | | | Direct Query |
| #5068 | Customizer Export/Import | 47 | 14 | 15 | 100k+ | | | Unsafe printing function |
| #5069 | Clear Cache for Me | 47 | 58 | 8 | 40k+ | | | Text Domain Mismatch |
| #5070 | Flying Pages: Preload Pages for Faster Navigation & Improved User Experience | 47 | 21 | 21 | 20k+ | | | Missing direct file access protection |
| #5071 | Delete Duplicate Posts | 47 | 9 | 50 | 10k+ | | | Direct Query |
| #5072 | Import Users from CSV | 47 | 33 | 12 | 10k+ | | | Unsafe printing function |
| #5073 | Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator | 47 | 44 | 83 | 10k+ | | | Missing direct file access protection |
| #5074 | Compress, Resize & Lazy Load Images – WPvivid Image Optimization | 47 | 107 | 58 | 10k+ | | | Missing direct file access protection |
| #5075 | Granular Controls For Elementor | 47 | 56 | 4 | 10k+ | | | Output is not escaped |
| #5076 | Website Article Monetization By MageNet | 47 | 17 | 24 | 10k+ | | | Output is not escaped |
| #5077 | G Meta Keywords | 47 | 31 | 8 | 10k+ | | | Unsafe printing function |
| #5078 | Cashfree for WooCommerce | 47 | 21 | 21 | 8k+ | | | Nonce verification recommended |
| #5079 | QuadLayers TikTok Feed | 47 | 78 | 52 | 7k+ | | | Text Domain Mismatch |
| #5080 | Log Emails | 47 | 19 | 29 | 6k+ | | | Non-prefixed global variable |
| #5081 | FSM Custom Featured Image Caption | 47 | 26 | 27 | 5k+ | | | Output is not escaped |
| #5082 | WP Custom Author URL | 47 | 16 | 38 | 5k+ | | | Non-prefixed global variable |
| #5083 | Tabby Checkout | 47 | 33 | 46 | 4k+ | | | Non-prefixed class |
| #5084 | Gateway AqayePardakht for Woocommerce | 47 | 72 | 23 | 4k+ | | | Text Domain Mismatch |
| #5085 | Verified Member for BuddyPress | 47 | 20 | 38 | 3k+ | | | Nonce verification recommended |
| #5086 | Restore PayPal Standard for WooCommerce | 47 | 19 | 53 | 3k+ | | | Nonce verification recommended |
| #5087 | Product Categories/Tags Bottom Description for WooCommerce | 47 | 60 | 23 | 3k+ | | | Text Domain Mismatch |
| #5088 | Simple Client Dashboard | 47 | 38 | 36 | 2k+ | | | Missing direct file access protection |
| #5089 | Userback | 47 | 13 | 20 | 2k+ | | | Output is not escaped |
| #5090 | Show IDs by Echo | 47 | 21 | 13 | 2k+ | | | Output is not escaped |
| #5091 | Auto Focus Keyword for SEO | 47 | 13 | 44 | 2k+ | | | Interpolated SQL is not prepared |
| #5092 | iControlWP | 47 | 45 | 59 | 1k+ | | | Missing direct file access protection |
| #5093 | Simple Popup Plugin | 47 | 53 | 5 | 1k+ | | | Output is not escaped |
| #5094 | Groups 404 Redirect | 47 | 35 | 33 | 1k+ | | | Non Singular String Literal Domain |
| #5095 | Post Status Notifications | 47 | 98 | 41 | 1k+ | | | Text Domain Mismatch |
| #5096 | DPO Pay for WooCommerce | 47 | 28 | 41 | 1k+ | | | Non Singular String Literal Text |
| #5097 | Do Shortcodes for Rank Math SEO | 47 | 117 | 3 | 1k+ | | | Output is not escaped |
| #5098 | SportsPress for Baseball | 47 | 113 | 34 | 900 | | | Text Domain Mismatch |
| #5099 | WP Prefix Changer | 47 | 27 | 16 | 900 | | | Missing Arg Domain |
| #5100 | Better Usability for WooCommerce | 47 | 30 | 93 | 800 | | | Non-prefixed hook name |