| #5851 | Gravity Forms Data Persistence Add-On Reloaded | 40 | 14 | 38 | 700 | | | Input is not sanitized |
| #5852 | Header Footer Custom Html | 40 | 95 | 22 | 1k+ | | | Unsafe printing function |
| #5853 | Header Promo – Show Top Bar Message or Call to Action | 40 | 472 | 45 | 400 | | | Output is not escaped |
| #5854 | heatmap for WordPress – Realtime analytics | 40 | 94 | 15 | 1k+ | | | Non Singular String Literal Domain |
| #5855 | WP Armour – Honeypot Anti Spam | 40 | 54 | 66 | 400k+ | | | Missing nonce verification |
| #5856 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 45 | 1m+ | | | Direct Query |
| #5857 | I Agree! Popups | 40 | 54 | 46 | 600 | | | Output is not escaped |
| #5858 | iCalendrier | 40 | 65 | 7 | 700 | | | Output is not escaped |
| #5859 | If Widget – Visibility control for Widgets | 40 | 99 | 25 | 1k+ | | | Unsafe printing function |
| #5860 | IFrame Widget | 40 | 87 | 1 | 500 | | | Output is not escaped |
| #5861 | Image Editor by Pixo | 40 | 126 | 66 | 800 | | | Output is not escaped |
| #5862 | iNext Woo Pincode Checker | 40 | 36 | 82 | 700 | | | Missing nonce verification |
| #5863 | Correios Automático – Rastreio, Frete, Etiqueta, Declaração e Devolução | 40 | 32 | 56 | 4k+ | | | Non-prefixed global variable |
| #5864 | Interactive US Map | 40 | 136 | 54 | 400 | | | Text Domain Mismatch |
| #5865 | Internal Linking of Related Contents | 40 | 714 | 47 | 1k+ | | | Output is not escaped |
| #5866 | Invite Anyone | 40 | 32 | 130 | 1k+ | | | Non-prefixed hook name |
| #5867 | Quotes Addon for GetPaid | 40 | 191 | 21 | 700 | | | Text Domain Mismatch |
| #5868 | JSM Show Order Metadata for WooCommerce HPOS | 40 | 17 | 64 | 700 | | | Nonce verification recommended |
| #5869 | JSM Show Post Metadata | 40 | 15 | 66 | 10k+ | | | Nonce verification recommended |
| #5870 | JSM Show Term Metadata | 40 | 14 | 64 | 900 | | | Nonce verification recommended |
| #5871 | JSM Show User Metadata | 40 | 14 | 64 | 3k+ | | | Nonce verification recommended |
| #5872 | La Sentinelle antispam | 40 | 88 | 46 | 3k+ | | | Output is not escaped |
| #5873 | Flag Icons | 40 | 300 | 19 | 3k+ | | | Output is not escaped |
| #5874 | Social Like Box and Page by WpDevArt | 40 | 62 | 24 | 5k+ | | | Output is not escaped |
| #5875 | Limit Login Attempts | 40 | 81 | 38 | 300k+ | | | Output is not escaped |
| #5876 | Links shortcode | 40 | 73 | 13 | 900 | | | Unsafe printing function |
| #5877 | Listdomer Core | 40 | 45 | 92 | 400 | | | Non-prefixed global variable |
| #5878 | WP All Import – Listings Import for Listify | 40 | 34 | 27 | 400 | | | Output is not escaped |
| #5879 | LJ Multi Column Archive | 40 | 17 | 25 | 1k+ | | | Output is not escaped |
| #5880 | LLM Bot Tracker – AI Crawler Detection & Analytics | 40 | 18 | 90 | 700 | | | Database parameter is not escaped |
| #5881 | Loan Comparison | 40 | 27 | 192 | 400 | | | Request data is not unslashed |
| #5882 | Logbook | 40 | 33 | 59 | 1k+ | | | Nonce verification recommended |
| #5883 | WPO365 | Mail Integration for Office 365 / Outlook | 40 | 59 | 27 | 2k+ | | | Output is not escaped |
| #5884 | MailerSend – Official SMTP Integration | 40 | 39 | 25 | 2k+ | | | Unsafe printing function |
| #5885 | Manual Image Crop | 40 | 178 | 61 | 8k+ | | | Output is not escaped |
| #5886 | Mark New Posts | 40 | 61 | 39 | 500 | | | Non Singular String Literal Domain |
| #5887 | MAS Company Reviews For WP Job Manager | 40 | 44 | 71 | 1k+ | | | Output is not escaped |
| #5888 | Mass Email To Users | 40 | 84 | 81 | 800 | | | Output is not escaped |
| #5889 | MembershipWorks – Membership, Events & Directory | 40 | 41 | 29 | 2k+ | | | Output is not escaped |
| #5890 | Mobile Contact Line | 40 | 39 | 355 | 1k+ | | | Non-prefixed global variable |
| #5891 | WP Mobile Redirect | 40 | 44 | 20 | 400 | | | Text Domain Mismatch |
| #5892 | Modal Window – create popup modal window | 40 | 4 | 170 | 10k+ | | | Non-prefixed global variable |
| #5893 | Monkeyman Rewrite Analyzer | 40 | 89 | 10 | 2k+ | | | Non Singular String Literal Domain |
| #5894 | 코드엠샵 소셜톡 | 40 | 47 | 36 | 400 | | | Output is not escaped |
| #5895 | Multiple Featured Images | 40 | 50 | 22 | 5k+ | | | Output is not escaped |
| #5896 | My Social Feeds – Social Feeds Embedder Plugin for WP | 40 | 8 | 77 | 400 | | | Request data is not unslashed |
| #5897 | Flying Images: Optimize and Lazy Load Images for Faster Page Speed | 40 | 32 | 58 | 3k+ | | | Missing direct file access protection |
| #5898 | NextGEN Gallery Sidebar Widget | 40 | 59 | 10 | 500 | | | Output is not escaped |
| #5899 | No-Bot Registration | 40 | 112 | 42 | 2k+ | | | Unsafe printing function |
| #5900 | No CAPTCHA reCAPTCHA | 40 | 112 | 26 | 4k+ | | | Text Domain Mismatch |