| #6051 | BIP Pages | 39 | 98 | 25 | 400 | | | Short PHP open tag found |
| #6052 | Birds Custom Login | 39 | 196 | 23 | 4k+ | | | Non Singular String Literal Domain |
| #6053 | Blackhole for Bad Bots | 39 | 123 | 69 | 30k+ | | | Output is not escaped |
| #6054 | Block Editor Bootstrap Blocks | 39 | 173 | 50 | 900 | | | Text Domain Mismatch |
| #6055 | Blogger Importer Extended | 39 | 55 | 45 | 4k+ | | | Output is not escaped |
| #6056 | Bogo | 39 | 30 | 139 | 10k+ | | | Request data is not unslashed |
| #6057 | BOX NOW Delivery Croatia | 39 | 64 | 99 | 700 | | | Missing nonce verification |
| #6058 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #6059 | BuddyPress Default Cover Photo | 39 | 62 | 39 | 500 | | | Output is not escaped |
| #6060 | BuddyPress Notification Widget | 39 | 54 | 31 | 600 | | | Output is not escaped |
| #6061 | BugSnag Error Monitoring plugin | 39 | 52 | 96 | 2k+ | | | wp function not compatible with requires wp |
| #6062 | Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) | 39 | 16 | 47 | 10k+ | | | Request data is not unslashed |
| #6063 | Bulk NoIndex & NoFollow Toolkit | 39 | 72 | 172 | 2k+ | | | Nonce verification recommended |
| #6064 | Better WordPress External Links | 39 | 130 | 35 | 400 | | | Non Singular String Literal Domain |
| #6065 | Cache Images | 39 | 72 | 27 | 1k+ | | | Unsafe printing function |
| #6066 | Calculator Builder – Create an Online Calculator | 39 | 16 | 221 | 1k+ | | | Non-prefixed global variable |
| #6067 | CatFolders Document Gallery & PDF Library | 39 | 66 | 32 | 3k+ | | | Output is not escaped |
| #6068 | Saitama Addon Pack | 39 | 152 | 27 | 1k+ | | | Output is not escaped |
| #6069 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 600 | | | Missing Arg Domain |
| #6070 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #6071 | Configurable Tag Cloud (CTC) | 39 | 126 | 121 | 2k+ | | | Output is not escaped |
| #6072 | Constant Contact + WooCommerce | 39 | 27 | 91 | 1k+ | | | Nonce verification recommended |
| #6073 | Contact Form 7 – Dynamic Text Extension | 39 | 103 | 28 | 100k+ | | | Output is not escaped |
| #6074 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #6075 | Content Visibility for Divi Builder | 39 | 184 | 59 | 2k+ | | | Non Singular String Literal Domain |
| #6076 | Cookies for Comments | 39 | 22 | 29 | 20k+ | | | Input is not validated |
| #6077 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #6078 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #6079 | Custom Metadata Manager | 39 | 81 | 20 | 700 | | | Output is not escaped |
| #6080 | Custom Post Order | 39 | 14 | 32 | 400 | | | Input is not sanitized |
| #6081 | Custom Post Type Auto Menu | 39 | 54 | 33 | 500 | | | Text Domain Mismatch |
| #6082 | Custom Post Type Parents | 39 | 75 | 18 | 900 | | | Output is not escaped |
| #6083 | Custom Related Posts | 39 | 131 | 34 | 3k+ | | | Output is not escaped |
| #6084 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #6085 | Da Reactions | 39 | 15 | 140 | 400 | | | Request data is not unslashed |
| #6086 | Dashboard Cleaner | 39 | 40 | 91 | 500 | | | Missing nonce verification |
| #6087 | Datalogics Ecommerce Delivery – Datalogics | 39 | 13 | 115 | 500 | | | Nonce verification recommended |
| #6088 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #6089 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | | | Nonce verification recommended |
| #6090 | Drip for Gravity Forms | 39 | 41 | 21 | 500 | | | Unsafe printing function |
| #6091 | Dublin Core Metadata Generator | 39 | 74 | 15 | 900 | | | Output is not escaped |
| #6092 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #6093 | WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) | 39 | 165 | 24 | 700 | | | Unsafe printing function |
| #6094 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | | | Request data is not unslashed |
| #6095 | Editor Menu and Widget Access | 39 | 81 | 24 | 7k+ | | | Output is not escaped |
| #6096 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 800 | | | Text Domain Mismatch |
| #6097 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 39 | 73 | 350 | 1m+ | | | Non-prefixed global variable |
| #6098 | Email Marketing by EmailOctopus | 39 | 43 | 62 | 3k+ | | | Non-prefixed global variable |
| #6099 | Enhanced Admin Bar with Codex Search | 39 | 64 | 3 | 1k+ | | | Missing Arg Domain |
| #6100 | Events Manager – Zoom Integration | 39 | 141 | 43 | 700 | | | Output is not escaped |