| #6101 | Content Visibility for Divi Builder | 39 | 184 | 59 | 2k+ | | | Non Singular String Literal Domain |
| #6102 | Cookies for Comments | 39 | 22 | 29 | 20k+ | | | Input is not validated |
| #6103 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #6104 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #6105 | Custom Metadata Manager | 39 | 81 | 20 | 700 | | | Output is not escaped |
| #6106 | Custom Post Order | 39 | 14 | 32 | 400 | | | Input is not sanitized |
| #6107 | Custom Post Type Auto Menu | 39 | 54 | 33 | 500 | | | Text Domain Mismatch |
| #6108 | Custom Post Type Parents | 39 | 75 | 18 | 900 | | | Output is not escaped |
| #6109 | Custom Related Posts | 39 | 131 | 34 | 3k+ | | | Output is not escaped |
| #6110 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #6111 | Da Reactions | 39 | 15 | 140 | 400 | | | Request data is not unslashed |
| #6112 | Dashboard Cleaner | 39 | 40 | 91 | 500 | | | Missing nonce verification |
| #6113 | Datalogics Ecommerce Delivery – Datalogics | 39 | 13 | 115 | 500 | | | Nonce verification recommended |
| #6114 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #6115 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | | | Nonce verification recommended |
| #6116 | Drip for Gravity Forms | 39 | 41 | 21 | 500 | | | Unsafe printing function |
| #6117 | Dublin Core Metadata Generator | 39 | 74 | 15 | 900 | | | Output is not escaped |
| #6118 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #6119 | WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) | 39 | 165 | 24 | 700 | | | Unsafe printing function |
| #6120 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | | | Request data is not unslashed |
| #6121 | Editor Menu and Widget Access | 39 | 81 | 24 | 7k+ | | | Output is not escaped |
| #6122 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 800 | | | Text Domain Mismatch |
| #6123 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 39 | 73 | 350 | 1m+ | | | Non-prefixed global variable |
| #6124 | Email Marketing by EmailOctopus | 39 | 43 | 62 | 3k+ | | | Non-prefixed global variable |
| #6125 | Enhanced Admin Bar with Codex Search | 39 | 64 | 3 | 1k+ | | | Missing Arg Domain |
| #6126 | Events Manager – Zoom Integration | 39 | 141 | 43 | 700 | | | Output is not escaped |
| #6127 | BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress | 39 | 480 | 226 | 4k+ | | | Text Domain Mismatch |
| #6128 | FaniMani.pl | 39 | 103 | 11 | 600 | | | Output is not escaped |
| #6129 | Faster Image Insert | 39 | 94 | 26 | 2k+ | | | Output is not escaped |
| #6130 | Favorites | 39 | 187 | 123 | 10k+ | | | Unsafe printing function |
| #6131 | First Order Discount Woocommerce | 39 | 55 | 30 | 1k+ | | | Output is not escaped |
| #6132 | Fix Duplicates | 39 | 76 | 73 | 800 | | | Output is not escaped |
| #6133 | Flamix: Bitrix24 and WooCommerce Orders integration | 39 | 81 | 31 | 500 | | | Output is not escaped |
| #6134 | Flex Import | 39 | 15 | 140 | 500 | | | Non-prefixed global variable |
| #6135 | Floating Action Button | 39 | 164 | 69 | 1k+ | | | Unsafe printing function |
| #6136 | Gallery Widget | 39 | 122 | 11 | 500 | | | Output is not escaped |
| #6137 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #6138 | Genesis Dambuster | 39 | 94 | 67 | 3k+ | | | Output is not escaped |
| #6139 | GF Mollie by Indigo | 39 | 82 | 33 | 900 | | | Exception output is not escaped |
| #6140 | Gift Up Gift Cards for WordPress and WooCommerce | 39 | 94 | 60 | 5k+ | | | Output is not escaped |
| #6141 | GL Import External Images | 39 | 118 | 19 | 800 | | | wp function not compatible with requires wp |
| #6142 | Google Calendar Widget | 39 | 82 | 11 | 700 | | | Output is not escaped |
| #6143 | Prisna GWT – Google Website Translator | 39 | 117 | 77 | 8k+ | | | Text Domain Mismatch |
| #6144 | GoSMTP – SMTP for WordPress | 39 | 59 | 42 | 500k+ | | | Output is not escaped |
| #6145 | Graphina – Charts and Graphs For Elementor | 39 | 1,895 | 113 | 10k+ | | | Text Domain Mismatch |
| #6146 | Gravity Slider Fields | 39 | 56 | 36 | 2k+ | | | Text Domain Mismatch |
| #6147 | GS Only PDF Preview | 39 | 46 | 36 | 1k+ | | | Output is not escaped |
| #6148 | Gutenverse News – News Blocks for Blog & Magazine Sites | 39 | 37 | 65 | 800 | | | Non-prefixed hook name |
| #6149 | HD Quiz | 39 | 252 | 82 | 7k+ | | | Output is not escaped |
| #6150 | Hide My WP Lite | 39 | 24 | 62 | 400 | | | Nonce verification recommended |