| #6351 | Library Viewer | 39 | 65 | 93 | 400 | | | Non-prefixed hook name |
| #6352 | AWEOS WP Lock | 39 | 24 | 53 | 400 | | | Output is not escaped |
| #6353 | Page List Widget | 39 | 150 | 6 | 400 | | | Output is not escaped |
| #6354 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #6355 | Paystack Add-On for Gravity Forms | 39 | 96 | 31 | 400 | | | Text Domain Mismatch |
| #6356 | Manage Enrollment for LearnDash | 39 | 48 | 79 | 400 | | | Unsafe printing function |
| #6357 | involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups | 39 | 158 | 32 | 400 | | | Text Domain Mismatch |
| #6358 | WP Sitemap Control | 39 | 31 | 37 | 400 | | | Output is not escaped |
| #6359 | BeGateway Payment Gateway for WooCommerce | 39 | 57 | 44 | 400 | | | Unsafe printing function |
| #6360 | BIP Pages | 39 | 98 | 25 | 400 | | | Short PHP open tag found |
| #6361 | Slider Text Scroll | 39 | 95 | 52 | 400 | | | Text Domain Mismatch |
| #6362 | One Click Demo Import | 38 | 22 | 84 | 1m+ | | | Non-prefixed global variable |
| #6363 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | | Non-prefixed hook name |
| #6364 | Activity Log – Monitor & Record User Changes | 38 | 81 | 149 | 200k+ | | | Nonce verification recommended |
| #6365 | Page Links To | 38 | 31 | 40 | 100k+ | | | Unsafe printing function |
| #6366 | Email Encoder – Protect Email Addresses and Phone Numbers | 38 | 9 | 150 | 90k+ | | | Non-prefixed global variable |
| #6367 | Insert PHP Code Snippet | 38 | 164 | 227 | 90k+ | | | Output is not escaped |
| #6368 | Termly – GDPR/CCPA Cookie Consent Banner | 38 | 54 | 92 | 80k+ | | | Non-prefixed global variable |
| #6369 | 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | 38 | 353 | 77 | 80k+ | | | Non Singular String Literal Domain |
| #6370 | OneSignal – Web Push Notifications | 38 | 53 | 64 | 70k+ | | | Output is not escaped |
| #6371 | Jupiter X Core | 38 | 71 | 767 | 70k+ | | | Non-prefixed global variable |
| #6372 | Blogger Importer | 38 | 44 | 39 | 50k+ | | | Output is not escaped |
| #6373 | Category Posts Widget | 38 | 153 | 26 | 40k+ | | | Output is not escaped |
| #6374 | Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds | 38 | 167 | 82 | 40k+ | | | Output is not escaped |
| #6375 | Crop-Thumbnails | 38 | 33 | 27 | 40k+ | | | Missing direct file access protection |
| #6376 | ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More | 38 | 20 | 89 | 30k+ | | | Direct Query |
| #6377 | WP Video Lightbox | 38 | 107 | 67 | 30k+ | | | Unsafe printing function |
| #6378 | WP 404 Auto Redirect to Similar Post | 38 | 166 | 48 | 30k+ | | | Text Domain Mismatch |
| #6379 | CF7 to Webhook | 38 | 102 | 72 | 30k+ | | | Unsafe printing function |
| #6380 | Action Scheduler | 38 | 92 | 134 | 20k+ | | | Exception output is not escaped |
| #6381 | Any Mobile Theme Switcher | 38 | 69 | 59 | 20k+ | | | Output is not escaped |
| #6382 | Tag Manager – Header, Body And Footer | 38 | 97 | 319 | 20k+ | | | Non-prefixed global variable |
| #6383 | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 38 | 344 | 30 | 20k+ | | | Text Domain Mismatch |
| #6384 | LWS Cleaner | 38 | 81 | 129 | 20k+ | | | Direct Query |
| #6385 | AccessibleWP – Accessibility Toolbar | 38 | 381 | 26 | 20k+ | | | Text Domain Mismatch |
| #6386 | Flexy Breadcrumb | 38 | 241 | 13 | 20k+ | | | Output is not escaped |
| #6387 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | | | Output is not escaped |
| #6388 | Responsive Starter Templates – Elementor Templates & Starter Sites | 38 | 48 | 322 | 10k+ | | | Non-prefixed global variable |
| #6389 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 4 | 252 | 10k+ | | | Dynamic hook name |
| #6390 | Native PHP Sessions | 38 | 30 | 92 | 10k+ | | | Direct Query |
| #6391 | Shapely Companion | 38 | 49 | 39 | 10k+ | | | Output is not escaped |
| #6392 | jQuery Pin It Button for Images | 38 | 129 | 36 | 10k+ | | | Output is not escaped |
| #6393 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #6394 | Photo Reviews for WooCommerce | 38 | 26 | 222 | 10k+ | | | Request data is not unslashed |
| #6395 | Responsive Pricing Table | 38 | 309 | 105 | 10k+ | | | Non Singular String Literal Domain |
| #6396 | Afterpay Gateway for WooCommerce | 38 | 183 | 62 | 10k+ | | | Text Domain Mismatch |
| #6397 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #6398 | ShiftNav – Responsive Mobile Menu | 38 | 249 | 35 | 10k+ | | | Text Domain Mismatch |
| #6399 | Social Icons | 38 | 72 | 83 | 10k+ | | | Output is not escaped |
| #6400 | White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard | 38 | 205 | 31 | 10k+ | | | Output is not escaped |