| #6401 | Mega Elements – Addons for Elementor | 38 | 170 | 57 | 10k+ | | | Output is not escaped |
| #6402 | WP-ServerInfo | 38 | 162 | 55 | 10k+ | | | Output is not escaped |
| #6403 | Maintenance Redirect | 38 | 244 | 132 | 10k+ | | | Missing Arg Domain |
| #6404 | Before After Image Comparison Slider for Elementor | 38 | 63 | 36 | 10k+ | | | Text Domain Mismatch |
| #6405 | Vietnam Checkout for WooCommerce | 38 | 93 | 137 | 10k+ | | | Nonce verification recommended |
| #6406 | CC Child Pages | 38 | 63 | 152 | 9k+ | | | Non-prefixed global variable |
| #6407 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #6408 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | | | Unsafe printing function |
| #6409 | WP-Ban | 38 | 99 | 108 | 8k+ | | | Unsafe printing function |
| #6410 | Attachments | 38 | 238 | 66 | 8k+ | | | Unsafe printing function |
| #6411 | MimeTypes Link Icons | 38 | 53 | 34 | 8k+ | | | Output is not escaped |
| #6412 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | | | Text Domain Mismatch |
| #6413 | SRS Simple Hits Counter | 38 | 43 | 98 | 8k+ | | | Output is not escaped |
| #6414 | Autologin Links | 38 | 73 | 74 | 8k+ | | | Output is not escaped |
| #6415 | TypePad emoji for TinyMCE | 38 | 100 | 24 | 8k+ | | | Text Domain Mismatch |
| #6416 | Schema App Structured Data | 38 | 35 | 86 | 7k+ | | | Nonce verification recommended |
| #6417 | Checkout Files Upload for WooCommerce | 38 | 57 | 120 | 7k+ | | | Input is not sanitized |
| #6418 | Database for Contact Form 7 | 38 | 34 | 128 | 7k+ | | | Missing nonce verification |
| #6419 | Responsive WordPress Slider – HG Slider | 38 | 67 | 75 | 7k+ | | | Missing nonce verification |
| #6420 | GiveWP Donation Widgets for Elementor | 38 | 483 | 13 | 7k+ | | | Text Domain Mismatch |
| #6421 | Announce from the Dashboard | 38 | 138 | 24 | 7k+ | | | Non Singular String Literal Domain |
| #6422 | Illdy Companion | 38 | 187 | 23 | 6k+ | | | Output is not escaped |
| #6423 | Chatbot for WordPress by Collect.chat ⚡️ | 38 | 58 | 36 | 6k+ | | | Unsafe printing function |
| #6424 | Export User Data | 38 | 187 | 62 | 6k+ | | | Text Domain Mismatch |
| #6425 | HashThemes Demo Importer | 38 | 71 | 44 | 6k+ | | | Output is not escaped |
| #6426 | SoftTech-IT bKash, Rocket, Nagad | 38 | 164 | 81 | 6k+ | | | Text Domain Mismatch |
| #6427 | Multiple Domain Mapping on Single Site | 38 | 135 | 51 | 6k+ | | | Text Domain Mismatch |
| #6428 | Admin Management Xtended | 38 | 280 | 161 | 5k+ | | | Output is not escaped |
| #6429 | Colorlib 404 Customizer | 38 | 65 | 15 | 5k+ | | | Missing direct file access protection |
| #6430 | Vertical News Scroller | 38 | 118 | 60 | 5k+ | | | Output is not escaped |
| #6431 | WP Content Copy Protection with Color Design | 38 | 96 | 61 | 5k+ | | | Non Singular String Literal Domain |
| #6432 | Datafeedr WooCommerce Importer | 38 | 112 | 56 | 5k+ | | | Text Domain Mismatch |
| #6433 | Product Badge, Label, Countdown Timer for WooCommerce – Sale Booster | 38 | 37 | 102 | 5k+ | | | Interpolated SQL is not prepared |
| #6434 | Monetag Official Plugin | 38 | 133 | 32 | 5k+ | | | Text Domain Mismatch |
| #6435 | Elemailer Lite – Elementor email template & campaign builder | 38 | 44 | 50 | 5k+ | | | Output is not escaped |
| #6436 | Advanced Media Offloader | 38 | 57 | 94 | 5k+ | | | error log error log |
| #6437 | SOGO Accessibility | 38 | 147 | 40 | 5k+ | | | Non Singular String Literal Domain |
| #6438 | mb.miniAudioPlayer – an HTML5 audio player for your mp3 files | 38 | 204 | 6 | 4k+ | | | Unsafe printing function |
| #6439 | Advanced Product Search For WooCommerce | 38 | 160 | 38 | 4k+ | | | Text Domain Mismatch |
| #6440 | Restrict Widgets | 38 | 135 | 40 | 4k+ | | | Non Singular String Literal Domain |
| #6441 | WPC Product Options for WooCommerce | 38 | 57 | 182 | 4k+ | | | Non-prefixed global variable |
| #6442 | Simple JWT Login – Allows you to use JWT on REST endpoints. | 38 | 712 | 95 | 4k+ | | | Output is not escaped |
| #6443 | JC Submenu | 38 | 279 | 32 | 4k+ | | | Output is not escaped |
| #6444 | Author Category | 38 | 85 | 25 | 4k+ | | | Output is not escaped |
| #6445 | Weather Underground | 38 | 64 | 27 | 3k+ | | | Output is not escaped |
| #6446 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 115 | 46 | 3k+ | | | Output is not escaped |
| #6447 | Lightning Advanced Unit | 38 | 189 | 27 | 3k+ | | | Output is not escaped |
| #6448 | Name Directory | 38 | 520 | 309 | 3k+ | | | Output is not escaped |
| #6449 | Product Compare for WooCommerce | 38 | 55 | 191 | 3k+ | | | Non-prefixed global variable |
| #6450 | One page checkout and layouts for woocommerce | 38 | 83 | 52 | 3k+ | | | Non-prefixed global variable |