| #6601 | Plugin Name: Traffic Stats Widget Plugin | 38 | 69 | 107 | 600 | | | Output is not escaped |
| #6602 | Stock Quotes List | 38 | 72 | 13 | 600 | | | Output is not escaped |
| #6603 | Beauty Form Styler for Gravity Forms | 38 | 70 | 93 | 600 | | | Output is not escaped |
| #6604 | Aplazame | 38 | 34 | 39 | 600 | | | Non-prefixed global variable |
| #6605 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |
| #6606 | Darkify – Dark Mode & Night Mode for Website & Admin (Dark Theme Included) | 38 | 38 | 183 | 600 | | | Non-prefixed global variable |
| #6607 | WP Hebrew Date | 38 | 102 | 13 | 600 | | | Output is not escaped |
| #6608 | TRUENDO | GDPR Compliant Cookie Manager | 38 | 98 | 38 | 600 | | | Output is not escaped |
| #6609 | Front-end Editor | 38 | 78 | 62 | 500 | | | Output is not escaped |
| #6610 | Alphabetic Pagination | 38 | 144 | 117 | 500 | | | Unsafe printing function |
| #6611 | Jock On Air Now (JOAN) | 38 | 121 | 224 | 500 | | | Output is not escaped |
| #6612 | Twiget Twitter Widget | 38 | 147 | 36 | 500 | | | Output is not escaped |
| #6613 | Standout CSS3 Buttons | 38 | 183 | 15 | 500 | | | Output is not escaped |
| #6614 | Group chat for WordPress – Minnit Chat | 38 | 39 | 65 | 500 | | | Non-prefixed global variable |
| #6615 | Stock Market News | 38 | 71 | 11 | 500 | | | Output is not escaped |
| #6616 | WP Team – WordPress Team Member Plugin | 38 | 537 | 36 | 500 | | | Text Domain Mismatch |
| #6617 | Classic Editor Plus – WordPress Classic Editor plugin by Felix | 38 | 83 | 42 | 500 | | | Text Domain Mismatch |
| #6618 | Great Caroussel | 38 | 60 | 131 | 500 | | | SQL query is not prepared |
| #6619 | Simple Expires | 38 | 32 | 39 | 500 | | | Non Singular String Literal Domain |
| #6620 | WP Mail SMTP SendGrid Edition | 38 | 102 | 19 | 500 | | | Text Domain Mismatch |
| #6621 | Visual Admin Customizer | 38 | 20 | 51 | 500 | | | Input is not sanitized |
| #6622 | Responsive Mailform ( Plugin Version ) – easy, responsive, contact, mailform | 38 | 120 | 107 | 500 | | | Output is not escaped |
| #6623 | YouTube widget | 38 | 39 | 25 | 400 | | | Output is not escaped |
| #6624 | WP Page Templates | 38 | 92 | 28 | 400 | | | Non Singular String Literal Domain |
| #6625 | AK Featured Post Widget | 38 | 135 | 4 | 400 | | | Output is not escaped |
| #6626 | PopCash Code Integration Tool | 38 | 77 | 109 | 400 | | | Nonce verification recommended |
| #6627 | Import to Photo Gallery from NextGen gallery | 38 | 80 | 83 | 400 | | | Direct Query |
| #6628 | qTranslate META | 38 | 88 | 26 | 400 | | | Output is not escaped |
| #6629 | Chatbox Manager | 38 | 855 | 78 | 400 | | | Output is not escaped |
| #6630 | Slickplan Importer | 38 | 40 | 58 | 400 | | | Non-prefixed global variable |
| #6631 | Trackserver | 38 | 17 | 356 | 400 | | | Input is not sanitized |
| #6632 | RDP Wiki Embed | 38 | 69 | 26 | 400 | | | Output is not escaped |
| #6633 | Invoice123 | 38 | 139 | 88 | 400 | | | Text Domain Mismatch |
| #6634 | TopList.cz | 38 | 138 | 7 | 400 | | | Output is not escaped |
| #6635 | country-redirect | 38 | 58 | 19 | 400 | | | Text Domain Mismatch |
| #6636 | Audio Story Images | 38 | 46 | 44 | 400 | | | Output is not escaped |
| #6637 | Ultimate Member Widgets for Elementor – Login Form, Register Form & User Directory | 38 | 17 | 110 | 400 | | | Non-prefixed namespace |
| #6638 | Car Route Planner Plugin | 38 | 135 | 17 | 400 | | | Output is not escaped |
| #6639 | Swiper Js Slider | 38 | 125 | 35 | 400 | | | Output is not escaped |
| #6640 | Coding Chicken – JetEngine Importer | 38 | 55 | 29 | 400 | | | Missing direct file access protection |
| #6641 | WP Redirects – Contact Form 7 | 38 | 50 | 71 | 400 | | | Unsafe printing function |
| #6642 | XML Sitemap Generator for Google | 37 | 43 | 79 | 1m+ | | | Input is not validated |
| #6643 | Google for WooCommerce | 37 | 328 | 121 | 800k+ | | | Exception output is not escaped |
| #6644 | WooCommerce PayPal Payments | 37 | 194 | 110 | 800k+ | | | Exception output is not escaped |
| #6645 | Simple Custom CSS and JS | 37 | 168 | 69 | 600k+ | | | Output is not escaped |
| #6646 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #6647 | AddToAny Share Buttons | 37 | 123 | 164 | 300k+ | | | Unsafe printing function |
| #6648 | Max Mega Menu | 37 | 249 | 174 | 300k+ | | | Output is not escaped |
| #6649 | Call Now Button – The #1 Click to Call Button for WordPress | 37 | 1,273 | 5 | 200k+ | | | Exception output is not escaped |
| #6650 | Recent Posts Widget With Thumbnails | 37 | 222 | 46 | 100k+ | | | Output is not escaped |