| #6651 | Page scroll to id | 37 | 38 | 120 | 100k+ | | | Missing nonce verification |
| #6652 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,894 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #6653 | Tracking Code Manager | 37 | 55 | 42 | 90k+ | | | Output is not escaped |
| #6654 | List category posts | 37 | 161 | 17 | 80k+ | | | Output is not escaped |
| #6655 | Async JavaScript | 37 | 357 | 79 | 70k+ | | | Unsafe printing function |
| #6656 | Add From Server | 37 | 52 | 20 | 60k+ | | | Output is not escaped |
| #6657 | Phoenix Media Rename | 37 | 180 | 104 | 50k+ | | | Output is not escaped |
| #6658 | CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor | 37 | 47 | 90 | 40k+ | | | Dynamic hook name |
| #6659 | Adapta RGPD | 37 | 349 | 72 | 40k+ | | | Text Domain Mismatch |
| #6660 | Customize WordPress Emails and Alerts – Better Notifications for WP | 37 | 64 | 47 | 30k+ | | | Missing Arg Domain |
| #6661 | Site Offline Or Coming Soon Or Maintenance Mode | 37 | 127 | 138 | 30k+ | | | Unsafe printing function |
| #6662 | PiWeb Live sales notification for WooCommerce | 37 | 289 | 77 | 30k+ | | | Text Domain Mismatch |
| #6663 | LearnPress – Course Review | 37 | 67 | 43 | 20k+ | | | Output is not escaped |
| #6664 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #6665 | Rich Table of Contents | 37 | 262 | 57 | 20k+ | | | Output is not escaped |
| #6666 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | | | Output is not escaped |
| #6667 | Zendesk Chat | 37 | 44 | 67 | 10k+ | | | Output is not escaped |
| #6668 | WP VR – 360 Panorama and Virtual Tour Builder | 37 | 3 | 275 | 10k+ | | | Non-prefixed hook name |
| #6669 | Pricing Table WordPress Plugin – Easy Pricing Tables | 37 | 332 | 161 | 10k+ | | | Output is not escaped |
| #6670 | Gmail SMTP | 37 | 85 | 71 | 10k+ | | | Unsafe printing function |
| #6671 | OSM – OpenStreetMap | 37 | 130 | 64 | 10k+ | | | Output is not escaped |
| #6672 | bunny.net – WordPress CDN Plugin | 37 | 165 | 159 | 10k+ | | | Output is not escaped |
| #6673 | Amazon Pay for WooCommerce | 37 | 29 | 117 | 10k+ | | | Non-prefixed class |
| #6674 | Orders Tracking for WooCommerce | 37 | 7 | 312 | 10k+ | | | Request data is not unslashed |
| #6675 | Variation Swatches for WooCommerce | 37 | 92 | 103 | 10k+ | | | Output is not escaped |
| #6676 | SendWP | 37 | 47 | 42 | 10k+ | | | Output is not escaped |
| #6677 | HandL UTM Grabber / Tracker | 37 | 36 | 152 | 10k+ | | | Missing nonce verification |
| #6678 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | | | Non-prefixed class |
| #6679 | Login by Auth0 | 37 | 307 | 82 | 10k+ | | | Text Domain Mismatch |
| #6680 | Custom Post Template | 37 | 48 | 30 | 10k+ | | | Output is not escaped |
| #6681 | WPO365 | MICROSOFT 365 GRAPH MAILER | 37 | 112 | 83 | 10k+ | | | Text Domain Mismatch |
| #6682 | Metorik – Reports & Email Automation for WooCommerce | 37 | 75 | 70 | 10k+ | | | Output is not escaped |
| #6683 | PNG to JPG | 37 | 130 | 173 | 10k+ | | | Interpolated SQL is not prepared |
| #6684 | Advanced Accordion Gutenberg Block – Create Beautiful FAQs, Content Accordions & Interactive Tabs | 37 | 39 | 36 | 10k+ | | | Missing direct file access protection |
| #6685 | Scroll Back To Top | 37 | 149 | 12 | 10k+ | | | Output is not escaped |
| #6686 | Bellows Accordion Menu | 37 | 160 | 28 | 10k+ | | | Text Domain Mismatch |
| #6687 | Conditional Discounts for WooCommerce – A simple yet complete woocommerce dynamic pricing plugin | 37 | 99 | 33 | 9k+ | | | Text Domain Mismatch |
| #6688 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | | | Non-prefixed global variable |
| #6689 | ReCaptcha Integration for WordPress | 37 | 60 | 66 | 9k+ | | | Output is not escaped |
| #6690 | Images to WebP | 37 | 39 | 50 | 9k+ | | | curl curl setopt |
| #6691 | Exploit Scanner | 37 | 25 | 130 | 8k+ | | | Non-prefixed global variable |
| #6692 | Add to Cart Redirect for WooCommerce | 37 | 215 | 141 | 8k+ | | | Text Domain Mismatch |
| #6693 | LiveJournal Importer | 37 | 86 | 67 | 8k+ | | | Output is not escaped |
| #6694 | WPElemento Importer | 37 | 121 | 88 | 8k+ | | | Text Domain Mismatch |
| #6695 | WP PageNavi Style | 37 | 109 | 11 | 8k+ | | | Unsafe printing function |
| #6696 | WP FullCalendar | 37 | 32 | 64 | 8k+ | | | Nonce verification recommended |
| #6697 | Weather Atlas Widget | 37 | 630 | 111 | 8k+ | | | Output is not escaped |
| #6698 | WPForce Logout – WordPress User Login Logout Management Plugin | 37 | 567 | 32 | 8k+ | | | Output is not escaped |
| #6699 | Horizontal scrolling announcements | 37 | 215 | 140 | 8k+ | | | Output is not escaped |
| #6700 | JS Help Desk – AI-Powered Support & Ticketing System | 37 | 17 | 406 | 7k+ | | | Missing nonce verification |