| #6701 | Weather Atlas Widget | 37 | 630 | 111 | 8k+ | | | Output is not escaped |
| #6702 | WPForce Logout – WordPress User Login Logout Management Plugin | 37 | 567 | 32 | 8k+ | | | Output is not escaped |
| #6703 | Horizontal scrolling announcements | 37 | 215 | 140 | 8k+ | | | Output is not escaped |
| #6704 | JS Help Desk – AI-Powered Support & Ticketing System | 37 | 17 | 406 | 7k+ | | | Missing nonce verification |
| #6705 | Widget Responsive for Youtube | 37 | 240 | 7 | 7k+ | | | Output is not escaped |
| #6706 | Furgonetka.pl: Przesyłki & Narzędzia e-commerce | 37 | 66 | 48 | 7k+ | | | Exception output is not escaped |
| #6707 | Booster Extension | 37 | 28 | 289 | 7k+ | | | Non-prefixed global variable |
| #6708 | XT Visitor Counter | 37 | 177 | 52 | 7k+ | | | Output is not escaped |
| #6709 | PayU CommercePro Plugin | 37 | | 218 | 7k+ | | | error log error log |
| #6710 | Better Click To Share – Shareable Quote Boxes for X (Twitter) | 37 | 170 | 59 | 6k+ | | | Unsafe printing function |
| #6711 | WP WooCommerce Mailchimp | 37 | 62 | 85 | 6k+ | | | Non-prefixed hook name |
| #6712 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | | Non-prefixed global variable |
| #6713 | Persistent Login | 37 | 338 | 108 | 6k+ | | | Unsafe printing function |
| #6714 | Spam Destroyer | 37 | 63 | 43 | 6k+ | | | rand rand |
| #6715 | Super Simple Site Offline | 37 | 115 | 59 | 6k+ | | | Text Domain Mismatch |
| #6716 | TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot | 37 | 48 | 40 | 6k+ | | | Unsafe printing function |
| #6717 | Hash Elements | 37 | 147 | 92 | 5k+ | | | Output is not escaped |
| #6718 | Ultimate Tag Cloud Widget | 37 | 715 | 16 | 4k+ | | | Output is not escaped |
| #6719 | Quickpay for WooCommerce | 37 | 66 | 56 | 4k+ | | | Nonce verification recommended |
| #6720 | Sensei LMS Certificates | 37 | 97 | 362 | 4k+ | | | Non-prefixed global variable |
| #6721 | authLdap | 37 | 46 | 30 | 4k+ | | | Exception output is not escaped |
| #6722 | RSS for Yandex Zen | 37 | 240 | 100 | 4k+ | | | Unsafe printing function |
| #6723 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #6724 | Reusable Content Blocks | 37 | 349 | 14 | 4k+ | | | Text Domain Mismatch |
| #6725 | CodePeople Post Map for Google Maps | 37 | 257 | 31 | 3k+ | | | Unsafe printing function |
| #6726 | Optin Forms – Simple List Building Plugin for WordPress | 37 | 647 | 22 | 3k+ | | | Output is not escaped |
| #6727 | Image Optimizer by 10web – Image Optimizer and Compression plugin | 37 | 244 | 45 | 3k+ | | | Text Domain Mismatch |
| #6728 | Lightbox slider – Responsive Lightbox Gallery | 37 | 36 | 173 | 3k+ | | | Non-prefixed global variable |
| #6729 | Duo Two-Factor Authentication | 37 | 44 | 61 | 3k+ | | | Missing nonce verification |
| #6730 | Adaptive Images for WordPress | 37 | 51 | 75 | 3k+ | | | Output is not escaped |
| #6731 | Xendit Payment | 37 | 3 | 197 | 3k+ | | | Missing nonce verification |
| #6732 | Maintenance Page | 37 | 62 | 33 | 3k+ | | | Output is not escaped |
| #6733 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #6734 | Publish to Schedule | 37 | 195 | 43 | 3k+ | | | Text Domain Mismatch |
| #6735 | Piraeus Bank WooCommerce Payment Gateway | 37 | 146 | 104 | 3k+ | | | Non Singular String Literal Domain |
| #6736 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 302 | 58 | 3k+ | | | Text Domain Mismatch |
| #6737 | WP All Export – Order Export for WooCommerce | 37 | 109 | 111 | 3k+ | | | Text Domain Mismatch |
| #6738 | LH Archived Post Status | 37 | 150 | 64 | 3k+ | | | Text Domain Mismatch |
| #6739 | JVM Rich Text Icons | 37 | 87 | 34 | 3k+ | | | Output is not escaped |
| #6740 | Facturare WooCommerce | 37 | 158 | 106 | 3k+ | | | Text Domain Mismatch |
| #6741 | WP Emmet | 37 | 154 | 8 | 3k+ | | | Output is not escaped |
| #6742 | Special Text Boxes | 37 | 38 | 42 | 2k+ | | | Direct Query |
| #6743 | Zakeke Interactive Product Designer for WooCommerce | 37 | 186 | 177 | 2k+ | | | Nonce verification recommended |
| #6744 | Anything Popup | 37 | 164 | 185 | 2k+ | | | Non-prefixed global variable |
| #6745 | PiWeb Advanced Flat rate / Conditional shipping for WooCommerce | 37 | 84 | 192 | 2k+ | | | wp function not compatible with requires wp |
| #6746 | UsersWP – Social Login | 37 | 299 | 91 | 2k+ | | | Text Domain Mismatch |
| #6747 | RSS Image Feed | 37 | 147 | 16 | 2k+ | | | Output is not escaped |
| #6748 | Constant Contact Forms by MailMunch | 37 | 147 | 53 | 2k+ | | | wp function not compatible with requires wp |
| #6749 | PiWeb Conditional cart fee / Extra charge rule for WooCommerce | 37 | 164 | 214 | 2k+ | | | Text Domain Mismatch |
| #6750 | Britetechs Companion | 37 | 966 | 613 | 2k+ | | | Text Domain Mismatch |