| #6801 | ACF: TablePress | 37 | 160 | 45 | 1k+ | | | Text Domain Mismatch |
| #6802 | Tilopay | 37 | 35 | 130 | 1k+ | | | Nonce verification recommended |
| #6803 | HT Builder – WordPress Theme Builder for Elementor | 37 | 142 | 41 | 1k+ | | | Output is not escaped |
| #6804 | Quantities and Units for WooCommerce | 37 | 133 | 118 | 1k+ | | | Output is not escaped |
| #6805 | avalex – Automatisch sichere Rechtstexte | 37 | 25 | 85 | 1k+ | | | Direct Query |
| #6806 | Advanced 301 and 302 Redirect | 37 | 88 | 354 | 1k+ | | | Non-prefixed global variable |
| #6807 | Lightweight Subscribe To Comments | 37 | 105 | 70 | 1k+ | | | Unsafe printing function |
| #6808 | GoPay for WooCommerce | 37 | 66 | 103 | 1k+ | | | Non-prefixed global variable |
| #6809 | Debug Log Viewer | 37 | 26 | 83 | 1k+ | | | Missing nonce verification |
| #6810 | 果果推送 | 37 | 31 | 56 | 1k+ | | | Nonce verification recommended |
| #6811 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | | | Missing Arg Domain |
| #6812 | Disclaimer Popup | 37 | 313 | 53 | 1k+ | | | Text Domain Mismatch |
| #6813 | Monobank WP Payment | 37 | 78 | 41 | 1k+ | | | Text Domain Mismatch |
| #6814 | Simple Image XML Sitemap | 37 | 119 | 16 | 1k+ | | | Output is not escaped |
| #6815 | ValidateCertify Free | 37 | 123 | 97 | 1k+ | | | Text Domain Mismatch |
| #6816 | ClickRank – Ai SEO Automation | 37 | 10 | 226 | 1k+ | | | Direct Query |
| #6817 | Ninja Van (MY) | 37 | 21 | 258 | 1k+ | | | Non-prefixed global variable |
| #6818 | Media Sweep – WordPress Media Cleaner | 37 | 56 | 137 | 1k+ | | | Interpolated SQL is not prepared |
| #6819 | Crafty Social Buttons | 37 | 279 | 27 | 900 | | | Non Singular String Literal Domain |
| #6820 | Weaver Show Sliders | 37 | 177 | 132 | 900 | | | Text Domain Mismatch |
| #6821 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #6822 | AJAX Hits Counter + Popular Posts Widget | 37 | 247 | 44 | 900 | | | Output is not escaped |
| #6823 | Widget Box Lite | 37 | 318 | 17 | 900 | | | Output is not escaped |
| #6824 | All-in-one Chat Button by anychat.one | 37 | 119 | 69 | 900 | | | Text Domain Mismatch |
| #6825 | Contact Zalo Report SW | 37 | 44 | 39 | 900 | | | Missing Arg Domain |
| #6826 | WP Flow Plus | 37 | 175 | 146 | 800 | | | Output is not escaped |
| #6827 | Oliver POS – WooCommerce POS for iPhone, iPad & Android | 37 | 15 | 242 | 800 | | | Interpolated SQL is not prepared |
| #6828 | Skimlinks Affiliate Marketing Tool | 37 | 84 | 19 | 800 | | | wp function not compatible with requires wp |
| #6829 | Sendle Shipping Plugin | 37 | 91 | 64 | 800 | | | wp function not compatible with requires wp |
| #6830 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | | | Unsafe printing function |
| #6831 | Agreeable | 37 | 40 | 67 | 800 | | | Unsafe printing function |
| #6832 | TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More | 37 | 878 | 59 | 800 | | | Output is not escaped |
| #6833 | Easy Testimonial Slider and Form | 37 | 14 | 144 | 800 | | | Request data is not unslashed |
| #6834 | Product Image Hover Effects WOOC – WPSHARE247 | 37 | 161 | 94 | 800 | | | Output is not escaped |
| #6835 | Antom Payments | 37 | 62 | 73 | 800 | | | badly named files |
| #6836 | .htaccess Site Access Control | 37 | 54 | 67 | 800 | | | Input is not sanitized |
| #6837 | Blimply | 37 | 172 | 43 | 800 | | | Text Domain Mismatch |
| #6838 | Async JS and CSS | 37 | 90 | 1 | 700 | | | Text Domain Mismatch |
| #6839 | WP eBay Product Feeds | 37 | 136 | 31 | 700 | | | Output is not escaped |
| #6840 | WP Image Markers – Easy Hotspot Solution | 37 | 179 | 66 | 700 | | | Text Domain Mismatch |
| #6841 | DSGVO/GDPR Cookies, DSE, Impressum & Google Fonts Proxy | 37 | 391 | 25 | 700 | | | Text Domain Mismatch |
| #6842 | Landing Page Builder – Free Landing Page Templates | 37 | 329 | 111 | 600 | | | Output is not escaped |
| #6843 | Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter | 37 | 151 | 61 | 600 | | | Output is not escaped |
| #6844 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 600 | | | Output is not escaped |
| #6845 | GoHero Store Customizer for WooCommerce | 37 | 75 | 53 | 600 | | | Unsafe printing function |
| #6846 | Checkout for PayPal | 37 | 134 | 67 | 600 | | | Unsafe printing function |
| #6847 | Donation Block For PayPal | 37 | 23 | 106 | 600 | | | Input is not validated |
| #6848 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | | | Output is not escaped |
| #6849 | Panda Pods Repeater Field | 37 | 9 | 260 | 600 | | | Non-prefixed global variable |
| #6850 | SuperCPT | 37 | 172 | 27 | 600 | | | Output is not escaped |