| #6901 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |
| #6902 | افزونه رسمی ترب | 36 | 42 | 86 | 30k+ | | | Exception output is not escaped |
| #6903 | Rara One Click Demo Import | 36 | 122 | 98 | 20k+ | | | Missing Translators Comment |
| #6904 | Asesor de Cookies RGPD para normativa europea | 36 | 94 | 91 | 20k+ | | | wp function not compatible with requires wp |
| #6905 | Search Everything | 36 | 165 | 77 | 10k+ | | | Text Domain Mismatch |
| #6906 | WP Socializer – Simple & Easy Social Media Share Icons | 36 | 214 | 51 | 10k+ | | | Output is not escaped |
| #6907 | Photonic Gallery & Lightbox for Flickr, SmugMug & Others | 36 | 180 | 117 | 10k+ | | | Missing Translators Comment |
| #6908 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | | | Non-prefixed hook name |
| #6909 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #6910 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #6911 | Extended Coupon Features for WooCommerce FREE | 36 | 219 | 63 | 10k+ | | | Text Domain Mismatch |
| #6912 | Plugins Garbage Collector (Database Cleanup) | 36 | 32 | 51 | 10k+ | | | Missing nonce verification |
| #6913 | Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | 36 | 3 | 322 | 10k+ | | | Nonce verification recommended |
| #6914 | Envo's Templates & Widgets for Elementor and WooCommerce | 36 | 1,065 | 54 | 10k+ | | | Text Domain Mismatch |
| #6915 | Custom PHP Settings | 36 | 153 | 76 | 10k+ | | | Output is not escaped |
| #6916 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | | | Nonce verification recommended |
| #6917 | Crelly Slider | 36 | 421 | 185 | 10k+ | | | Unsafe printing function |
| #6918 | Conditional Shipping for WooCommerce | 36 | 93 | 196 | 10k+ | | | Non-prefixed global variable |
| #6919 | HTML Forms – Simple WordPress Forms Plugin | 36 | 231 | 166 | 10k+ | | | Output is not escaped |
| #6920 | Italy Cookie Choices (for EU Cookie Law & Cookie Notice) | 36 | 115 | 77 | 10k+ | | | Unsafe printing function |
| #6921 | VK Post Author Display | 36 | 87 | 113 | 10k+ | | | Non-prefixed function |
| #6922 | WP Sticky Sidebar – Floating Sidebar On Scroll for Any Theme | 36 | 93 | 84 | 10k+ | | | Non-prefixed global variable |
| #6923 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #6924 | Product Labels For Woocommerce (Sale Badges) | 36 | 90 | 48 | 10k+ | | | Output is not escaped |
| #6925 | Conditional Payments for WooCommerce | 36 | 292 | 184 | 10k+ | | | Text Domain Mismatch |
| #6926 | Quantity Plus Minus Button for WooCommerce | 36 | 83 | 84 | 10k+ | | | Output is not escaped |
| #6927 | Simple SEO | 36 | 164 | 113 | 10k+ | | | Non Singular String Literal Domain |
| #6928 | Ovation Elements | 36 | 23 | 399 | 10k+ | | | Non-prefixed global variable |
| #6929 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #6930 | WP Hardening (discontinued) | 36 | 230 | 85 | 10k+ | | | Text Domain Mismatch |
| #6931 | Legal Text Connector of the IT-Recht Kanzlei | 36 | 45 | 46 | 10k+ | | | Exception output is not escaped |
| #6932 | Bulk Post Update Date | 36 | 96 | 66 | 10k+ | | | Unsafe printing function |
| #6933 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | | | Unsafe printing function |
| #6934 | Media Deduper | 36 | 60 | 99 | 9k+ | | | Missing Arg Domain |
| #6935 | WP Custom Cursors | WordPress Cursor Plugin | 36 | 691 | 390 | 9k+ | | | Text Domain Mismatch |
| #6936 | Wppao Sitemap | 36 | 128 | 21 | 9k+ | | | Output is not escaped |
| #6937 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #6938 | Blaze Demo Importer | 36 | 101 | 94 | 8k+ | | | Output is not escaped |
| #6939 | User Roles and Capabilities | 36 | 227 | 132 | 8k+ | | | Output is not escaped |
| #6940 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #6941 | Insert Headers and Footers Code – HT Script | 36 | 391 | 34 | 7k+ | | | Text Domain Mismatch |
| #6942 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 7k+ | | | Text Domain Mismatch |
| #6943 | Coming Soon, Under Construction & Maintenance Mode By Dazzler | 36 | 173 | 132 | 6k+ | | | Text Domain Mismatch |
| #6944 | Email Before Download | 36 | 89 | 29 | 6k+ | | | Unsafe printing function |
| #6945 | Page Speed Optimizer: HTTP/2 Push, Async JavaScript, and Defer CSS | 36 | 68 | 33 | 6k+ | | | Output is not escaped |
| #6946 | MailMunch – Grow your Email List | 36 | 102 | 49 | 6k+ | | | Output is not escaped |
| #6947 | Advance Side Cart, Ajax Cart & Floating Cart for WooCommerce | 36 | 37 | 121 | 6k+ | | | Non-prefixed global variable |
| #6948 | Materialis Companion | 36 | 129 | 67 | 6k+ | | | Unsafe printing function |
| #6949 | WP Header Images | 36 | 174 | 133 | 6k+ | | | Unsafe printing function |
| #6950 | Photoswipe Masonry Gallery | 36 | 57 | 47 | 6k+ | | | Non Singular String Literal Text |