| #6951 | BP Profile Search | 36 | 321 | 85 | 5k+ | | | Output is not escaped |
| #6952 | HTML5 Maps | 36 | 194 | 160 | 5k+ | | | Output is not escaped |
| #6953 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 36 | 165 | 69 | 5k+ | | | Text Domain Mismatch |
| #6954 | LocalWeb All In One | 36 | 34 | 297 | 5k+ | | | Non-prefixed global variable |
| #6955 | We’re Open! | 36 | 273 | 187 | 5k+ | | | Unsafe printing function |
| #6956 | Bulgarisation for WooCommerce | 36 | 135 | 594 | 5k+ | | | Nonce verification recommended |
| #6957 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #6958 | Zoho ZeptoMail | 36 | 32 | 110 | 5k+ | | | Request data is not unslashed |
| #6959 | Quick 301 Redirects | 36 | 89 | 120 | 5k+ | | | Non-prefixed global variable |
| #6960 | Duplicate Post – duplicate pages, copy content, clone posts | 36 | 76 | 81 | 5k+ | | | wp function not compatible with requires wp |
| #6961 | Payment Button for PayPal | 36 | 155 | 86 | 4k+ | | | Unsafe printing function |
| #6962 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 56 | 437 | 4k+ | | | Non-prefixed global variable |
| #6963 | Uji Countdown | 36 | 284 | 98 | 4k+ | | | Text Domain Mismatch |
| #6964 | Dashboard Widgets Suite | 36 | 206 | 124 | 4k+ | | | Output is not escaped |
| #6965 | Snippet Shortcodes | 36 | 380 | 149 | 4k+ | | | Non Singular String Literal Domain |
| #6966 | Doneren met Mollie | 36 | 420 | 351 | 4k+ | | | SQL query is not prepared |
| #6967 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 36 | 1 | 574 | 4k+ | | | Request data is not unslashed |
| #6968 | Different Menu in Different Pages – Conditional Menu | 36 | 167 | 113 | 4k+ | | | Text Domain Mismatch |
| #6969 | Ubigeo de Perú para Woocommerce y WordPress | 36 | 191 | 235 | 4k+ | | | Non-prefixed function |
| #6970 | Libro de Reclamaciones y Quejas | 36 | 266 | 124 | 4k+ | | | Text Domain Mismatch |
| #6971 | Ozh' Admin Drop Down Menu | 36 | 125 | 43 | 3k+ | | | Output is not escaped |
| #6972 | W4 Post List | 36 | 49 | 137 | 3k+ | | | Non-prefixed global variable |
| #6973 | PDF Forms Filler for CF7 | 36 | 185 | 79 | 3k+ | | | Text Domain Mismatch |
| #6974 | Eway Payments for Woo | 36 | 525 | 40 | 3k+ | | | Text Domain Mismatch |
| #6975 | Custom Add to Cart Button Label and Link for WooCommerce | 36 | 371 | 112 | 3k+ | | | Text Domain Mismatch |
| #6976 | Peter’s Post Notes | 36 | 224 | 102 | 3k+ | | | Output is not escaped |
| #6977 | TrustMate.io – WooCommerce integration | 36 | 255 | 101 | 3k+ | | | Output is not escaped |
| #6978 | Optimize Social Share | 36 | 203 | 61 | 3k+ | | | Unsafe printing function |
| #6979 | WP fail2ban Blocklist | 36 | 61 | 63 | 3k+ | | | SQL query is not prepared |
| #6980 | WP Super Edit | 36 | 35 | 185 | 2k+ | | | Nonce verification recommended |
| #6981 | Carousel Horizontal Posts Content Slider | 36 | 271 | 59 | 2k+ | | | Text Domain Mismatch |
| #6982 | SuperFaktura WooCommerce | 36 | 60 | 116 | 2k+ | | | Nonce verification recommended |
| #6983 | Export Themes | 36 | 122 | 90 | 2k+ | | | Non-prefixed constant |
| #6984 | WP CTA – Call Now Button, Sticky Button & Call to Action Builder | 36 | 1 | 433 | 2k+ | | | Non-prefixed global variable |
| #6985 | WC Pickup Store | 36 | 245 | 52 | 2k+ | | | Output is not escaped |
| #6986 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #6987 | SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | 36 | 4 | 342 | 2k+ | | | Nonce verification recommended |
| #6988 | News Ticker for Elementor | 36 | 76 | 57 | 2k+ | | | Text Domain Mismatch |
| #6989 | Out of Stock Message Manager for WooCommerce | 36 | 293 | 95 | 2k+ | | | Text Domain Mismatch |
| #6990 | Direct Checkout – Quick View – Buy Now For WooCommerce | 36 | 90 | 112 | 2k+ | | | Missing nonce verification |
| #6991 | Video Thumbnails Reloaded | 36 | 343 | 58 | 2k+ | | | Text Domain Mismatch |
| #6992 | Shadowbox JS | 36 | 246 | 14 | 1k+ | | | Unsafe printing function |
| #6993 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #6994 | WP Stripe Checkout | 36 | 198 | 118 | 1k+ | | | Unsafe printing function |
| #6995 | NextGEN Custom Fields | 36 | 215 | 131 | 1k+ | | | SQL query is not prepared |
| #6996 | PDF Flipbook, WPBakery Addon – Unreal FlipBook | 36 | 400 | 92 | 1k+ | | | Non Singular String Literal Domain |
| #6997 | WPLMS H5P | 36 | 111 | 106 | 1k+ | | | Text Domain Mismatch |
| #6998 | Happy WooCommerce FAQs – Ultimate Product FAQ Plugin | 36 | 65 | 119 | 1k+ | | | Nonce verification recommended |
| #6999 | WP Hotel Booking WooCommerce | 36 | 93 | 99 | 1k+ | | | Output is not escaped |
| #7000 | WC Builder – WooCommerce Page Builder for WPBakery | 36 | 647 | 50 | 1k+ | | | Text Domain Mismatch |