| #7001 | CM Header and Footer – Add custom scripts and styles to your header and footer with ease | 36 | 230 | 198 | 1k+ | | | Output is not escaped |
| #7002 | Continuous Image Carousel With Lightbox | 36 | 255 | 129 | 1k+ | | | Output is not escaped |
| #7003 | 3B Meteo | 36 | 50 | 76 | 1k+ | | | Output is not escaped |
| #7004 | Events Manager and WPML Compatibility | 36 | 101 | 177 | 1k+ | | | Direct Query |
| #7005 | YayExtra – WooCommerce Extra Product Options | 36 | 11 | 472 | 1k+ | | | Non-prefixed global variable |
| #7006 | Product Carousel Slider for Elementor | 36 | 148 | 63 | 1k+ | | | Text Domain Mismatch |
| #7007 | CP Blocks | 36 | 46 | 38 | 1k+ | | | wp function not compatible with requires wp |
| #7008 | Admin Customizer | 36 | 143 | 64 | 1k+ | | | Output is not escaped |
| #7009 | Disable Payment Methods based on cart conditions for WooCommerce | 36 | 158 | 57 | 1k+ | | | Non Singular String Literal Domain |
| #7010 | WP Better Permalinks | 36 | 110 | 59 | 1k+ | | | Output is not escaped |
| #7011 | Viva Payments – Viva Wallet WooCommerce Payment Gateway | 36 | 97 | 32 | 1k+ | | | Non Singular String Literal Domain |
| #7012 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #7013 | Shipping with Venipak for WooCommerce | 36 | 239 | 61 | 1k+ | | | Text Domain Mismatch |
| #7014 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |
| #7015 | LONG URL MAKER | 36 | 39 | 71 | 1k+ | | | Direct Query |
| #7016 | If-So Geolocation | 36 | 50 | 57 | 1k+ | | | Non-prefixed global variable |
| #7017 | Just TinyMCE Custom Styles | 36 | 112 | 28 | 1k+ | | | Missing Arg Domain |
| #7018 | Gutena Kit – Gutenberg Blocks and Templates | 36 | 39 | 87 | 1k+ | | | Nonce verification recommended |
| #7019 | SMTP for SendGrid – YaySMTP | 36 | 27 | 96 | 1k+ | | | Non-prefixed global variable |
| #7020 | Header Footer Script Adder – Insert Code in Header, Body & Footer | 36 | 203 | 78 | 1k+ | | | Text Domain Mismatch |
| #7021 | Database Snapshots – WPvivid | 36 | 66 | 108 | 1k+ | | | Direct Query |
| #7022 | Conditional Payments and Shipping for WooCommerce | 36 | 337 | 27 | 1k+ | | | Text Domain Mismatch |
| #7023 | Guaranteed Reviews Company (Société des Avis Garantis) | 36 | 369 | 197 | 1k+ | | | Output is not escaped |
| #7024 | HTTP Requests Manager | 36 | 98 | 90 | 1k+ | | | Output is not escaped |
| #7025 | Toolbox for Asgaros Forum | 36 | 150 | 84 | 1k+ | | | Output is not escaped |
| #7026 | Dynamic Front-End Heartbeat Control | 36 | 217 | 111 | 1k+ | | | Text Domain Mismatch |
| #7027 | Order Status History for WooCommerce | 36 | 210 | 171 | 1k+ | | | Output is not escaped |
| #7028 | Friendly Functions for Welcart | 36 | 311 | 83 | 1k+ | | | Non Singular String Literal Domain |
| #7029 | Endora | 36 | 53 | 72 | 1k+ | | | Output is not escaped |
| #7030 | 2C2P Redirect API for WooCommerce | 36 | 136 | 62 | 900 | | | wp function not compatible with requires wp |
| #7031 | Bus Ticket Booking with Seat Reservation | 36 | 145 | 192 | 800 | | | Non-prefixed global variable |
| #7032 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #7033 | 코드엠샵 마이사이트 – MSHOP MY SITE | 36 | 58 | 55 | 800 | | | Output is not escaped |
| #7034 | WP Counter | 36 | 86 | 43 | 800 | | | Output is not escaped |
| #7035 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | | | Short PHP open tag found |
| #7036 | Black Widgets For Elementor | 36 | 2,608 | 19 | 800 | | | Text Domain Mismatch |
| #7037 | Dynamic Copyright Year | 36 | 972 | 43 | 800 | | | Output is not escaped |
| #7038 | bpost shipping | 36 | 97 | 43 | 700 | | | Output is not escaped |
| #7039 | Carousel Ultimate | 36 | 450 | 284 | 700 | | | Text Domain Mismatch |
| #7040 | Advanced Export for WP & WPMU | 36 | 124 | 55 | 700 | | | Output is not escaped |
| #7041 | WP LaTeX | 36 | 103 | 12 | 700 | | | Output is not escaped |
| #7042 | Google Webfont Optimizer | 36 | 45 | 49 | 700 | | | Output is not escaped |
| #7043 | BuddyMeet | 36 | 114 | 32 | 700 | | | Unsafe printing function |
| #7044 | Duitku Payment Gateway | 36 | 507 | 107 | 700 | | | Text Domain Mismatch |
| #7045 | Post Views Stats Counter | 36 | 142 | 241 | 700 | | | Non-prefixed global variable |
| #7046 | GetPaid > Wallet | 36 | 174 | 227 | 700 | | | Text Domain Mismatch |
| #7047 | Bard Extra | 36 | 158 | 76 | 700 | | | Text Domain Mismatch |
| #7048 | CLP – Custom Login Page by NiteoThemes | 36 | 240 | 49 | 700 | | | Output is not escaped |
| #7049 | WPAvatar | 36 | 425 | 45 | 700 | | | Unsafe printing function |
| #7050 | IntelliWidget Per Page Custom Menus and Dynamic Content | 36 | 586 | 162 | 600 | | | Output is not escaped |