| #4751 | F2 Tag Cloud Widget | 54 | 66 | 2 | 500 | | | Output is not escaped |
| #4752 | FireCask Like & Share Button | 54 | 32 | 6 | 400 | | | Output is not escaped |
| #4753 | SpeedSize Image & Video AI-Optimizer | 54 | 98 | 17 | 400 | | | Text Domain Mismatch |
| #4754 | Russian Currency | 54 | 52 | 6 | 400 | | | Output is not escaped |
| #4755 | Post Badges | 54 | 19 | 13 | 400 | | | Output is not escaped |
| #4756 | Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] | 53 | 15 | 46 | 1m+ | | | Non-prefixed global variable |
| #4757 | Pinterest for WooCommerce | 53 | 44 | 30 | 300k+ | | | Exception output is not escaped |
| #4758 | Weight Based Shipping for WooCommerce | 53 | 48 | 41 | 60k+ | | | Missing direct file access protection |
| #4759 | Column Shortcodes | 53 | 32 | 9 | 60k+ | | | Unsafe printing function |
| #4760 | Widget Context | 53 | 14 | 20 | 40k+ | | | Non-prefixed hook name |
| #4761 | Social Media Widget | 53 | 90 | 21 | 30k+ | | | Text Domain Mismatch |
| #4762 | WP Console – WordPress PHP Console powered by PsySH | 53 | 34 | 48 | 20k+ | | | Exception output is not escaped |
| #4763 | Multiple Post Thumbnails | 53 | 25 | 18 | 20k+ | | | Output is not escaped |
| #4764 | Automattic For Agencies Client | 53 | 249 | 184 | 20k+ | | | Text Domain Mismatch |
| #4765 | Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely | 53 | 34 | 90 | 20k+ | | | Database parameter is not escaped |
| #4766 | File Manager | 53 | 41 | 68 | 10k+ | | | Missing direct file access protection |
| #4767 | FakerPress | 53 | 66 | 152 | 10k+ | | | Non-prefixed global variable |
| #4768 | Pure Metafields | 53 | 5 | 130 | 10k+ | | | Non-prefixed global variable |
| #4769 | Texty – SMS Notification for WordPress, WooCommerce, Dokan and more | 53 | 31 | 34 | 8k+ | | | Output is not escaped |
| #4770 | International Telephone Input for Contact Form 7 | 53 | 18 | 10 | 8k+ | | | Missing direct file access protection |
| #4771 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | | | Non-prefixed global variable |
| #4772 | LuckyWP ACF Menu Field | 53 | 46 | 9 | 5k+ | | | Short PHP open tag found |
| #4773 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #4774 | Preserved HTML Editor Markup Plus | 53 | 12 | 22 | 3k+ | | | Output is not escaped |
| #4775 | Elegant Custom Fonts | 53 | 15 | 17 | 3k+ | | | Output is not escaped |
| #4776 | LearnPress – bbPress Integration | 53 | 19 | 14 | 2k+ | | | Output is not escaped |
| #4777 | 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 | 53 | 79 | 92 | 1k+ | | | Missing direct file access protection |
| #4778 | Widgets Reloaded | 53 | 62 | 20 | 1k+ | | | Output is not escaped |
| #4779 | MOBILOOK — Mobile View & Mobile‑Friendly Test | 53 | 10 | 20 | 1k+ | | | Missing nonce verification |
| #4780 | ONTRApages | 53 | 16 | 27 | 1k+ | | | Output is not escaped |
| #4781 | SoundPress Plugin | 53 | 44 | 3 | 1k+ | | | Output is not escaped |
| #4782 | Simple Masonry Layout | 53 | 28 | 28 | 1k+ | | | Output is not escaped |
| #4783 | Skroutz Analytics for WooCommerce | 53 | 57 | 15 | 1k+ | | | Text Domain Mismatch |
| #4784 | Post Type Converter | 53 | 5 | 28 | 1k+ | | | Nonce verification recommended |
| #4785 | WP User Switch | 53 | 8 | 46 | 1k+ | | | Input is not sanitized |
| #4786 | Morning for WooCommerce | 53 | 7 | 59 | 1k+ | | | Non-prefixed global variable |
| #4787 | Bg RuTube Embed | 53 | 19 | 21 | 1k+ | | | Unsafe printing function |
| #4788 | Bulk Actions Select All | 53 | 26 | 22 | 800 | | | Text Domain Mismatch |
| #4789 | Widget Icon | 53 | 53 | 10 | 700 | | | Output is not escaped |
| #4790 | Export Custom Pages | 53 | 22 | 19 | 700 | | | Output is not escaped |
| #4791 | Send Email From Admin | 53 | 27 | 13 | 700 | | | Text Domain Mismatch |
| #4792 | REST API Featured Image | 53 | 34 | 16 | 700 | | | Output is not escaped |
| #4793 | RDFa Breadcrumb | 53 | 27 | 13 | 600 | | | Output is not escaped |
| #4794 | Preserved HTML Editor Markup | 53 | 12 | 22 | 600 | | | Output is not escaped |
| #4795 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 500 | | | Output is not escaped |
| #4796 | Download PDF After Submit Form | 53 | 2 | 45 | 500 | | | Input is not sanitized |
| #4797 | WP Login Logo | 53 | 28 | 9 | 500 | | | Unsafe printing function |
| #4798 | Focus Videos | 53 | 36 | 9 | 400 | | | Text Domain Mismatch |
| #4799 | Simple Copy Post Button | 53 | 14 | 24 | 400 | | | Input is not sanitized |
| #4800 | Multiple external product URLs for WooCommerce | 53 | 28 | 17 | 400 | | | Text Domain Mismatch |