| #4851 | Adjust Admin Categories | 51 | 30 | 12 | 10k+ | | | Output is not escaped |
| #4852 | Gravity Forms No CAPTCHA reCAPTCHA | 51 | 30 | 17 | 10k+ | | | Text Domain Mismatch |
| #4853 | Juicer.io: Effortlessly embed, curate, and aggregate social media feeds into your website | 51 | 44 | 34 | 9k+ | | | Output is not escaped |
| #4854 | Cart Popup for WooCommerce | 51 | 9 | 115 | 9k+ | | | Non-prefixed global variable |
| #4855 | Swift SMTP (formerly Welcome Email Editor) | 51 | 12 | 62 | 7k+ | | | Missing nonce verification |
| #4856 | KIA Subtitle | 51 | 21 | 19 | 7k+ | | | Non-prefixed global variable |
| #4857 | VK Filter Search | 51 | 35 | 71 | 6k+ | | | Nonce verification recommended |
| #4858 | WPML Multilingual for BuddyPress and BuddyBoss | 51 | 18 | 21 | 6k+ | | | SQL query is not prepared |
| #4859 | WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System | 51 | 22 | 38 | 5k+ | | | Output is not escaped |
| #4860 | REST API Log | 51 | 44 | 95 | 5k+ | | | Non-prefixed hook name |
| #4861 | Toolbar Publish Button | 51 | 37 | 4 | 5k+ | | | Unsafe printing function |
| #4862 | Redirect | 51 | 26 | 12 | 5k+ | | | Output is not escaped |
| #4863 | AVIF Uploader | 51 | 49 | 44 | 4k+ | | | Missing Arg Domain |
| #4864 | Popular Brand Icons – Simple Icons | 51 | 20 | 12 | 3k+ | | | Output is not escaped |
| #4865 | Aspexi Social Media Slider | 51 | 177 | 15 | 2k+ | | | Text Domain Mismatch |
| #4866 | OnSale Page for WooCommerce | 51 | 30 | 44 | 2k+ | | | Text Domain Mismatch |
| #4867 | Quotes and Tips by BestWebSoft | 51 | 485 | 190 | 1k+ | | | Text Domain Mismatch |
| #4868 | StoryChief | 51 | 12 | 55 | 1k+ | | | Input is not sanitized |
| #4869 | Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress | 51 | 3 | 116 | 1k+ | | | Missing nonce verification |
| #4870 | Booqable Rental Plugin | 51 | 81 | 18 | 1k+ | | | wp function not compatible with requires wp |
| #4871 | Cards for Beaver Builder | 51 | 63 | 1 | 1k+ | | | Output is not escaped |
| #4872 | Bootstrap Modals | 51 | 43 | 8 | 1k+ | | | Output is not escaped |
| #4873 | Feeds for TikTok – Display Video Feeds in Grid Layouts | 51 | 18 | 59 | 1k+ | | | Request data is not unslashed |
| #4874 | WP Counter Up – Animated Number Counter & Milestone Showcase | 51 | 18 | 239 | 1k+ | | | Non-prefixed global variable |
| #4875 | Dynamic Pricing and Discount Rules | 51 | 24 | 65 | 1k+ | | | Non Singular String Literal Text |
| #4876 | The Cache Purger | 51 | 16 | 16 | 1k+ | | | Non Singular String Literal Text |
| #4877 | Simple Cookie Notification Bar | 51 | 49 | 6 | 1k+ | | | Text Domain Mismatch |
| #4878 | Lite Video Embed | 51 | 35 | 7 | 1k+ | | | Output is not escaped |
| #4879 | SePay Gateway | 51 | 12 | 39 | 1k+ | | | Nonce verification recommended |
| #4880 | Payment Gateway Payoneer For WooCommerce | 51 | 9 | 35 | 900 | | | Input is not validated |
| #4881 | Insert Code by Angie Makes | 51 | 43 | 8 | 900 | | | Output is not escaped |
| #4882 | Star Rating Field For Contact Form 7 | 51 | 36 | 7 | 800 | | | Output is not escaped |
| #4883 | Dolyame Payment gateway | 51 | 122 | 10 | 700 | | | Text Domain Mismatch |
| #4884 | Category Archive Widget | 51 | 54 | 2 | 700 | | | Output is not escaped |
| #4885 | CloudFilt Bot & Spam Protection | 51 | 11 | 22 | 600 | | | Output is not escaped |
| #4886 | WPFrom Email | 51 | 44 | 12 | 600 | | | Output is not escaped |
| #4887 | ACF: User Role Selector | 51 | 41 | 2 | 600 | | | Output is not escaped |
| #4888 | Mintpay | 51 | 14 | 35 | 600 | | | Nonce verification recommended |
| #4889 | Address Geocoder | 51 | 12 | 18 | 500 | | | Output is not escaped |
| #4890 | POLi Payments for WooCommerce | 51 | 62 | 26 | 500 | | | Text Domain Mismatch |
| #4891 | Contact Information Widget | 51 | 69 | 5 | 500 | | | Output is not escaped |
| #4892 | Easy Search Replace – Find & Replace Text/HTML/URLs, Remove Footer Credit | 51 | 6 | 61 | 500 | | | Input is not sanitized |
| #4893 | Security-Protection | 51 | 5 | 32 | 400 | | | Missing nonce verification |
| #4894 | Interactive Globes – 3D World Maps | 51 | 24 | 104 | 400 | | | Non-prefixed global variable |
| #4895 | Visual Sitemap | 51 | 23 | 6 | 400 | | | Output is not escaped |
| #4896 | GamiPress – Reset User | 51 | 14 | 27 | 400 | | | Interpolated SQL is not prepared |
| #4897 | Tiny gtag.js Analytics | 51 | 39 | 0 | 400 | | | Output is not escaped |
| #4898 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #4899 | WP SVG Images | 50 | 58 | 12 | 30k+ | | | Text Domain Mismatch |
| #4900 | HT Slider For Elementor | 50 | 884 | 40 | 20k+ | | | Text Domain Mismatch |