| #5001 | Post Terms Order – per Post based | 37 | 70 | 36 | 2k+ | | | Output is not escaped |
| #5002 | WP Post Navigation | 54 | 14 | 23 | 1k+ | | | Output is not escaped |
| #5003 | WP-RTL | 97 | 4 | 5 | 2k+ | | | trademarked term |
| #5004 | Flexible Refund for WooCommerce – EU One Click Return | 35 | 5 | 8 | 2k+ | | | Non-prefixed global variable |
| #5005 | Expand Tabs for WooCommerce | 67 | 10 | 57 | 1k+ | | | Non-prefixed global variable |
| #5006 | Force Default Variant for WooCommerce | 97 | 7 | 0 | 3k+ | | | Missing direct file access protection |
| #5007 | Advanced IP Blocker | 40 | 94 | 49 | 2k+ | | | Exception output is not escaped |
| #5008 | Responsive Image Maps | 98 | 3 | 1 | 4k+ | | | Missing direct file access protection |
| #5009 | Membership For WooCommerce | 33 | 40 | 659 | 900 | | | Non-prefixed global variable |
| #5010 | Purge Varnish Cache | 39 | 113 | 151 | 1k+ | | | Non-prefixed global variable |
| #5011 | WP Secure Maintenance | 52 | 28 | 18 | 1k+ | | | Output is not escaped |
| #5012 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | | | Missing direct file access protection |
| #5013 | JSON Feed (jsonfeed.org) | 35 | 9 | 29 | 1k+ | | | Non-prefixed global variable |
| #5014 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #5015 | MB Relationships | 82 | 1 | 35 | 1k+ | | | Non-prefixed class |
| #5016 | Pressable Automated Migration | 62 | 15 | 23 | 3k+ | | | Output is not escaped |
| #5017 | DPD Baltic Shipping | 35 | 91 | 202 | 2k+ | | | Text Domain Mismatch |
| #5018 | FormLayer | 96 | | 2 | 70k+ | | | Nonce verification recommended |
| #5019 | Innovs WPBakery Visual Composer WHMCS Elements | 37 | 154 | 24 | 2k+ | | | Text Domain Mismatch |
| #5020 | True Lazy Analytics | 75 | 11 | 13 | 6k+ | | | Nonce verification recommended |
| #5021 | Hide Admin Toolbar | 98 | 3 | 1 | 9k+ | | | Missing direct file access protection |
| #5022 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #5023 | Gravity Forms ConvertKit Add-On | 95 | 65 | 11 | 700 | | | Text Domain Mismatch |
| #5024 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | | | Non-prefixed global variable |
| #5025 | WP Multisite Content Copier/Updater | 40 | 19 | 144 | 800 | | | Interpolated SQL is not prepared |
| #5026 | Slimbox | 97 | 4 | 1 | 600 | | | Missing direct file access protection |
| #5027 | Filter Gallery | 98 | 11 | 1 | 3k+ | | | wp function not compatible with requires wp |
| #5028 | GiveWP Donation Widgets for Elementor | 38 | 483 | 13 | 7k+ | | | Text Domain Mismatch |
| #5029 | Embed Videos For Product Image Gallery Using WooCommerce | 62 | 21 | 16 | 400 | | | Text Domain Mismatch |
| #5030 | Sendcloud Shipping | 42 | 78 | 56 | 5k+ | | | Output is not escaped |
| #5031 | Autologin Links | 38 | 73 | 74 | 8k+ | | | Output is not escaped |
| #5032 | Customize Posts | 38 | 31 | 77 | 1k+ | | | Non-prefixed hook name |
| #5033 | Layouts for WPBakery | 78 | | 28 | 3k+ | | | Non-prefixed global variable |
| #5034 | Add Password Field for Contact Form 7 | 100 | | 0 | 3k+ | | | No open findings |
| #5035 | Copyscape Premium | 40 | 148 | 133 | 800 | | | SQL query is not prepared |
| #5036 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | | | Output is not escaped |
| #5037 | Slider Factory | 61 | 3 | 414 | 2k+ | | | Non-prefixed global variable |
| #5038 | Coinbase Business Gateway for WooCommerce | 25 | 569 | 1,317 | 800 | | | Non-prefixed global variable |
| #5039 | JustTables – WooCommerce Product Table | 26 | 534 | 652 | 600 | | | Non-prefixed global variable |
| #5040 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | | | Output is not escaped |
| #5041 | Webflow Pages | 35 | 36 | 63 | 2k+ | | | Non Singular String Literal Domain |
| #5042 | GDPR Compliance for Mailchimp | 69 | 7 | 15 | 2k+ | | | Missing nonce verification |
| #5043 | bpost shipping | 36 | 97 | 43 | 700 | | | Output is not escaped |
| #5044 | Cliengo – Chatbot | 91 | 4 | 7 | 2k+ | | | Input is not sanitized |
| #5045 | MB Elementor Integration | 99 | 1 | 3 | 2k+ | | | Non-prefixed global variable |
| #5046 | WP Hide Post — Hide Posts, Pages, Custom Post Types, and Control Products Visibility for WooCommerce | 99 | | 4 | 3k+ | | | trademarked term |
| #5047 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 5k+ | | | Non Singular String Literal Domain |
| #5048 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 35 | 31 | 188 | 1k+ | | | Non-prefixed global variable |
| #5049 | FD Footnotes Plugin | 77 | 28 | 5 | 1k+ | | | Non Singular String Literal Domain |
| #5050 | leadlovers for Elementor | 95 | 34 | 5 | 2k+ | | | Text Domain Mismatch |