| #5051 | Language Fallback | 99 | 2 | 1 | 5k+ | | | Missing direct file access protection |
| #5052 | Block for Mailchimp – Add Email Subscription Forms and Collect Leads | 100 | | 1 | 2k+ | | | Non-prefixed class |
| #5053 | LuckyWP ACF Menu Field | 53 | 46 | 9 | 5k+ | | | Short PHP open tag found |
| #5054 | Sitekit | 35 | 122 | 8 | 3k+ | | | Output is not escaped |
| #5055 | Go Fetch Jobs (for WP Job Manager) | 19 | 1,410 | 1,741 | 700 | | | Non-prefixed global variable |
| #5056 | WC Price History | 42 | 18 | 23 | 4k+ | | | Database parameter is not escaped |
| #5057 | Checkout Gateway for IRIS | 99 | 1 | 2 | 1k+ | | | Non-prefixed class |
| #5058 | Soumettre.fr | 39 | 130 | 26 | 10k+ | | | Text Domain Mismatch |
| #5059 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | | | Output is not escaped |
| #5060 | Parallax Image | 80 | 6 | 1 | 2k+ | | | Missing direct file access protection |
| #5061 | Themify Icons | 35 | 33 | 12 | 3k+ | | | Output is not escaped |
| #5062 | bbPress Voting | 39 | 27 | 53 | 500 | | | Output is not escaped |
| #5063 | Better Internal Link Search | 40 | 23 | 48 | 1k+ | | | strip tags strip tags |
| #5064 | BuddyPress Activity Shortcode | 73 | 9 | 14 | 2k+ | | | Non-prefixed hook name |
| #5065 | Bricks Navigator | 94 | 1 | 5 | 8k+ | | | Nonce verification recommended |
| #5066 | User Spam Remover | 31 | 115 | 14 | 1k+ | | | Output is not escaped |
| #5067 | Contact Form 7: Accessible Defaults | 69 | 3 | 28 | 5k+ | | | Nonce verification recommended |
| #5068 | LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor | 81 | 162 | 9 | 3k+ | | | Text Domain Mismatch |
| #5069 | Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms | 40 | | 272 | 4k+ | | | Direct Query |
| #5070 | TrustMate.io – WooCommerce integration | 36 | 255 | 101 | 3k+ | | | Output is not escaped |
| #5071 | Better WordPress Recent Comments | 36 | 319 | 69 | 600 | | | Text Domain Mismatch |
| #5072 | Show modified Date in admin lists | 89 | 4 | 3 | 6k+ | | | Output is not escaped |
| #5073 | WP Advanced PDF | Pending | - | - | 800 | | | Pending scan |
| #5074 | Unveil Lazy Load | 91 | 2 | 6 | 2k+ | | | error log error log |
| #5075 | Page Comments Off Please | 40 | 17 | 29 | 1k+ | | | Nonce verification recommended |
| #5076 | Slick Slider | 35 | 36 | 9 | 2k+ | | | Output is not escaped |
| #5077 | PayHere Payment Gateway | 95 | 6 | 8 | 2k+ | | | Non-prefixed class |
| #5078 | Multipart robots.txt editor | 70 | 19 | 8 | 1k+ | | | Output is not escaped |
| #5079 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 4k+ | | | Non-prefixed global variable |
| #5080 | Weight/Country Shipping for WooCommerce | 79 | 10 | 2 | 900 | | | Unsafe printing function |
| #5081 | WP Forms Signature Contract Add-On | 34 | 128 | 35 | 900 | | | Text Domain Mismatch |
| #5082 | Sendle Shipping Plugin | 37 | 91 | 64 | 800 | | | wp function not compatible with requires wp |
| #5083 | Carousel Ultimate | 36 | 450 | 284 | 700 | | | Text Domain Mismatch |
| #5084 | Simple Link List Widget | 40 | 129 | 8 | 2k+ | | | Output is not escaped |
| #5085 | Algori 360 Image | 35 | 6 | 6 | 4k+ | | | Hidden files included |
| #5086 | Simple GDPR Cookie Compliance | 97 | 10 | 16 | 6k+ | | | Non-prefixed global variable |
| #5087 | Easy Duplicate Product for WooCommerce | 84 | 7 | 8 | 3k+ | | | Missing direct file access protection |
| #5088 | Loops & Logic | 81 | 11 | 3 | 2k+ | | | Missing direct file access protection |
| #5089 | PayPing Gateway For Woocommerce | 63 | 11 | 40 | 1k+ | | | Non-prefixed hook name |
| #5090 | Disable Plugin Autoupdate Emails | 98 | 3 | 3 | 6k+ | | | trademarked term |
| #5091 | WP No Base Permalink | 71 | 8 | 10 | 10k+ | | | Unsafe printing function |
| #5092 | Debug Bar Rewrite Rules | 69 | 29 | 38 | 800 | | | Non-prefixed global variable |
| #5093 | Format Media Titles | 45 | 33 | 4 | 5k+ | | | Unsafe printing function |
| #5094 | which template file | 52 | 19 | 12 | 4k+ | | | Output is not escaped |
| #5095 | Embed YouTube Block – Fast Loading Videos, Shorts & Playlists | 100 | | 1 | 6k+ | | | mismatched plugin name |
| #5096 | Organic Profile Block | 88 | 3 | 6 | 1k+ | | | Input is not validated |
| #5097 | FancyBox Gallery | 97 | 4 | 5 | 400 | | | Missing Version |
| #5098 | PW WooCommerce Copy Coupon | 61 | 15 | 17 | 1k+ | | | Text Domain Mismatch |
| #5099 | Ozh' Better Feed | 38 | 45 | 35 | 600 | | | Heredoc Output Not Escaped |
| #5100 | Contact Form 7 – Repeatable Fields | 99 | 1 | 2 | 6k+ | | | trademarked term |