| #5201 | Autoset Featured Image | 97 | 5 | 0 | 1k+ | | | Missing direct file access protection |
| #5202 | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 27 | 1,629 | 360 | 7k+ | | | Unsafe printing function |
| #5203 | Custom HTML Block Extension | 77 | 8 | 13 | 7k+ | | | Missing direct file access protection |
| #5204 | Meks Video Importer | 37 | 62 | 239 | 2k+ | | | Input is not sanitized |
| #5205 | Advanced Export for WP & WPMU | 36 | 124 | 55 | 700 | | | Output is not escaped |
| #5206 | Showeblogin Social Plugin | 47 | 59 | 5 | 400 | | | Output is not escaped |
| #5207 | WP Attachment Export | 48 | 16 | 25 | 600 | | | Input is not sanitized |
| #5208 | WP Downloader | 62 | 11 | 15 | 2k+ | | | Output is not escaped |
| #5209 | Recent Posts with Excerpts | 39 | 138 | 2 | 700 | | | Output is not escaped |
| #5210 | Century ToolKit | 33 | 118 | 78 | 700 | | | Output is not escaped |
| #5211 | Cloak Affiliate Links for WooCommerce | 58 | 28 | 6 | 2k+ | | | Non Singular String Literal Domain |
| #5212 | WC – APG Free Shipping | 100 | | 3 | 1k+ | | | trademarked term |
| #5213 | Export Media URLs | 100 | | 0 | 7k+ | | | No open findings |
| #5214 | Custom Thank You Page for WooCommerce | 83 | 7 | 6 | 2k+ | | | Output is not escaped |
| #5215 | WP Term Images | 66 | 4 | 18 | 2k+ | | | Nonce verification recommended |
| #5216 | Ceylon Demo Installer | 81 | 11 | 9 | 400 | | | Non-prefixed function |
| #5217 | Simple Universal Google Analytics | 78 | 11 | 0 | 4k+ | | | Output is not escaped |
| #5218 | IssueM | 33 | 56 | 173 | 600 | | | Request data is not unslashed |
| #5219 | Wbcom Designs – Shortcodes & Elementor Widgets For BuddyPress | 89 | 26 | 184 | 600 | | | Non-prefixed hook name |
| #5220 | SiteLock Security – WP Hardening, Login Security & Malware Scans | 89 | 44 | 9 | 1k+ | | | Text Domain Mismatch |
| #5221 | Reduce Unused CSS Solution with Critical CSS For WP | 96 | 48 | 12 | 1k+ | | | wp function not compatible with requires wp |
| #5222 | Custom Login Page Templates – Change Logo, Background and CSS | 66 | 25 | 5 | 2k+ | | | Missing Arg Domain |
| #5223 | MotoPress Appointment Booking | 23 | 2,362 | 857 | 2k+ | | | Text Domain Mismatch |
| #5224 | PRENA – Product Pre-Orders for WooCommerce | 78 | 6 | 29 | 2k+ | | | Request data is not unslashed |
| #5225 | wallee | 24 | 331 | 220 | 400 | | | Exception output is not escaped |
| #5226 | LIQUID BLOCKS – Slider, Carousel, Accordion | 42 | 50 | 31 | 4k+ | | | Unsafe printing function |
| #5227 | Disable Block Editor FullScreen mode | 87 | 6 | 2 | 1k+ | | | Output is not escaped |
| #5228 | ONTRApages | 53 | 16 | 27 | 1k+ | | | Output is not escaped |
| #5229 | Checkout Terms Conditions Popup for WooCommerce | 35 | 76 | 30 | 1k+ | | | Output is not escaped |
| #5230 | Cache Images | 39 | 72 | 27 | 1k+ | | | Unsafe printing function |
| #5231 | WC Speed Repair | 42 | 34 | 74 | 1k+ | | | Non-prefixed global variable |
| #5232 | Gelato Integration for WooCommerce | 42 | 36 | 32 | 5k+ | | | Output is not escaped |
| #5233 | QR Redirector | 39 | 48 | 54 | 4k+ | | | Output is not escaped |
| #5234 | Timeline Module for Beaver Builder | 95 | 217 | 29 | 2k+ | | | Text Domain Mismatch |
| #5235 | WowRevenue – Product Bundles & Bulk Discounts | 32 | 13 | 2,027 | 1k+ | | | Non-prefixed global variable |
| #5236 | Maps from Yandex for Elementor | 99 | 1 | 2 | 7k+ | | | missing composer json file |
| #5237 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 65 | 6 | 33 | 8k+ | | | Interpolated SQL is not prepared |
| #5238 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | | | Request data is not unslashed |
| #5239 | Loyalty Points Rewards and Referral for WooCommerce – WPLoyalty | 76 | 2,207 | 760 | 3k+ | | | Text Domain Mismatch |
| #5240 | Image Watermark WP | 39 | 88 | 82 | 600 | | | Output is not escaped |
| #5241 | WP Post Signature | 37 | 90 | 13 | 1k+ | | | Unsafe printing function |
| #5242 | MyFatoorah – WooCommerce | 25 | 191 | 89 | 3k+ | | | Output is not escaped |
| #5243 | phpinfo() WP — Site Health, PHP Compatibility & Server Audit | 25 | 276 | 704 | 3k+ | | | Non-prefixed global variable |
| #5244 | Remember Me Controls | 98 | 4 | 3 | 4k+ | | | Not Allowed |
| #5245 | Unlimited Addons For Gutenberg Blocks | 59 | 16 | 68 | 900 | | | slow db query meta key |
| #5246 | Heroic Glossary – Block for building Glossaries, Dictionaries and more | 86 | 8 | 7 | 3k+ | | | Text Domain Mismatch |
| #5247 | Web3 Crypto Payments by DePay for WooCommerce | 78 | 6 | 101 | 1k+ | | | Direct Query |
| #5248 | TinyMCE Spellcheck | 39 | 27 | 32 | 2k+ | | | Unsafe printing function |
| #5249 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #5250 | ConvertBox Auto Embed WordPress plugin | 68 | 18 | 10 | 5k+ | | | Missing direct file access protection |