| #5251 | Black Studio Touch Dropdown Menu | 97 | 2 | 3 | 1k+ | | | Not In Footer |
| #5252 | Fix Duplicates | 39 | 76 | 73 | 800 | | | Output is not escaped |
| #5253 | PDF Compressor & Watermark – iLovePDF | 35 | 216 | 5 | 600 | | | Text Domain Mismatch |
| #5254 | BOX NOW Delivery | 99 | 1 | 2 | 6k+ | | | Non-prefixed hook name |
| #5255 | Taboola | 30 | 89 | 147 | 1k+ | | | Output is not escaped |
| #5256 | Genesis Easy Columns | 85 | 8 | 1 | 2k+ | | | Missing direct file access protection |
| #5257 | Comments Extra Fields For Post,Pages and CPT | 25 | 577 | 418 | 500 | | | Text Domain Mismatch |
| #5258 | TaxCloud for WooCommerce | 33 | 23 | 261 | 500 | | | Non-prefixed function |
| #5259 | LifterLMS Labs | 55 | 51 | 8 | 2k+ | | | Output is not escaped |
| #5260 | Mailchimp Widget by ProteusThemes | 66 | 17 | 9 | 1k+ | | | Output is not escaped |
| #5261 | Helper Lite for PageSpeed | 98 | 5 | 4 | 3k+ | | | Missing Arg Domain |
| #5262 | Birds Custom Login | 39 | 196 | 23 | 4k+ | | | Non Singular String Literal Domain |
| #5263 | Gravity Forms – Placeholders add-on | 90 | 5 | 5 | 2k+ | | | trademarked term |
| #5264 | Product Category Showcase for WooCommerce | 96 | 8 | 45 | 1k+ | | | Non-prefixed global variable |
| #5265 | WPOrLogin – Custom Login, Social Login, Limit Attempts, Hide Login & reCAPTCHA | 31 | 483 | 217 | 2k+ | | | Unsafe printing function |
| #5266 | Advanced Media Offloader | 38 | 57 | 93 | 5k+ | | | error log error log |
| #5267 | Auto Prune Posts | 38 | 54 | 57 | 1k+ | | | Output is not escaped |
| #5268 | HTTP Authentication | 35 | 23 | 6 | 600 | | | Output is not escaped |
| #5269 | Disable Everything | 41 | 90 | 16 | 30k+ | | | Output is not escaped |
| #5270 | Enhanced Category Pages | 55 | 23 | 25 | 2k+ | | | Direct Query |
| #5271 | Autopost for X (formerly Autoshare for Twitter) | 97 | 11 | 2 | 5k+ | | | Missing direct file access protection |
| #5272 | wp-mpdf | 27 | 123 | 382 | 1k+ | | | Non-prefixed global variable |
| #5273 | Log Out Shortcode | 99 | 3 | 0 | 3k+ | | | Missing Arg Domain |
| #5274 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | | | Text Domain Mismatch |
| #5275 | Ubigeo de Perú para Woocommerce y WordPress | 36 | 191 | 235 | 4k+ | | | Non-prefixed function |
| #5276 | Plover Kit – Blocks, Patterns, Responsive Layout and Gutenberg Editor Enhancements | 25 | 688 | 1,383 | 3k+ | | | Non-prefixed global variable |
| #5277 | Abandoned Cart Reports For WooCommerce | 34 | 133 | 163 | 1k+ | | | Output is not escaped |
| #5278 | Multipage | 40 | 72 | 28 | 900 | | | Unsafe printing function |
| #5279 | Full Width Banner Slider Wp | 35 | 239 | 140 | 2k+ | | | Output is not escaped |
| #5280 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #5281 | Display Tweets | 29 | 135 | 135 | 900 | | | Non-prefixed global variable |
| #5282 | Custom Recent Posts Widget | 41 | 63 | 4 | 1k+ | | | Output is not escaped |
| #5283 | Kybernaut IČO DIČ | 35 | 79 | 68 | 2k+ | | | Missing nonce verification |
| #5284 | Embed Google Fonts | 64 | 28 | 7 | 5k+ | | | Output is not escaped |
| #5285 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | | | Missing direct file access protection |
| #5286 | Airi Demo Importer | 98 | 1 | 7 | 1k+ | | | Deprecated function: get_page_by_title |
| #5287 | Wenprise Pinyin Slug | 52 | 30 | 34 | 4k+ | | | Text Domain Mismatch |
| #5288 | Post UI Tabs | 76 | 55 | 4 | 400 | | | Non Singular String Literal Domain |
| #5289 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 6k+ | | | Text Domain Mismatch |
| #5290 | Advanced Spoiler | 39 | 106 | 19 | 600 | | | Non Singular String Literal Domain |
| #5291 | Taxonomy Thumbnail | 39 | 27 | 58 | 3k+ | | | Non-prefixed function |
| #5292 | Query Multiple Taxonomies | 39 | 55 | 41 | 500 | | | Output is not escaped |
| #5293 | WP-Farsi | 65 | 26 | 36 | 600 | | | Non-prefixed function |
| #5294 | Responder | 29 | 77 | 185 | 3k+ | | | Non-prefixed global variable |
| #5295 | DecaLog | 25 | 943 | 236 | 1k+ | | | Exception output is not escaped |
| #5296 | Block, Suspend, Report for BuddyPress | 96 | 3 | 24 | 600 | | | slow db query meta query |
| #5297 | WP Plugin Info Card | 37 | 53 | 376 | 500 | | | Nonce verification recommended |
| #5298 | Payments via PayMongo for WooCommerce | 39 | 36 | 81 | 1k+ | | | Nonce verification recommended |
| #5299 | Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light | 23 | 386 | 999 | 400 | | | Non-prefixed global variable |
| #5300 | StreamWeasels Twitch Integration | 23 | 555 | 1,465 | 1k+ | | | Non-prefixed global variable |