| #5951 | mypace Custom Meta Robots | 82 | 4 | 6 | 2k+ | | | Input is not sanitized |
| #5952 | File Upload For WPForms – Filenzo | 59 | 8 | 16 | 1k+ | | | Output is not escaped |
| #5953 | Disable WordPress Core Update Email | 98 | 2 | 3 | 2k+ | | | trademarked term |
| #5954 | Comments Form Star Rating Plugin for WordPress | 84 | 3 | 10 | 2k+ | | | Missing nonce verification |
| #5955 | Change Empty Trash Time | 91 | 5 | 3 | 1k+ | | | Missing direct file access protection |
| #5956 | Justify for Paragraph Block | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #5957 | Limit Revisions | 91 | 7 | 1 | 1k+ | | | Missing Arg Domain |
| #5958 | LegalBlink for Aruba | 91 | 33 | 29 | 6k+ | | | Missing direct file access protection |
| #5959 | ActiveLayer Anti-Spam: Spam Protection for Forms & Comments | 96 | | 2 | 1k+ | | | Database parameter is not escaped |
| #5960 | Vibe AI – MCP Server for WordPress. Connect Claude, ChatGPT & Cursor | 68 | 10 | 24 | 2k+ | | | Non-prefixed global variable |
| #5961 | Hide WP Admin Notifications | 99 | | 4 | 1k+ | | | trademarked term |
| #5962 | BabyLoveGrowth Integration | 35 | 2 | 9 | 1k+ | | | Direct Query |
| #5963 | Ninja Van (MY) | 37 | 21 | 258 | 1k+ | | | Non-prefixed global variable |
| #5964 | Advanced Marquee Effect for Elementor | 80 | 11 | 4 | 2k+ | | | Output is not escaped |
| #5965 | iConvert Promoter | 57 | 98 | 217 | 1k+ | | | Non-prefixed global variable |
| #5966 | Customization for WP SEO | 58 | 15 | 10 | 2k+ | | | Unsafe printing function |
| #5967 | ThemeRuby Multi Authors – Assign Multiple Writers to Posts | 98 | 3 | 4 | 2k+ | | | wp function not compatible with requires wp |
| #5968 | SurveyX Builder – Easy Feedback, Poll, Quiz & Survey | 81 | | 22 | 2k+ | | | Interpolated SQL is not prepared |
| #5969 | Beckin Maintenance Mode | 100 | | 0 | 1k+ | | | No open findings |
| #5970 | Tiny Yardage Calculator | 72 | 23 | 1 | 300 | | | Output is not escaped |
| #5971 | Traffic Monitor | 39 | 6 | 143 | 1k+ | | | Direct Query |
| #5972 | Addon Elementor Container Link | 99 | 1 | 1 | 2k+ | | | Discouraged text-domain loading |
| #5973 | Custom Shortcodes | 96 | 5 | 2 | 5k+ | | | Missing direct file access protection |
| #5974 | WP Admin Basic Auth | 87 | 5 | 6 | 2k+ | | | Input is not sanitized |
| #5975 | Skydropx | 88 | 4 | 9 | 1k+ | | | Non-prefixed global variable |
| #5976 | Juiz Lang Attribute | 54 | 26 | 27 | 1k+ | | | Text Domain Mismatch |
| #5977 | AutoCEP | 96 | 7 | 8 | 1k+ | | | error log error log |
| #5978 | If-So Conditional Content for Elementor | 90 | 5 | 1 | 1k+ | | | Missing direct file access protection |
| #5979 | Universally – AI Translation & Multilingual SEO: Translate Your Site into 110+ Languages | 100 | | 1 | 2k+ | | | mismatched plugin name |
| #5980 | Prepare New Version | 42 | 53 | 24 | 6k+ | | | Output is not escaped |
| #5981 | Read More WP | 23 | 570 | 1,311 | 1k+ | | | Non-prefixed global variable |
| #5982 | External Thumbnail | 81 | 6 | 5 | 20k+ | | | Missing nonce verification |
| #5983 | Static 404 | 85 | 1 | 7 | 3k+ | | | Input is not sanitized |
| #5984 | Advanced Posts/Page | 91 | 16 | 2 | 3k+ | | | Text Domain Mismatch |
| #5985 | Taxonomy Tags to Checkboxes | 35 | 2 | 0 | 1k+ | | | Hidden files included |
| #5986 | My-Plugins | 72 | 24 | 6 | 20k+ | | | Missing Arg Domain |
| #5987 | aapanel WP Toolkit | 71 | 20 | 18 | 2k+ | | | wp function not compatible with requires wp |
| #5988 | Post slider elementor addons | 78 | 45 | 8 | 3k+ | | | Text Domain Mismatch |
| #5989 | AIKTP | 99 | 1 | 1 | 3k+ | | | Mixed line endings |
| #5990 | Eventer | 40 | 61 | 55 | 1k+ | | | Output is not escaped |
| #5991 | Simple Keyword to Link | 38 | 90 | 49 | 3k+ | | | Non Singular String Literal Domain |
| #5992 | PDF Smart Viewer for Elementor | 77 | 18 | 16 | 1k+ | | | Non-prefixed global variable |
| #5993 | Load Combined Core Block Assets | 100 | | 0 | 1k+ | | | No open findings |
| #5994 | Maven Algolia | 28 | 148 | 89 | 6k+ | | | Non Singular String Literal Domain |
| #5995 | WP Faster | 78 | 7 | 12 | 2k+ | | | trademarked term |
| #5996 | Koala AI | 89 | | 9 | 1k+ | | | Nonce verification recommended |
| #5997 | WP Spam Question Filter | 35 | 63 | 30 | 2k+ | | | Output is not escaped |
| #5998 | Shore Booking Widget | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5999 | ContentProtector – password protect your page, post or text | 95 | 1 | 3 | 2k+ | | | Non-prefixed class |
| #6000 | HTACCESS IP Blocker | 65 | 5 | 14 | 3k+ | | | Missing nonce verification |
