| #6101 | SureContact – Newsletters, Email Marketing, Automation, Revenue Tracking & CRM | 36 | 314 | 132 | 8k+ | | | Text Domain Mismatch |
| #6102 | Weight zone shipping for WooCommerce | 73 | 25 | 13 | 1k+ | | | Missing Translators Comment |
| #6103 | Analytics Tracker | 35 | 4 | 5 | 1k+ | | | Hidden files included |
| #6104 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | | | Direct Query |
| #6105 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | | | Non-prefixed global variable |
| #6106 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | | | Request data is not unslashed |
| #6107 | Ele Conditions for Elementor | 35 | 2 | 7 | 4k+ | | | Request data is not unslashed |
| #6108 | CPS | Age Verification | 40 | 127 | 35 | 800 | | | Unsafe printing function |
| #6109 | Pricing Table – Block – Show Product or Service Pricing in Table Format | 96 | | 6 | 2k+ | | | Non-prefixed global variable |
| #6110 | Group chat for WordPress – Minnit Chat | 38 | 39 | 65 | 500 | | | Non-prefixed global variable |
| #6111 | Conditional WooCommerce Checkout Field | 40 | 84 | 22 | 400 | | | Unsafe printing function |
| #6112 | WP Affiliate Disclosure | 22 | 1,358 | 1,504 | 1k+ | | | Non-prefixed global variable |
| #6113 | Simple Testimonials Showcase | 84 | 33 | 11 | 500 | | | Missing Translators Comment |
| #6114 | Expand + Collapse Funk | 96 | 8 | 5 | 800 | | | Missing Arg Domain |
| #6115 | WP Post Expires | 43 | 21 | 15 | 2k+ | | | Output is not escaped |
| #6116 | Pushover Integration for WooCommerce | 77 | 107 | 7 | 800 | | | Text Domain Mismatch |
| #6117 | Pods Gravity Forms Add-On | 43 | | 79 | 1k+ | | | Missing nonce verification |
| #6118 | Wpazure Kit | 44 | 136 | 140 | 800 | | | Missing direct file access protection |
| #6119 | cookie-cat | 81 | 14 | 27 | 1k+ | | | Non-prefixed function |
| #6120 | Mailster for WooCommerce | 55 | 23 | 32 | 1k+ | | | Non-prefixed global variable |
| #6121 | Product Carousel Slider for Elementor | 36 | 148 | 63 | 1k+ | | | Text Domain Mismatch |
| #6122 | Shipping for Nova Poshta | 20 | 598 | 923 | 500 | | | Output is not escaped |
| #6123 | Privilege Menu | 39 | 215 | 49 | 1k+ | | | Text Domain Mismatch |
| #6124 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 600 | | | Missing Arg Domain |
| #6125 | Rel Nofollow | 88 | 9 | 1 | 700 | | | Missing Arg Domain |
| #6126 | WP Associate Post R2 | 35 | 259 | 86 | 3k+ | | | Output is not escaped |
| #6127 | Currency Exchange for WooCommerce | 23 | 692 | 505 | 500 | | | Output is not escaped |
| #6128 | Import Markdown – Versatile Markdown Importer | 88 | 25 | 9 | 2k+ | | | Missing Arg Domain |
| #6129 | SAML IDP (Identity Provider) – Login with Website Users | 35 | 13 | 326 | 600 | | | Non-prefixed global variable |
| #6130 | PagBank for WooCommerce | 68 | 8 | 36 | 3k+ | | | Input is not sanitized |
| #6131 | WPPerformanceTester | 35 | 94 | 44 | 1k+ | | | Output is not escaped |
| #6132 | Post Tiles | 40 | 46 | 5 | 400 | | | Output is not escaped |
| #6133 | ImageMagick Sharpen Resized Images | 54 | 22 | 6 | 1k+ | | | Output is not escaped |
| #6134 | Bring Fraktguiden for WooCommerce | Pending | - | - | 500 | | | Pending scan |
| #6135 | Unplug Jetpack | 98 | 4 | 0 | 1k+ | | | Missing direct file access protection |
| #6136 | CP Blocks | 36 | 46 | 38 | 1k+ | | | wp function not compatible with requires wp |
| #6137 | Conditional Display for Mobile – Mobile Detect Plugin | 48 | 4 | 112 | 2k+ | | | Input is not sanitized |
| #6138 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 842 | 3,717 | 500 | | | Request data is not unslashed |
| #6139 | Resizable Sidebar for the Gutenberg Block Editor | 97 | 3 | 4 | 2k+ | | | Missing Version |
| #6140 | Export Users With Meta | 70 | 13 | 13 | 2k+ | | | Direct Query |
| #6141 | Broken Link Notifier | 40 | 11 | 193 | 1k+ | | | Non-prefixed global variable |
| #6142 | Page Loader | 76 | 9 | 4 | 3k+ | | | Missing Version |
| #6143 | Ultimate Floating Widgets – Make popup sidebars | 50 | 48 | 14 | 3k+ | | | Output is not escaped |
| #6144 | Online Lesson Booking | 27 | 978 | 281 | 500 | | | Non Singular String Literal Domain |
| #6145 | Ketchup Shortcodes | 96 | 9 | 1 | 400 | | | wp function not compatible with requires wp |
| #6146 | Email Post Changes | 63 | 43 | 8 | 500 | | | Missing Arg Domain |
| #6147 | SAR Friendly SMTP | 98 | 2 | 11 | 2k+ | | | Non-prefixed function |
| #6148 | Schedule Posts Calendar | 40 | 74 | 36 | 1k+ | | | Output is not escaped |
| #6149 | Payflex Payment Gateway | 33 | 181 | 61 | 1k+ | | | Text Domain Mismatch |
| #6150 | Disable Bulk Smush Limit of Smush Image Optimization | 35 | 3 | 2 | 3k+ | | | Hidden files included |