| #6151 | SmartFormat feed for SmartNews | 54 | 64 | 27 | 1k+ | | | Missing Arg Domain |
| #6152 | CSS | 89 | 10 | 1 | 500 | | | Missing Arg Domain |
| #6153 | WANotifier for Forms and Actions | 26 | 309 | 280 | 1k+ | | | Text Domain Mismatch |
| #6154 | Eurobank WooCommerce Payment Gateway | 40 | 66 | 43 | 2k+ | | | Non Singular String Literal Domain |
| #6155 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |
| #6156 | Simple Sticky Header on Scroll | 70 | 31 | 8 | 900 | | | Output is not escaped |
| #6157 | SendPulse Email Marketing Newsletter | 77 | 8 | 7 | 1k+ | | | Output is not escaped |
| #6158 | MotoPress Hotel Booking for Divi | 95 | 22 | 11 | 1k+ | | | Missing direct file access protection |
| #6159 | Editor Full Width Gutenberg | 97 | 3 | 4 | 4k+ | | | trademarked term |
| #6160 | PDF Importer for WPForms | 25 | 332 | 329 | 400 | | | Non-prefixed global variable |
| #6161 | Import into Easy Property Listings | 49 | 335 | 24 | 1k+ | | | Text Domain Mismatch |
| #6162 | WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation | 75 | 2 | 60 | 1k+ | | | Database parameter is not escaped |
| #6163 | Co-marquage service-public.fr | 31 | 84 | 213 | 1k+ | | | Non-prefixed global variable |
| #6164 | LLMs.txt and LLMs-Full.txt Generator | 94 | 14 | 9 | 4k+ | | | Non-prefixed global variable |
| #6165 | Slide everything for Elementor | 61 | 93 | 1 | 6k+ | | | Text Domain Mismatch |
| #6166 | Visma Pay for Woocommerce | 40 | 27 | 37 | 2k+ | | | Output is not escaped |
| #6167 | Print Page Block – Print Full Page or Specific Section | 100 | | 0 | 1k+ | | | No open findings |
| #6168 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #6169 | SweepPress: Website Cleanup and Optimization | 40 | 77 | 200 | 500 | | | Non-prefixed global variable |
| #6170 | UserHeat Plugin | 39 | 121 | 20 | 6k+ | | | Non Singular String Literal Domain |
| #6171 | ShopEngine Gutenberg WooCommerce Builder Blocks Addon – All in One WooCommerce Solution | 80 | 424 | 735 | 3k+ | | | Non-prefixed global variable |
| #6172 | Web Icons | 49 | 51 | 10 | 1k+ | | | Output is not escaped |
| #6173 | Tuskcode Map Pro for Bing Maps | 35 | 59 | 359 | 600 | | | Direct Query |
| #6174 | Clariti | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #6175 | AdOpt | Easy Multi-Regulations Cookie Banner. | 69 | 22 | 27 | 7k+ | | | Missing direct file access protection |
| #6176 | Product Layouts for WooCommerce | 74 | 5 | 75 | 1k+ | | | Direct Query |
| #6177 | Right Click Disable Orignal | 97 | 4 | 3 | 1k+ | | | Missing Version |
| #6178 | Decimal Product Quantity for WooCommerce | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6179 | Donation Block For PayPal | 37 | 23 | 106 | 600 | | | Input is not validated |
| #6180 | Custom Link Widget | 67 | 28 | 0 | 1k+ | | | Output is not escaped |
| #6181 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #6182 | Awin Publisher MasterTag | 82 | 6 | 6 | 1k+ | | | Non-prefixed global variable |
| #6183 | Surbma | Yoast SEO Sitemap to robots.txt | 98 | 1 | 6 | 2k+ | | | trademarked term |
| #6184 | Admin Customizer | 36 | 143 | 64 | 1k+ | | | Output is not escaped |
| #6185 | bbPress Enable TinyMCE Visual Tab | 87 | 12 | 4 | 600 | | | Text Domain Mismatch |
| #6186 | Robots.txt rewrite | 35 | 56 | 19 | 1k+ | | | Output is not escaped |
| #6187 | Off-Canvas Sidebars & Menus (Slidebars) | 37 | 457 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #6188 | CHIP for WooCommerce | 100 | | 0 | 4k+ | | | No open findings |
| #6189 | Extra Price Fields for Woocommerce- Display extra price info on Woocommerce products | 82 | 6 | 10 | 2k+ | | | Missing nonce verification |
| #6190 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | | | Output is not escaped |
| #6191 | WP Fingerprint | 42 | 34 | 47 | 9k+ | | | Direct Query |
| #6192 | Syncee Premium Dropshipping & Wholesale | 97 | 50 | 3 | 1k+ | | | Text Domain Mismatch |
| #6193 | Currency Converter Calculator | 100 | | 0 | 1k+ | | | No open findings |
| #6194 | Themify Audio Dock | 35 | 22 | 9 | 900 | | | Non-prefixed global variable |
| #6195 | Injection Guard | 37 | 86 | 45 | 1k+ | | | Unsafe printing function |
| #6196 | Disable Feeds WP | 100 | | 3 | 10k+ | | | trademarked term |
| #6197 | TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More | 37 | 878 | 59 | 800 | | | Output is not escaped |
| #6198 | The Simplest Favicon | 93 | 3 | 0 | 700 | | | Missing direct file access protection |
| #6199 | Limit Post Add-On | 97 | 22 | 0 | 400 | | | wp function not compatible with requires wp |
| #6200 | Simple Google Calendar Outlook Events Widget | 99 | | 3 | 1k+ | | | error log error log |