| #6301 | Advanced Image Hover Effect for Elementor | 81 | 251 | 8 | 1k+ | | | Text Domain Mismatch |
| #6302 | Contact Form 7 BWP reCAPTCHA Extension | 48 | 92 | 10 | 400 | | | Non Singular String Literal Domain |
| #6303 | Protected Posts Logout Button | 57 | 10 | 20 | 1k+ | | | Input is not sanitized |
| #6304 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #6305 | Posts Order | 59 | 59 | 20 | 1k+ | | | Text Domain Mismatch |
| #6306 | Super Web Share – Native Social Sharing Button | 82 | 24 | 19 | 2k+ | | | Non-prefixed function |
| #6307 | CatFolders Document Gallery & PDF Library | 39 | 66 | 32 | 3k+ | | | Output is not escaped |
| #6308 | Aspexi Social Media Sidebox | 50 | 175 | 12 | 700 | | | Text Domain Mismatch |
| #6309 | Transferito: WP Migration | 88 | 16 | 115 | 500 | | | Non-prefixed global variable |
| #6310 | Before + After Images for Divi | 97 | 12 | 3 | 3k+ | | | Missing direct file access protection |
| #6311 | Surbma | Smooth Scroll | 98 | 1 | 3 | 2k+ | | | Discouraged text-domain loading |
| #6312 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | | | Text Domain Mismatch |
| #6313 | Smart Keywords Tool – 智能关键词插件 | 31 | 361 | 33 | 600 | | | Non Singular String Literal Domain |
| #6314 | Block for Apple Maps | 92 | 14 | 3 | 1k+ | | | Missing direct file access protection |
| #6315 | Product Enquiry for WooCommerce | 40 | 57 | 41 | 3k+ | | | Output is not escaped |
| #6316 | Simple Membership MailChimp Integration | 45 | 34 | 27 | 900 | | | curl curl setopt |
| #6317 | Easy Auto Reload – Auto Refresh | 69 | 37 | 12 | 1k+ | | | Text Domain Mismatch |
| #6318 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #6319 | Clever Mega Menu for Visual Composer | 38 | 500 | 87 | 1k+ | | | Output is not escaped |
| #6320 | WP Search Suggest | 98 | 3 | 3 | 400 | | | trademarked term |
| #6321 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | | | curl curl setopt |
| #6322 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | | | Non-prefixed function |
| #6323 | Stock Market News | 38 | 71 | 11 | 500 | | | Output is not escaped |
| #6324 | WhatConverts | 74 | 10 | 10 | 7k+ | | | Non-prefixed function |
| #6325 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 700 | | | Text Domain Mismatch |
| #6326 | Statify Filter | 99 | | 6 | 2k+ | | | Direct Query |
| #6327 | iCalendrier | 40 | 65 | 7 | 700 | | | Output is not escaped |
| #6328 | Mortgage Calculators WP | 73 | 18 | 123 | 3k+ | | | Non-prefixed global variable |
| #6329 | StaticPress | 36 | 88 | 79 | 500 | | | Output is not escaped |
| #6330 | Selection Sharer by Hans van Gent | 96 | 6 | 4 | 2k+ | | | wp function not compatible with requires wp |
| #6331 | Swipe Slider – Make dynamic slider with solid, gradient, or image background | 83 | 2 | 15 | 3k+ | | | Non-prefixed global variable |
| #6332 | CodePen Embedded Pens Shortcode | 97 | 17 | 0 | 800 | | | wp function not compatible with requires wp |
| #6333 | Simple Visitor Counter | 38 | 41 | 27 | 700 | | | Output is not escaped |
| #6334 | WPCal.io – Easy Meeting Scheduler | 23 | 694 | 595 | 900 | | | Direct Query |
| #6335 | Calendar.online / Kalender.digital – Plugin | 72 | 33 | 7 | 2k+ | | | Output is not escaped |
| #6336 | All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier | 32 | 325 | 102 | 600 | | | Missing Arg Domain |
| #6337 | TypePad emoji for TinyMCE | 38 | 100 | 24 | 8k+ | | | Text Domain Mismatch |
| #6338 | SQL Chart Builder | 41 | 38 | 52 | 600 | | | Text Domain Mismatch |
| #6339 | Automatically Hierarchic Categories in Menu | 80 | 11 | 3 | 2k+ | | | Output is not escaped |
| #6340 | Flexible Subscriptions | 34 | 46 | 258 | 1k+ | | | Non-prefixed global variable |
| #6341 | Hidden Password Protected Pages | 99 | | 3 | 600 | | | Non-prefixed class |
| #6342 | Slideshow SE | 39 | 35 | 240 | 2k+ | | | Non-prefixed global variable |
| #6343 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | | | Non-prefixed global variable |
| #6344 | VK Dynamic If Block | 96 | 8 | 6 | 3k+ | | | date date |
| #6345 | Breadcrumb Block | 100 | | 0 | 3k+ | | | No open findings |
| #6346 | Contact Form 7 styler for Elementor Page Builder | 40 | 126 | 10 | 800 | | | Unsafe printing function |
| #6347 | Goal Tracker – Custom Event Tracking for GA4 | 38 | 541 | 25 | 2k+ | | | Output is not escaped |
| #6348 | WordClever – AI Content Writer | 86 | 4 | 2 | 3k+ | | | Missing direct file access protection |
| #6349 | Force First and Last Name as Display Name | 75 | 5 | 12 | 2k+ | | | Missing nonce verification |
| #6350 | Meks Audio Player | 67 | 25 | 7 | 1k+ | | | Output is not escaped |