| #6351 | WP REST Yoast Meta | 97 | 2 | 8 | 1k+ | | | trademarked term |
| #6352 | One Click Order Re-Order | 38 | 139 | 63 | 1k+ | | | Non Singular String Literal Domain |
| #6353 | Interlinks Manager – Internal Links Optimizer | 80 | 17 | 13 | 7k+ | | | Database parameter is not escaped |
| #6354 | WPC Custom Related Products for WooCommerce | 91 | | 26 | 1k+ | | | Non-prefixed class |
| #6355 | Cart PDF for WooCommerce | 23 | 531 | 172 | 1k+ | | | Exception output is not escaped |
| #6356 | Pix Automático com Pagarme para WooCommerce | 34 | 68 | 66 | 400 | | | Non-prefixed global variable |
| #6357 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #6358 | Foyer – Digital Signage for WordPress | 38 | 148 | 191 | 1k+ | | | Non-prefixed global variable |
| #6359 | Image Rotation Fixer | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #6360 | Duplicate Variations for WooCommerce | 84 | 6 | 12 | 2k+ | | | Non-prefixed global variable |
| #6361 | Walker Core | 22 | 1,351 | 1,436 | 700 | | | Non-prefixed global variable |
| #6362 | Wetterwarner | 90 | 5 | 12 | 500 | | | Non-prefixed function |
| #6363 | Database Collation Fix | 100 | 14 | 1 | 1k+ | | | Text Domain Mismatch |
| #6364 | XPS Ship Integration | 91 | 58 | 20 | 1k+ | | | Text Domain Mismatch |
| #6365 | Bob Go smart shipping solution for WooCommerce | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6366 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | | | Output is not escaped |
| #6367 | Coming Soon Badges for WooCommerce | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6368 | Christmas Panda | 62 | 14 | 45 | 400 | | | Input is not validated |
| #6369 | IndieWeb | 35 | 5 | 9 | 600 | | | Non-prefixed hook name |
| #6370 | Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin | 42 | 472 | 181 | 400 | | | Text Domain Mismatch |
| #6371 | WP Insert Code | 88 | 6 | 4 | 1k+ | | | trademarked term |
| #6372 | AinoBlocks – Gutenberg Website Builder Blocks | 97 | 18 | 4 | 1k+ | | | block api version too low |
| #6373 | ERE Similar Properties – Essential Real Estate Add-On | 91 | 4 | 3 | 1k+ | | | Missing direct file access protection |
| #6374 | Restore PayPal Standard for WooCommerce | 47 | 19 | 53 | 3k+ | | | Nonce verification recommended |
| #6375 | IndieAuth | 92 | 31 | 27 | 400 | | | Missing direct file access protection |
| #6376 | JSM Show Term Metadata | 40 | 14 | 64 | 800 | | | Nonce verification recommended |
| #6377 | Social Fabric Analytics From Collective Bias | 71 | 17 | 0 | 1k+ | | | Output is not escaped |
| #6378 | Scroll Back To Top Button | 49 | 73 | 1 | 3k+ | | | Missing Arg Domain |
| #6379 | MS Custom Login | 41 | 117 | 6 | 900 | | | Unsafe printing function |
| #6380 | Ultimate Member – ForumWP forum integration | 40 | 31 | 73 | 500 | | | Nonce verification recommended |
| #6381 | Liza Widget For Spotify and Elementor | 27 | 609 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #6382 | Turbo Addons Elementor | 100 | | 2 | 2k+ | | | No PHP code found |
| #6383 | BCM Duplicate Menu | 58 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #6384 | Author Category | 38 | 85 | 25 | 4k+ | | | Output is not escaped |
| #6385 | Smart WYSIWYG Blocks Of Content | 70 | 36 | 4 | 1k+ | | | Output is not escaped |
| #6386 | SEUR Oficial | 35 | 25 | 298 | 1k+ | | | Non-prefixed global variable |
| #6387 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #6388 | Clear Autoptimize Cache Automatically | 93 | 3 | 9 | 4k+ | | | Request data is not unslashed |
| #6389 | senangpay | 44 | 38 | 46 | 1k+ | | | Text Domain Mismatch |
| #6390 | Simple WP Retina | 98 | 2 | 6 | 1k+ | | | trademarked term |
| #6391 | qTranslate META | 38 | 88 | 26 | 400 | | | Output is not escaped |
| #6392 | ShopMagic – Twilio SMS | 35 | 2 | 10 | 800 | | | Non-prefixed global variable |
| #6393 | Cron Jobs | 62 | 21 | 33 | 2k+ | | | Nonce verification recommended |
| #6394 | Aparat for WordPress | 39 | 59 | 14 | 3k+ | | | Output is not escaped |
| #6395 | SimpleShop | 38 | 52 | 51 | 1k+ | | | date date |
| #6396 | Roles & Capabilities | 44 | 24 | 79 | 1k+ | | | Nonce verification recommended |
| #6397 | Access Areas for WordPress | 35 | 17 | 95 | 400 | | | Direct Query |
| #6398 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #6399 | Highcompress Image Compressor | 41 | 106 | 69 | 600 | | | Text Domain Mismatch |
| #6400 | Dropdown multisite selector | 41 | 82 | 13 | 900 | | | Unsafe printing function |