| #6501 | WP Hooks Finder | 52 | 27 | 31 | 1k+ | | | Output is not escaped |
| #6502 | Simplelightbox | 59 | 32 | 4 | 1k+ | | | Output is not escaped |
| #6503 | Password bcrypt | 97 | 4 | 1 | 2k+ | | | Direct Query |
| #6504 | SVG Flags – Beautiful Scalable Flags For All Countries! | 22 | 755 | 1,251 | 2k+ | | | Non-prefixed global variable |
| #6505 | Easy WP Page Navigation | 52 | 60 | 8 | 800 | | | Non Singular String Literal Domain |
| #6506 | MAS Companies For WP Job Manager | 33 | 62 | 308 | 1k+ | | | Non-prefixed hook name |
| #6507 | Navigation Block with Mega Menu | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6508 | Apaczka.pl Mapa Punktów | 87 | 8 | 9 | 2k+ | | | Missing nonce verification |
| #6509 | Pre-Publish Checklist | 35 | 7 | 2 | 1k+ | | | Missing direct file access protection |
| #6510 | Better Business Reviews – Trustpilot WordPress Plugin | 85 | 4 | 7 | 3k+ | | | Output is not escaped |
| #6511 | Simple Header Footer HTML | 35 | 30 | 5 | 3k+ | | | Output is not escaped |
| #6512 | Masonry Widget | 41 | 58 | 11 | 500 | | | Output is not escaped |
| #6513 | Super Simple Event Calendar | 58 | 8 | 24 | 600 | | | Request data is not unslashed |
| #6514 | Powie's WHOIS Domain Check | 41 | 38 | 11 | 500 | | | Unsafe printing function |
| #6515 | WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 | 28 | 57 | 138 | 500 | | | Request data is not unslashed |
| #6516 | RS Author Info Box | 84 | 36 | 2 | 2k+ | | | Text Domain Mismatch |
| #6517 | Widget Detector for Elementor | 24 | 1,057 | 1,567 | 1k+ | | | Non-prefixed global variable |
| #6518 | Shipping with Venipak for WooCommerce | 36 | 239 | 61 | 1k+ | | | Text Domain Mismatch |
| #6519 | Duplicate Post – duplicate pages, copy content, clone posts | 36 | 76 | 81 | 5k+ | | | wp function not compatible with requires wp |
| #6520 | Require Login for WooCommerce | 35 | 10 | 6 | 2k+ | | | wp function not compatible with requires wp |
| #6521 | Video Player Block – HTML5, MP4, YouTube & Vimeo Player | 100 | | 1 | 2k+ | | | slow db query meta key |
| #6522 | Share on Mastodon | 96 | 24 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #6523 | Emoji Settings | 88 | 4 | 5 | 2k+ | | | Input is not sanitized |
| #6524 | Speed Up – Browser Caching | 96 | 12 | 2 | 700 | | | file system operations is writable |
| #6525 | M-Pesa(Kenya) Checkout for Woocommerce | 41 | 46 | 38 | 1k+ | | | Text Domain Mismatch |
| #6526 | Designil PDPA Thailand | 39 | 131 | 36 | 3k+ | | | Output is not escaped |
| #6527 | Change Username | 35 | 7 | 10 | 4k+ | | | Direct Query |
| #6528 | Automatic Copyright Year | 98 | 4 | 0 | 6k+ | | | date date |
| #6529 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #6530 | Doppler Easy Multichannel Marketing enhanced with IA | 96 | 11 | 6 | 600 | | | wp function not compatible with requires wp |
| #6531 | Easy Lightbox – Image, Gallery and Video Lightbox for WordPress | 97 | 2 | 5 | 1k+ | | | trademarked term |
| #6532 | Crypto Price Widgets – CryptoWP | 40 | 103 | 43 | 600 | | | Output is not escaped |
| #6533 | ExS Widgets | 98 | 112 | 3 | 1k+ | | | Text Domain Mismatch |
| #6534 | Advanced Sermons | 38 | 833 | 184 | 1k+ | | | Unsafe printing function |
| #6535 | Footer Credits | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #6536 | Cecabank WooCommerce Plugin | 38 | 63 | 32 | 3k+ | | | Text Domain Mismatch |
| #6537 | Remove Author Pages | 98 | 3 | 0 | 2k+ | | | Missing direct file access protection |
| #6538 | Show IDs by Echo | 47 | 21 | 13 | 2k+ | | | Output is not escaped |
| #6539 | AIKO – AI Developer Lite | 79 | 10 | 7 | 6k+ | | | error log error log |
| #6540 | Farsi Font for Elementor | 87 | 11 | 2 | 1k+ | | | Missing Translators Comment |
| #6541 | Custom Content Width | 86 | 8 | 0 | 1k+ | | | Text Domain Mismatch |
| #6542 | Image Widget Deluxe | 37 | 190 | 1 | 1k+ | | | Output is not escaped |
| #6543 | Forumax – AI Powered Advanced Community Forum Plugin | 21 | 4,935 | 4,354 | 600 | | | Text Domain Mismatch |
| #6544 | Flipbox | 80 | 14 | 17 | 2k+ | | | wp function not compatible with requires wp |
| #6545 | Stealth Publish | 52 | 7 | 22 | 900 | | | Missing nonce verification |
| #6546 | Leira Letter Avatar | 93 | 3 | 8 | 6k+ | | | Non-prefixed hook name |
| #6547 | Morning for WooCommerce | 53 | 7 | 59 | 1k+ | | | Non-prefixed global variable |
| #6548 | Quick remove menu item | 95 | 7 | 3 | 3k+ | | | Missing Version |
| #6549 | Infobox | 82 | 15 | 12 | 1k+ | | | file system operations mkdir |
| #6550 | Client Portal : SuiteDash Direct Login | 40 | 93 | 17 | 1k+ | | | Text Domain Mismatch |