| #6801 | MathML Block | 35 | 10 | 2 | 1k+ | | | Hidden files included |
| #6802 | Password Strength for WooCommerce | 98 | 3 | 0 | 1k+ | | | Missing direct file access protection |
| #6803 | TextBuilder | 56 | 20 | 34 | 4k+ | | | Missing Arg Domain |
| #6804 | Feedback Button – Jotform | 97 | 25 | 10 | 600 | | | Missing Arg Domain |
| #6805 | Bulk NoIndex & NoFollow Toolkit | 39 | 72 | 172 | 2k+ | | | Nonce verification recommended |
| #6806 | Firebase Authentication | 100 | | 2 | 500 | | | slow db query meta key |
| #6807 | Absolute Relative URLs | 98 | 2 | 1 | 1k+ | | | outdated tested upto header |
| #6808 | ACF: Advanced Taxonomy Selector | 41 | 56 | 15 | 1k+ | | | Output is not escaped |
| #6809 | Cookie Law Bar | 45 | 29 | 20 | 2k+ | | | Output is not escaped |
| #6810 | Notification Attachments for Gravity Forms | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #6811 | Text Spinner | 96 | 6 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #6812 | WP Notification Bell | 24 | 736 | 1,591 | 700 | | | Non-prefixed global variable |
| #6813 | Tourfic Toolkit | 37 | 67 | 165 | 1k+ | | | Post Not In exclude |
| #6814 | Plugins Last Updated Column | 49 | 21 | 14 | 700 | | | Output is not escaped |
| #6815 | Fluent Forms Connector for MailPoet | 98 | 28 | 7 | 1k+ | | | Text Domain Mismatch |
| #6816 | VenoBox Lightbox | 91 | 11 | 4 | 1k+ | | | Text Domain Mismatch |
| #6817 | Portfolios | 85 | 10 | 2 | 700 | | | Output is not escaped |
| #6818 | Custom Classes | 85 | 5 | 8 | 2k+ | | | Request data is not unslashed |
| #6819 | WP Force Lowercase URLs | 84 | 2 | 9 | 6k+ | | | trademarked term |
| #6820 | FAQ Concertina | 40 | 43 | 16 | 600 | | | Output is not escaped |
| #6821 | Nudgify Social Proof | 80 | 3 | 12 | 500 | | | Discouraged PHP function |
| #6822 | Datawrapper oEmbed | 98 | 3 | 0 | 800 | | | Missing direct file access protection |
| #6823 | DarkLooks – Dark Mode Switcher For WordPress | 35 | 195 | 21 | 900 | | | Text Domain Mismatch |
| #6824 | Advanced Category and Custom Taxonomy Image | 100 | | 2 | 1k+ | | | Non-prefixed class |
| #6825 | Flexible Content Extended for Advanced Custom Fields | 83 | 11 | 4 | 600 | | | Output is not escaped |
| #6826 | WP Automatic Updates | 79 | 50 | 7 | 400 | | | Text Domain Mismatch |
| #6827 | Re Gallery – Responsive Image & Photo Gallery | 39 | 16 | 122 | 700 | | | Missing nonce verification |
| #6828 | Siteready Coming Soon Under Construction | 76 | 6 | 30 | 3k+ | | | Non-prefixed global variable |
| #6829 | Anonymous Restricted Content | 43 | 22 | 24 | 1k+ | | | Unsafe printing function |
| #6830 | Coldbox Addons | 97 | 11 | 2 | 800 | | | Missing direct file access protection |
| #6831 | GPX Viewer | 71 | 10 | 26 | 900 | | | Missing Version |
| #6832 | Recurring PayPal Donations | 41 | 48 | 47 | 800 | | | Text Domain Mismatch |
| #6833 | Melapress Login Security | 31 | 69 | 278 | 2k+ | | | Non-prefixed global variable |
| #6834 | Age Verification for your checkout page. Verify your customer's identity | 36 | 155 | 238 | 500 | | | Output is not escaped |
| #6835 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #6836 | EchBay Phonering Alo | 33 | 74 | 47 | 1k+ | | | Output is not escaped |
| #6837 | Payfast Gateway for WooCommerce | 81 | 2 | 18 | 2k+ | | | Missing nonce verification |
| #6838 | Offload Media – Cloud Storage | 29 | 126 | 80 | 1k+ | | | unlink unlink |
| #6839 | F4 Media Taxonomies | 54 | 7 | 39 | 1k+ | | | Input is not sanitized |
| #6840 | Page Management Dropdown | 97 | 3 | 3 | 600 | | | Direct Query |
| #6841 | Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments | 70 | 12 | 52 | 800 | | | Non-prefixed global variable |
| #6842 | Five-Star Ratings Shortcode | 23 | 604 | 1,317 | 600 | | | Non-prefixed global variable |
| #6843 | Facturare WooCommerce | 37 | 158 | 106 | 3k+ | | | Text Domain Mismatch |
| #6844 | FormFacade – Embed Google Forms in your website | 83 | 8 | 17 | 1k+ | | | Nonce verification recommended |
| #6845 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | | | Output is not escaped |
| #6846 | Archive Control | 39 | 151 | 67 | 1k+ | | | Unsafe printing function |
| #6847 | Jetpack Without Promotions | 98 | 2 | 2 | 1k+ | | | trademarked term |
| #6848 | Opal Service | 28 | 339 | 329 | 900 | | | Non-prefixed global variable |
| #6849 | Holded integration | 55 | 72 | 23 | 2k+ | | | Non Singular String Literal Domain |
| #6850 | Better Random Redirect | 39 | 88 | 40 | 700 | | | Text Domain Mismatch |