| #5151 | MWW Disclaimer Buttons | 48 | 21 | 16 | 400 | | | Output is not escaped |
| #5152 | MX Time Zone Clocks | 38 | 219 | 41 | 1k+ | | | Output is not escaped |
| #5153 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,220 | 1,399 | 2k+ | | | Text Domain Mismatch |
| #5154 | Admin Bookmarks | 76 | 30 | 4 | 500 | | | Text Domain Mismatch |
| #5155 | My auctions allegro | 28 | 483 | 235 | 500 | | | Non Singular String Literal Domain |
| #5156 | My Calendar – Accessible Event Manager | 25 | 10 | 2,193 | 20k+ | | | Non-prefixed function |
| #5157 | My Eyes Are Up Here | 35 | 7 | 12 | 2k+ | | | Missing nonce verification |
| #5158 | My Favorites | 41 | 35 | 34 | 1k+ | | | Output is not escaped |
| #5159 | My-Plugins | 72 | 24 | 6 | 20k+ | | | Missing Arg Domain |
| #5160 | My Post Order | 37 | 100 | 114 | 400 | | | Output is not escaped |
| #5161 | MyServerInfo – Memory Usage, PHP Version, Memory Limit, Execution Time, CPU Usage, Disk Usage | 96 | 1 | 2 | 700 | | | mismatched plugin name |
| #5162 | My Simple Space | 73 | 21 | 3 | 8k+ | | | Output is not escaped |
| #5163 | My Social Feeds – Social Feeds Embedder Plugin for WP | 40 | 8 | 77 | 400 | | | Request data is not unslashed |
| #5164 | My Tickets – Accessible Event Ticketing | 34 | 314 | 566 | 700 | | | Nonce verification recommended |
| #5165 | My Upload Images | 42 | 74 | 48 | 400 | | | Unsafe printing function |
| #5166 | Uptime Monitoring for WordPress – My Website is Online | 78 | 18 | 7 | 500 | | | Text Domain Mismatch |
| #5167 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | | | Unsafe printing function |
| #5168 | My Wp Brand – Hide menu & Hide Plugin | 41 | 74 | 50 | 2k+ | | | Non Singular String Literal Domain |
| #5169 | My WordPress Login Logo | 57 | 28 | 36 | 10k+ | | | Non-prefixed global variable |
| #5170 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #5171 | MyBookTable Bookstore by Stormhill Media | 82 | 15 | 33 | 1k+ | | | Direct Query |
| #5172 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,469 | 3,333 | 10k+ | | | Non-prefixed global variable |
| #5173 | myCred Toolkit with AI Assistant – Scale Your Loyalty & Gamification Rewards With Integrations | 22 | 1,588 | 1,172 | 400 | | | Output is not escaped |
| #5174 | MyCryptoCheckout – Bitcoin, Ethereum, and 100+ altcoins for WooCommerce | 85 | 6 | 7 | 8k+ | | | Missing Translators Comment |
| #5175 | MyD Delivery Widgets | 92 | 5 | 1 | 600 | | | Missing Translators Comment |
| #5176 | MyFatoorah – WooCommerce | 25 | 191 | 89 | 2k+ | | | Output is not escaped |
| #5177 | mypace Custom Meta Robots | 82 | 4 | 6 | 2k+ | | | Input is not sanitized |
| #5178 | mypace Custom Title Tag | 88 | 3 | 6 | 500 | | | Input is not sanitized |
| #5179 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #5180 | Mystery Themes Demo Importer | 95 | | 76 | 7k+ | | | Non-prefixed global variable |
| #5181 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements | 25 | 352 | 597 | 40k+ | | | Non-prefixed global variable |
| #5182 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #5183 | WP Sticky Sidebar – Floating Sidebar On Scroll for Any Theme | 36 | 93 | 84 | 10k+ | | | Non-prefixed global variable |
| #5184 | MyWorks Sync for WooCommerce & Xero | 29 | 1 | 1,080 | 800 | | | Non-prefixed global variable |
| #5185 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | | | Non-prefixed global variable |
| #5186 | N360 | Splash Screen | 46 | 32 | 13 | 500 | | | Output is not escaped |
| #5187 | Name Directory | 38 | 520 | 309 | 3k+ | | | Output is not escaped |
| #5188 | Narrative Publisher | 44 | 28 | 37 | 1k+ | | | Text Domain Mismatch |
| #5189 | Native Emoji | 41 | 54 | 37 | 5k+ | | | Unsafe printing function |
| #5190 | Native Lazyload | 98 | 2 | 2 | 5k+ | | | Missing Version |
| #5191 | Nav Menu Collapse | 42 | 17 | 39 | 3k+ | | | Missing nonce verification |
| #5192 | Nav Menu Images | 78 | 5 | 8 | 6k+ | | | Missing nonce verification |
| #5193 | Nav Menu Item Duplicator | 90 | 16 | 4 | 500 | | | wp function not compatible with requires wp |
| #5194 | Nav Menu Roles | 84 | 3 | 18 | 70k+ | | | Non-prefixed hook name |
| #5195 | Naver webmaster syndication v2 | 30 | 89 | 129 | 500 | | | Output is not escaped |
| #5196 | Navigation menu as Dropdown Widget | 48 | 49 | 1 | 2k+ | | | Output is not escaped |
| #5197 | ACF Photo Gallery Field | 93 | 2 | 3 | 60k+ | | | Input is not sanitized |
| #5198 | Flying Images: Optimize and Lazy Load Images for Faster Page Speed | 40 | 32 | 58 | 3k+ | | | Missing direct file access protection |
| #5199 | JSM Non-Breaking Space (nbsp) for French Content | 100 | | 2 | 1k+ | | | Discouraged text-domain loading |
| #5200 | Hotel Booking | 26 | 690 | 940 | 4k+ | | | Unsafe printing function |