| #5951 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | Output is not escaped |
| #5952 | YT Player – Embed and Customize Video Players | 25 | 3,163 | 261 | 1k+ | | Output is not escaped |
| #5953 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | Non-prefixed global variable |
| #5954 | Zakeke Interactive Product Designer for WooCommerce | 37 | 186 | 178 | 2k+ | | Nonce verification recommended |
| #5955 | Zalomení | 99 | 1 | 2 | 7k+ | | Non-prefixed hook name |
| #5956 | Zapier for WordPress | 71 | 11 | 21 | 50k+ | | Input is not sanitized |
| #5957 | Zarinpal Gateway | 36 | 151 | 55 | 50k+ | | Non Singular String Literal Domain |
| #5958 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | Output is not escaped |
| #5959 | Zenchef widget integration | 98 | 18 | 0 | 1k+ | | Missing direct file access protection |
| #5960 | Zendesk Support for WordPress | 31 | 195 | 88 | 2k+ | | Output is not escaped |
| #5961 | Zeno Font Resizer | 78 | 13 | 2 | 5k+ | | Output is not escaped |
| #5962 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | | Non-prefixed global variable |
| #5963 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | Non-prefixed global variable |
| #5964 | PayPal Zettle POS for WooCommerce | 31 | 302 | 44 | 4k+ | | Exception output is not escaped |
| #5965 | Zhanzhangb Indexing Submission for Baidu | 83 | 14 | 4 | 2k+ | | Output is not escaped |
| #5966 | Gateway zibal for Woocommerce | 44 | 70 | 24 | 5k+ | | Text Domain Mismatch |
| #5967 | Ziina | 35 | 8 | 19 | 2k+ | | wp redirect wp redirect |
| #5968 | Zion Builder – Website Builder for Speed & Creativity | 74 | 4 | 29 | 1k+ | | Non-prefixed hook name |
| #5969 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | Non-prefixed global variable |
| #5970 | zipaddr-jp | 97 | 3 | 52 | 50k+ | | Non-prefixed global variable |
| #5971 | zipMoney(Zip Co) Payments Plugin for WooCommerce | 34 | 147 | 70 | 2k+ | | Text Domain Mismatch |
| #5972 | Zippy | 40 | 43 | 31 | 9k+ | | Output is not escaped |
| #5973 | Zoho Campaigns | 38 | 3 | 129 | 3k+ | | Non-prefixed global variable |
| #5974 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | Request data is not unslashed |
| #5975 | Zoho Flow – No-Code Workflow Automation | 98 | 11 | 8 | 5k+ | | wp function not compatible with requires wp |
| #5976 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | Non Enqueued Script |
| #5977 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | Request data is not unslashed |
| #5978 | Zoho Marketing Automation | 37 | 24 | 194 | 1k+ | | Non-prefixed global variable |
| #5979 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | Input is not validated |
| #5980 | Zone Manager (Zoninator) | 97 | 5 | 2 | 1k+ | | Missing direct file access protection |
| #5981 | Zendesk Chat | 37 | 44 | 67 | 10k+ | | Output is not escaped |
| #5982 | Zotpress | 39 | 80 | 403 | 2k+ | | Non-prefixed global variable |
| #5983 | Cooked – Recipe Management | 32 | 462 | 275 | 3k+ | | Output is not escaped |
| #5984 | EU Order Withdrawal Button for WooCommerce | 76 | 46 | 165 | 2k+ | | Non-prefixed global variable |
| #5985 | Get Use APIs – JSON Content Importer | 99 | 1 | 1 | 5k+ | | upgrade notice limit |
| #5986 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 64 | 6 | 32 | 5k+ | | Interpolated SQL is not prepared |
| #5987 | Simple File List | 93 | 1 | 538 | 3k+ | | Non-prefixed global variable |
| #5988 | Text To Speech TTS Accessibility | 93 | | 161 | 3k+ | | Non-prefixed hook name |
| #5989 | Mercado Pago payments for WooCommerce | 33 | 618 | 63 | 100k+ | | Short PHP open tag found |
| #5990 | WP Menu Cart | 93 | 11 | 15 | 7k+ | | Non-prefixed hook name |
| #5991 | Social Chat – Click To Chat App Button | 57 | 81 | 44 | 200k+ | | Text Domain Mismatch |
| #5992 | CartPops – High Converting Add To Cart Popup For WooCommerce | 33 | 63 | 188 | 4k+ | | Non-prefixed global variable |
| #5993 | User Admin Simplifier | 89 | 106 | 32 | 10k+ | | Text Domain Mismatch |
| #5994 | 404 to 301 – Redirect Manager, 404 Error Logs & Notifications | 85 | | 24 | 100k+ | | Database parameter is not escaped |
| #5995 | Data Tables Generator by Supsystic | 22 | 156 | 144 | 10k+ | | Exception output is not escaped |
| #5996 | Catch Themes Demo Import | 96 | 1 | 5 | 5k+ | | Non-prefixed hook name |
| #5997 | Dynamic XML Sitemaps Generator for Google | 32 | 74 | 411 | 20k+ | | Non-prefixed global variable |
| #5998 | Side Cart Woocommerce | Woocommerce Cart | 27 | 490 | 439 | 80k+ | | Output is not escaped |
| #5999 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | | Non-prefixed class |
| #6000 | Coming Soon & Maintenance Mode by Colorlib | 37 | 100 | 136 | 6k+ | | Non-prefixed global variable |