| #6501 | Revision Control | 41 | 60 | 28 | 40k+ | | | Output is not escaped |
| #6502 | Revision Manager TMC | 92 | 40 | 14 | 1k+ | | | Text Domain Mismatch |
| #6503 | PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | 24 | 421 | 583 | 10k+ | | | Missing Translators Comment |
| #6504 | Revisionize | 41 | 54 | 24 | 4k+ | | | Output is not escaped |
| #6505 | Revive.so – Bulk Rewrite and Republish Blog Posts | 23 | 332 | 228 | 700 | | | Text Domain Mismatch |
| #6506 | Revolut Gateway for WooCommerce | 32 | 85 | 157 | 6k+ | | | Input is not sanitized |
| #6507 | Rewrite Rules Inspector | 58 | 7 | 59 | 10k+ | | | Nonce verification recommended |
| #6508 | RICG Responsive Images | 35 | 29 | 25 | 2k+ | | | wp function not compatible with requires wp |
| #6509 | Rich Contact Widget | 80 | 13 | 2 | 9k+ | | | Output is not escaped |
| #6510 | Event Timeline – Vertical Timeline | 34 | 26 | 684 | 1k+ | | | Non-prefixed global variable |
| #6511 | Rich Table of Contents | 37 | 262 | 57 | 20k+ | | | Output is not escaped |
| #6512 | RichText Extension | 35 | 25 | 4 | 900 | | | Output is not escaped |
| #6513 | Ridhi Companion | 70 | 37 | 38 | 500 | | | Non-prefixed global variable |
| #6514 | Rife Extensions & Templates for Elementor | 69 | 22 | 7 | 20k+ | | | Output is not escaped |
| #6515 | Right Click Disable Orignal | 97 | 4 | 3 | 1k+ | | | Missing Version |
| #6516 | EMI Calculator | 54 | 28 | 12 | 700 | | | Output is not escaped |
| #6517 | RioVizual — Table Blocks for Comparison, Pricing and Pros & Cons | 39 | 32 | 75 | 1k+ | | | Nonce verification recommended |
| #6518 | Risk Free Cash On Delivery (COD) – WooCommerce | 40 | 106 | 31 | 400 | | | Text Domain Mismatch |
| #6519 | RiskPay Gateway: USDC Payouts for WooCommerce | 72 | 20 | 2 | 700 | | | Output is not escaped |
| #6520 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 557 | 541 | 100k+ | | | Output is not escaped |
| #6521 | Robo Gallery – Photo & Image Slider | 23 | 1,291 | 530 | 40k+ | | | Output is not escaped |
| #6522 | Robokassa payment gateway for Woocommerce | 27 | 95 | 211 | 3k+ | | | Non-prefixed global variable |
| #6523 | Robots & Sitemap | 37 | 199 | 28 | 500 | | | Text Domain Mismatch |
| #6524 | Robots.txt Editor | 72 | 10 | 7 | 10k+ | | | Input is not validated or sanitized |
| #6525 | Robots.txt Quick Editor | 94 | 1 | 4 | 900 | | | Request data is not unslashed |
| #6526 | Robots.txt rewrite | 35 | 56 | 19 | 1k+ | | | Output is not escaped |
| #6527 | LazyLoad Plugin – Lazy Load Images, Videos, and Iframes | 40 | 31 | 17 | 100k+ | | | Output is not escaped |
| #6528 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | | | Non-prefixed global variable |
| #6529 | Role Based Redirect | 40 | 20 | 96 | 2k+ | | | Non-prefixed global variable |
| #6530 | RoleMaster Suite – User Role Editor for E-Commerce, Membership & Admin Panel | 97 | 8 | 2 | 700 | | | Missing direct file access protection |
| #6531 | RTMForm Builder | 34 | 188 | 209 | 30k+ | | | Text Domain Mismatch |
| #6532 | Root Relative URLs | 72 | 9 | 10 | 6k+ | | | Input is not sanitized |
| #6533 | Like This | 38 | 60 | 17 | 1k+ | | | Output is not escaped |
| #6534 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #6535 | Rox Appointment Booking – Appointment Booking Scheduling Solution | 92 | 3 | 7 | 1k+ | | | Nonce verification recommended |
| #6536 | Dynamic Fields Engine – Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations | 87 | | 15 | 1k+ | | | slow db query meta key |
| #6537 | Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely | 53 | 34 | 90 | 20k+ | | | Database parameter is not escaped |
| #6538 | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 21 | 13,011 | 2,530 | 600k+ | | | Text Domain Mismatch |
| #6539 | Royal Mail Shipping Calculator for WooCommerce | 39 | 61 | 31 | 1k+ | | | Text Domain Mismatch |
| #6540 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 65 | 6 | 33 | 7k+ | | | Interpolated SQL is not prepared |
| #6541 | RPB Chessboard | 40 | 86 | 98 | 1k+ | | | Missing direct file access protection |
| #6542 | RPS Image Gallery | 35 | 88 | 16 | 800 | | | Output is not escaped |
| #6543 | RPS Include Content | 73 | 13 | 2 | 700 | | | Output is not escaped |
| #6544 | RS Author Info Box | 84 | 36 | 2 | 2k+ | | | Text Domain Mismatch |
| #6545 | RS CSV Importer Media Add-On | 35 | 4 | 1 | 4k+ | | | Hidden files included |
| #6546 | RS Template Builder For Elementor – Complete Control Over Headers, Footers & More | 76 | 11 | 56 | 1k+ | | | Post Not In exclude |
| #6547 | RS WP Book Showcase – A Complete Book Catalogue & Library System | 24 | 910 | 343 | 1k+ | | | Text Domain Mismatch |
| #6548 | RSWPTHEMES ONE CLICK DEMO CONTENT | 96 | 68 | 5 | 1k+ | | | Missing Arg Domain |
| #6549 | RS Elements Elementor Addon | 27 | 2,026 | 321 | 500 | | | Text Domain Mismatch |
| #6550 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |