| #5951 | WP-DraftsForFriends | 38 | 141 | 71 | 1k+ | | | Output is not escaped |
| #5952 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 893 | 1,828 | 1k+ | | | Non-prefixed global variable |
| #5953 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #5954 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #5955 | WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 30 | 113 | 419 | 1k+ | | | Non-prefixed global variable |
| #5956 | WP Events Manager WooCommerce | 81 | 20 | 10 | 1k+ | | | Text Domain Mismatch |
| #5957 | Export WordPress Menus | 69 | 94 | 22 | 1k+ | | | wp function not compatible with requires wp |
| #5958 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #5959 | Album Photostream Flickr Gallery | 77 | 30 | 31 | 1k+ | | | Text Domain Mismatch |
| #5960 | WP Inventory Manager | 30 | 856 | 233 | 1k+ | | | Output is not escaped |
| #5961 | Test jQuery Updates | 76 | 10 | 3 | 1k+ | | | Unsafe printing function |
| #5962 | WP Modal Popup with Cookie Integration | 41 | 88 | 13 | 1k+ | | | Unsafe printing function |
| #5963 | WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce | 61 | 22 | 74 | 1k+ | | | Non-prefixed global variable |
| #5964 | WP Post Navigation | 54 | 14 | 23 | 1k+ | | | Output is not escaped |
| #5965 | WP Protect Content | 85 | 7 | 7 | 1k+ | | | Output is not escaped |
| #5966 | WP Random Post Thumbnails | 34 | 420 | 26 | 1k+ | | | Text Domain Mismatch |
| #5967 | WP Reroute Email | 40 | 141 | 106 | 1k+ | | | Output is not escaped |
| #5968 | video carousel slider with lightbox | 35 | 350 | 136 | 1k+ | | | Output is not escaped |
| #5969 | WP Typograph Lite | 94 | 8 | 4 | 1k+ | | | trademarked term |
| #5970 | WP Sanitize File Name Plus | 97 | 3 | 5 | 1k+ | | | trademarked term |
| #5971 | WP Secure Maintenance | 52 | 28 | 18 | 1k+ | | | Output is not escaped |
| #5972 | WP SendGrid SMTP | 39 | 99 | 50 | 1k+ | | | Text Domain Mismatch |
| #5973 | WP Sitemap Pages and Posts | 97 | 2 | 7 | 1k+ | | | trademarked term |
| #5974 | WP Snow Effect | 98 | 5 | 4 | 1k+ | | | Missing direct file access protection |
| #5975 | WP-SWFObject | 60 | 14 | 24 | 1k+ | | | Deprecated parameter: add_option parameter 3 |
| #5976 | WP Sync for Notion – Notion to WordPress | 94 | 14 | 47 | 1k+ | | | Non-prefixed hook name |
| #5977 | WP To Top | 35 | 30 | 29 | 1k+ | | | Non-prefixed global variable |
| #5978 | User Login Notifier for WordPress | 41 | 72 | 26 | 1k+ | | | Output is not escaped |
| #5979 | WP User Switch | 53 | 8 | 46 | 1k+ | | | Input is not sanitized |
| #5980 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #5981 | WP Yelp Review Slider | 25 | 429 | 645 | 1k+ | | | Non-prefixed global variable |
| #5982 | WP YouTube Live | 86 | 28 | 24 | 1k+ | | | Non-prefixed function |
| #5983 | WPC Admin Columns | 88 | | 30 | 1k+ | | | Direct Query |
| #5984 | WPC Custom Related Products for WooCommerce | 90 | 4 | 27 | 1k+ | | | Non-prefixed class |
| #5985 | WPC Order Tip for WooCommerce | 83 | | 55 | 1k+ | | | Non-prefixed global variable |
| #5986 | WPC Price by Quantity for WooCommerce | 92 | | 37 | 1k+ | | | Non-prefixed global variable |
| #5987 | WPC Show Single Variations for WooCommerce | 67 | 5 | 31 | 1k+ | | | Nonce verification recommended |
| #5988 | WPC Variation Bulk Editor for WooCommerce | 63 | 13 | 32 | 1k+ | | | Request data is not unslashed |
| #5989 | WPCOM Member | 26 | 432 | 638 | 1k+ | | | Non Singular String Literal Domain |
| #5990 | wpDataTables integration for Forminator Forms | 45 | 62 | 38 | 1k+ | | | Text Domain Mismatch |
| #5991 | WPDevDesign – Oxygen – Navigator | 98 | 8 | 4 | 1k+ | | | Missing Arg Domain |
| #5992 | WPFrank Companion | 26 | 2,356 | 865 | 1k+ | | | Text Domain Mismatch |
| #5993 | School Management System – WPSchoolPress | 22 | 314 | 5,220 | 1k+ | | | Non-prefixed global variable |
| #5994 | Wrap form fields in Gravity Forms | 84 | 22 | 3 | 1k+ | | | Text Domain Mismatch |
| #5995 | Writesonic | 35 | 14 | 16 | 1k+ | | | Non-prefixed global variable |
| #5996 | WebToffee Gift Cards for WooCommerce | 95 | 92 | 4 | 1k+ | | | wp function not compatible with requires wp |
| #5997 | XLTab – Accordions and Tabs for Elementor Page Builder | 40 | 317 | 65 | 1k+ | | | Text Domain Mismatch |
| #5998 | XO Post Background | 98 | 2 | 2 | 1k+ | | | Discouraged text-domain loading |
| #5999 | YAHMAN Add-ons | 31 | 468 | 141 | 1k+ | | | Output is not escaped |
| #6000 | YayExtra – WooCommerce Extra Product Options | 36 | 11 | 472 | 1k+ | | | Non-prefixed global variable |