| #4951 | WP-Cron Control | 37 | 54 | 22 | 1k+ | | | Output is not escaped |
| #4952 | WP Image Zoom | 67 | 30 | 46 | 10k+ | | | Non-prefixed global variable |
| #4953 | WP User Groups | 49 | 44 | 32 | 600 | | | Missing Translators Comment |
| #4954 | WP AdCenter – Ad Manager & Adsense Ads | 76 | 5 | 71 | 1k+ | | | Direct Query |
| #4955 | Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… | 93 | 32 | 43 | 3k+ | | | Non-prefixed global variable |
| #4956 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #4957 | Advanced Accordion Gutenberg Block – Create Beautiful FAQs, Content Accordions & Interactive Tabs | 37 | 39 | 36 | 10k+ | | | Missing direct file access protection |
| #4958 | Auto Upload Images | 40 | 62 | 13 | 20k+ | | | Unsafe printing function |
| #4959 | BlogVault Backup & Staging | 82 | 53 | 22 | 80k+ | | | Missing direct file access protection |
| #4960 | CDEKDelivery | 46 | | 75 | 3k+ | | | Nonce verification recommended |
| #4961 | Custom CSS Manager | 37 | 55 | 20 | 1k+ | | | Output is not escaped |
| #4962 | Debug This | 52 | 43 | 32 | 2k+ | | | Missing Translators Comment |
| #4963 | GDPR tools: Cookie notice + privacy | 41 | 67 | 8 | 6k+ | | | Unsafe printing function |
| #4964 | Easy Textillate | 40 | 63 | 12 | 1k+ | | | Unsafe printing function |
| #4965 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 44 | 5 | 70 | 1k+ | | | Interpolated SQL is not prepared |
| #4966 | Social Shop for WooCommerce | 38 | 51 | 24 | 800 | | | Output is not escaped |
| #4967 | Instant Indexing for Google | 35 | 13 | 62 | 200k+ | | | Non-prefixed global variable |
| #4968 | Make Paths Relative | 95 | 74 | 1 | 2k+ | | | wp function not compatible with requires wp |
| #4969 | Post Export Import with Media | 90 | 34 | 41 | 1k+ | | | Missing Translators Comment |
| #4970 | Ridhi Companion | 70 | 37 | 38 | 500 | | | Non-prefixed global variable |
| #4971 | Robots.txt rewrite | 35 | 56 | 19 | 1k+ | | | Output is not escaped |
| #4972 | Responsive Slideshow – Photo Carousel | 57 | 1 | 74 | 2k+ | | | Non-prefixed global variable |
| #4973 | StoreOne Extension | 85 | 68 | 7 | 400 | | | Text Domain Mismatch |
| #4974 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | | | Output is not escaped |
| #4975 | Unbloater | 41 | 57 | 18 | 5k+ | | | Output is not escaped |
| #4976 | Web Stories | 84 | 12 | 63 | 60k+ | | | Non-prefixed global variable |
| #4977 | Widget Contact Now | 42 | 69 | 6 | 500 | | | Output is not escaped |
| #4978 | Variation Swatches for WooCommerce | 59 | 11 | 64 | 300k+ | | | Non-prefixed global variable |
| #4979 | WP Upload Restriction | 86 | 59 | 16 | 2k+ | | | Text Domain Mismatch |
| #4980 | The WP Remote WordPress Plugin | 82 | 51 | 24 | 30k+ | | | Missing direct file access protection |
| #4981 | AffiliateWP Checkout Referrals | 47 | 48 | 26 | 600 | | | Output is not escaped |
| #4982 | Amazon Web Services | 41 | 53 | 21 | 5k+ | | | Missing Translators Comment |
| #4983 | Animation Builder – An interface for adding scroll-triggered animations | 43 | 7 | 67 | 800 | | | Missing Version |
| #4984 | AZAN Plugin | 37 | 44 | 30 | 500 | | | Output is not escaped |
| #4985 | Advanced Comment Form | 64 | 68 | 6 | 4k+ | | | Output is not escaped |
| #4986 | Contact Form 7 Widget | 41 | 70 | 4 | 2k+ | | | Output is not escaped |
| #4987 | CRUDLab Disable Comments | 38 | 20 | 54 | 700 | | | Missing nonce verification |
| #4988 | Debug Bar Cron | 56 | 73 | 1 | 400 | | | Output is not escaped |
| #4989 | Developer Loggers for Simple History | 41 | 46 | 28 | 400 | | | Text Domain Mismatch |
| #4990 | Easy Demo Import for Omega Themes | 42 | 33 | 41 | 400 | | | Output is not escaped |
| #4991 | Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam | 41 | 21 | 53 | 500 | | | Missing nonce verification |
| #4992 | Geo Blocker – Control Site Access by Region and IP | 42 | 10 | 64 | 1k+ | | | Direct Query |
| #4993 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #4994 | OnSale Page for WooCommerce | 51 | 30 | 44 | 2k+ | | | Text Domain Mismatch |
| #4995 | Paytrail for WooCommerce | 35 | 28 | 46 | 3k+ | | | Non-prefixed global variable |
| #4996 | Pinterest for WooCommerce | 53 | 44 | 30 | 300k+ | | | Exception output is not escaped |
| #4997 | Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers | 84 | 1 | 73 | 70k+ | | | Direct Query |
| #4998 | Posts Viewed Recently | 41 | 58 | 16 | 700 | | | Output is not escaped |
| #4999 | Proxy & VPN Blocker | 44 | | 74 | 1k+ | | | Nonce verification recommended |
| #5000 | Scroll Back To Top Button | 49 | 73 | 1 | 3k+ | | | Missing Arg Domain |