| #5001 | Contact Information Widget | 51 | 69 | 5 | 500 | | | Output is not escaped |
| #5002 | Quiz Maker, Poll Maker & Survey Maker by Opinion Stage | 35 | 42 | 32 | 6k+ | | | Output is not escaped |
| #5003 | TZ Flickr Widget | 40 | 67 | 7 | 500 | | | Output is not escaped |
| #5004 | Appointment Bookings for Zoom GoogleMeet and more – Wappointment | 81 | 22 | 52 | 1k+ | | | Non-prefixed class |
| #5005 | WC Call For Price | 57 | 19 | 55 | 1k+ | | | Non-prefixed global variable |
| #5006 | Simple Client Dashboard | 47 | 38 | 36 | 2k+ | | | Missing direct file access protection |
| #5007 | Swift SMTP (formerly Welcome Email Editor) | 51 | 12 | 62 | 7k+ | | | Missing nonce verification |
| #5008 | Woo Button Text | 39 | 53 | 21 | 500 | | | Output is not escaped |
| #5009 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | | | Non-prefixed class |
| #5010 | Quaderno: Global Tax & Invoicing Automation for WooCommerce | 35 | 4 | 70 | 500 | | | Missing nonce verification |
| #5011 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #5012 | Zippy | 40 | 43 | 31 | 9k+ | | | Output is not escaped |
| #5013 | Addonify – WooCommerce Wishlist | 76 | 30 | 43 | 1k+ | | | Non-prefixed global variable |
| #5014 | Admin Notices Manager | 96 | 70 | 3 | 10k+ | | | Missing Arg Domain |
| #5015 | Affiliate Link Tracker | 42 | 24 | 49 | 400 | | | Request data is not unslashed |
| #5016 | AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking | 96 | | 73 | 10k+ | | | Non-prefixed global variable |
| #5017 | Aplazame | 38 | 34 | 39 | 600 | | | Non-prefixed global variable |
| #5018 | AweSplash – Just Splash Page | 42 | 39 | 34 | 400 | | | Output is not escaped |
| #5019 | Certificate Verification | 38 | 33 | 40 | 1k+ | | | Output is not escaped |
| #5020 | CLP Varnish Cache | 46 | 15 | 58 | 10k+ | | | Non-prefixed global variable |
| #5021 | Complete Image Sitemap | 40 | 55 | 18 | 1k+ | | | Output is not escaped |
| #5022 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #5023 | Custom Icons for Elementor and WPBakery | 74 | 35 | 38 | 10k+ | | | Non-prefixed global variable |
| #5024 | Easy Noindex And Nofollow | 35 | 55 | 18 | 400 | | | Output is not escaped |
| #5025 | Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event | 71 | 24 | 49 | 700 | | | Non-prefixed global variable |
| #5026 | Internal Link Juicer: SEO Auto Linker for WordPress | 57 | 12 | 61 | 90k+ | | | Database parameter is not escaped |
| #5027 | المنتور فارسی | 41 | 19 | 54 | 40k+ | | | Nonce verification recommended |
| #5028 | Publitio | 35 | 47 | 26 | 400 | | | curl curl setopt |
| #5029 | QR Code Woocommerce | 44 | 37 | 36 | 1k+ | | | Output is not escaped |
| #5030 | RSWPTHEMES ONE CLICK DEMO CONTENT | 96 | 68 | 5 | 1k+ | | | Missing Arg Domain |
| #5031 | Scroll Styler | 35 | 52 | 21 | 900 | | | Output is not escaped |
| #5032 | ShinyStat Analytics | 43 | 65 | 8 | 1k+ | | | Output is not escaped |
| #5033 | Simple Author Box | 94 | 12 | 61 | 90k+ | | | Non-prefixed global variable |
| #5034 | Simple Sticky Footer | 42 | 57 | 16 | 600 | | | Missing Arg Domain |
| #5035 | Speed Contact Bar | 42 | 53 | 20 | 4k+ | | | Output is not escaped |
| #5036 | Standard Widget Extensions | 62 | 67 | 6 | 1k+ | | | Output is not escaped |
| #5037 | Tasty Recipes Lite | 82 | 7 | 66 | 2k+ | | | Non-prefixed global variable |
| #5038 | TOCHAT.BE | 73 | 2 | 71 | 800 | | | Request data is not unslashed |
| #5039 | Image Hotspot With Tooltip For WPBakery Page Builder (formerly Visual Composer) | 92 | 61 | 12 | 400 | | | Text Domain Mismatch |
| #5040 | Widget Indicadores Económicos (Chile) | 36 | 53 | 20 | 500 | | | Output is not escaped |
| #5041 | Aparat for WordPress | 39 | 59 | 14 | 3k+ | | | Output is not escaped |
| #5042 | RevivePress – Keep your Old Content Evergreen | 59 | 27 | 46 | 5k+ | | | date date |
| #5043 | WP All Import – Property Import for WP Residence | 35 | 41 | 32 | 700 | | | Output is not escaped |
| #5044 | Simple Counter | 41 | 60 | 12 | 1k+ | | | Unsafe printing function |
| #5045 | Add From Server | 37 | 52 | 20 | 60k+ | | | Output is not escaped |
| #5046 | Affiliate Area Shortcodes by AffiliateWP | 52 | 56 | 16 | 2k+ | | | Text Domain Mismatch |
| #5047 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | | | block api version too low |
| #5048 | Category Editor | 43 | 54 | 18 | 8k+ | | | Unsafe printing function |
| #5049 | Contact Details | 45 | 43 | 29 | 1k+ | | | Non Singular String Literal Text |
| #5050 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |