| #5101 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |
| #5102 | Simple Mortgage Calculator | 43 | 67 | 3 | 1k+ | | | Text Domain Mismatch |
| #5103 | Currency per Product for WooCommerce | 35 | 46 | 24 | 2k+ | | | Text Domain Mismatch |
| #5104 | Custom Field For WP Job Manager | 69 | 16 | 54 | 900 | | | Non-prefixed global variable |
| #5105 | Custom Upload Dir | 55 | 63 | 7 | 5k+ | | | Missing Arg Domain |
| #5106 | Database Addon For WPForms ( wpforms entries ) – WPFormsDB | 43 | 17 | 53 | 20k+ | | | Nonce verification recommended |
| #5107 | Disable Gutenberg | 43 | 23 | 47 | 500k+ | | | Nonce verification recommended |
| #5108 | Emergency password reset | 73 | 56 | 14 | 800 | | | wp function not compatible with requires wp |
| #5109 | Flexible PDF Invoices for WooCommerce & WordPress | 35 | 15 | 55 | 6k+ | | | Non-prefixed global variable |
| #5110 | Include Klaviyo for Elementor pro | 63 | 60 | 10 | 2k+ | | | Missing Arg Domain |
| #5111 | Lockdown WP Admin | 41 | 20 | 50 | 10k+ | | | Request data is not unslashed |
| #5112 | Mascaras CF7 | 39 | 54 | 16 | 1k+ | | | Text Domain Mismatch |
| #5113 | MembershipWorks – Membership, Events & Directory | 40 | 41 | 29 | 2k+ | | | Output is not escaped |
| #5114 | Migrate Store: Export and Import WooCommerce Settings | 38 | 37 | 33 | 1k+ | | | Non-prefixed global variable |
| #5115 | More Widgets | 35 | 55 | 15 | 1k+ | | | Output is not escaped |
| #5116 | Ocean Modal Window | 44 | 26 | 44 | 10k+ | | | Output is not escaped |
| #5117 | Divi Masonry Gallery – Pro Gallery | 96 | 54 | 16 | 2k+ | | | Text Domain Mismatch |
| #5118 | PRyC WP: Add custom content to post and page (top/bottom) | 61 | 63 | 7 | 1k+ | | | Text Domain Mismatch |
| #5119 | Tagging | 40 | 33 | 37 | 500 | | | Output is not escaped |
| #5120 | UPI QR Code Payment Gateway for WooCommerce | 43 | 42 | 28 | 20k+ | | | Output is not escaped |
| #5121 | Visibility Logic for Elementor | 41 | 27 | 43 | 30k+ | | | Output is not escaped |
| #5122 | Widget Menuizer | 40 | 44 | 26 | 600 | | | Missing Arg Domain |
| #5123 | WP-Cycle | 39 | 53 | 17 | 3k+ | | | Output is not escaped |
| #5124 | WP Keyword Suggest | 40 | 29 | 41 | 500 | | | Non Singular String Literal Domain |
| #5125 | WP Lightbox 2 | 46 | 52 | 18 | 30k+ | | | Text Domain Mismatch |
| #5126 | WP-Markdown | 35 | 31 | 39 | 400 | | | Output is not escaped |
| #5127 | WP SVG Images | 50 | 58 | 12 | 30k+ | | | Text Domain Mismatch |
| #5128 | WP Widget Clipboard – Duplicate widgets intuitively | 42 | 51 | 19 | 800 | | | Output is not escaped |
| #5129 | AccessibleWP – ALT Detector | 40 | 55 | 14 | 500 | | | Text Domain Mismatch |
| #5130 | Advanced Custom Fields: Limiter Field | 49 | 57 | 12 | 900 | | | Output is not escaped |
| #5131 | Cookie Notify | 42 | 15 | 54 | 400 | | | Input is not validated |
| #5132 | Creta Testimonial Showcase | 65 | 28 | 41 | 3k+ | | | Non-prefixed global variable |
| #5133 | Better Badge – Custom Product Badges for WooCommerce | 47 | 22 | 47 | 500 | | | Non Singular String Literal Domain |
| #5134 | Database for CF7 | 41 | 37 | 32 | 2k+ | | | Text Domain Mismatch |
| #5135 | DPO Pay for WooCommerce | 47 | 28 | 41 | 1k+ | | | Non Singular String Literal Text |
| #5136 | Edit Lock | 41 | 47 | 22 | 500 | | | Non Singular String Literal Domain |
| #5137 | Export Post Info | 40 | 66 | 3 | 1k+ | | | Unsafe printing function |
| #5138 | APG Google Image Sitemap Feed | 57 | 36 | 33 | 900 | | | Non-prefixed global variable |
| #5139 | GZSEO | 69 | 3 | 66 | 400 | | | Direct Query |
| #5140 | linkPizza-Manager | 39 | 46 | 23 | 700 | | | Exception output is not escaped |
| #5141 | Login No Captcha reCAPTCHA | 42 | 45 | 24 | 60k+ | | | Unsafe printing function |
| #5142 | Most Popular Categories | 41 | 67 | 2 | 600 | | | Output is not escaped |
| #5143 | My Favorites | 41 | 35 | 34 | 1k+ | | | Output is not escaped |
| #5144 | NextGEN Gallery Sidebar Widget | 40 | 59 | 10 | 500 | | | Output is not escaped |
| #5145 | Page Transition | 43 | 39 | 30 | 700 | | | Output is not escaped |
| #5146 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | | | Request data is not unslashed |
| #5147 | Restaurant Food Menu by WP Darko – Drag & Drop Restaurant Menu Builder for WordPress | 73 | 1 | 68 | 400 | | | Non-prefixed global variable |
| #5148 | Safe Redirect Manager | 66 | 9 | 60 | 40k+ | | | Non-prefixed hook name |
| #5149 | Easy Smooth Scroll Links | 39 | 64 | 5 | 600 | | | Output is not escaped |
| #5150 | Select Post Export | 40 | 51 | 18 | 500 | | | Output is not escaped |