| #5151 | Simple Lightbox | 41 | 21 | 48 | 100k+ | | | Nonce verification recommended |
| #5152 | SMTP | 39 | 54 | 15 | 700 | | | Non Singular String Literal Domain |
| #5153 | Masonry Widget | 41 | 58 | 11 | 500 | | | Output is not escaped |
| #5154 | Templ Optimizer | 72 | 6 | 63 | 1k+ | | | Direct Query |
| #5155 | VK Block Patterns | 55 | 8 | 61 | 100k+ | | | Non-prefixed function |
| #5156 | WP Mail Log | 43 | 40 | 29 | 10k+ | | | Text Domain Mismatch |
| #5157 | WPS Menu Exporter | 40 | 47 | 22 | 10k+ | | | Output is not escaped |
| #5158 | AffiliateWP – Store Credit | 48 | 47 | 21 | 400 | | | Output is not escaped |
| #5159 | AH Display Widgets | 41 | 52 | 16 | 8k+ | | | Text Domain Mismatch |
| #5160 | Better image sizes | 46 | 45 | 23 | 2k+ | | | Text Domain Mismatch |
| #5161 | Better User Search | 39 | 24 | 44 | 700 | | | SQL query is not prepared |
| #5162 | Booking.com Official Search Box | 42 | 36 | 32 | 2k+ | | | Output is not escaped |
| #5163 | Boxzilla – WordPress Popup Builder | 79 | 4 | 64 | 20k+ | | | Non-prefixed global variable |
| #5164 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #5165 | Custom Currency for WooCommerce | 70 | 63 | 5 | 2k+ | | | Missing direct file access protection |
| #5166 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | | | Non-prefixed hook name |
| #5167 | Easy WP Page Navigation | 52 | 60 | 8 | 800 | | | Non Singular String Literal Domain |
| #5168 | Elementor Beta (Developer Edition) | 57 | 36 | 32 | 30k+ | | | Output is not escaped |
| #5169 | F2 Tag Cloud Widget | 54 | 66 | 2 | 500 | | | Output is not escaped |
| #5170 | Gelato Integration for WooCommerce | 42 | 36 | 32 | 5k+ | | | Output is not escaped |
| #5171 | Groups 404 Redirect | 47 | 35 | 33 | 1k+ | | | Non Singular String Literal Domain |
| #5172 | JWT Authentication for WP REST API | 84 | 27 | 41 | 60k+ | | | wp function not compatible with requires wp |
| #5173 | Leadpages | 66 | 6 | 62 | 10k+ | | | Direct Query |
| #5174 | LH Add Media From Url | 39 | 42 | 26 | 2k+ | | | Output is not escaped |
| #5175 | Image and Video Lightbox, Image PopUp | 42 | 53 | 15 | 1k+ | | | Output is not escaped |
| #5176 | Multilingual Forms for Fluent Forms with WPML | 67 | 52 | 16 | 1k+ | | | Text Domain Mismatch |
| #5177 | Post title marquee scroll | 43 | 43 | 25 | 1k+ | | | Output is not escaped |
| #5178 | Pro Categories Widget | 43 | 59 | 9 | 800 | | | Output is not escaped |
| #5179 | Responsive Tabs | 91 | 59 | 9 | 4k+ | | | Non Singular String Literal Domain |
| #5180 | IP Ban | 41 | 29 | 39 | 2k+ | | | Input is not validated |
| #5181 | Simple Membership WP user Import | 39 | 22 | 46 | 4k+ | | | Request data is not unslashed |
| #5182 | Simple Visitor Counter | 38 | 41 | 27 | 700 | | | Output is not escaped |
| #5183 | TinyMCE Templates | 35 | 41 | 27 | 20k+ | | | Text Domain Mismatch |
| #5184 | Waka Bulk Page | 41 | 52 | 16 | 1k+ | | | Unsafe printing function |
| #5185 | Werk aan de Muur | 64 | 48 | 20 | 900 | | | Non Singular String Literal Domain |
| #5186 | WP Add Custom CSS | 39 | 45 | 23 | 60k+ | | | Output is not escaped |
| #5187 | WP Sitemap Control | 39 | 31 | 37 | 400 | | | Output is not escaped |
| #5188 | ACF: Focal Point | 35 | 61 | 6 | 400 | | | Text Domain Mismatch |
| #5189 | Advanced Custom Fields – Contact Form 7 Field | 45 | 59 | 8 | 2k+ | | | Output is not escaped |
| #5190 | Advanced FAQ Manager | 43 | 8 | 59 | 2k+ | | | Input is not sanitized |
| #5191 | Transient Cleaner | 96 | 3 | 64 | 1k+ | | | Non-prefixed global variable |
| #5192 | Black Studio TinyMCE Widget | 40 | 39 | 28 | 200k+ | | | Output is not escaped |
| #5193 | Category Wise Search | 41 | 58 | 9 | 500 | | | Output is not escaped |
| #5194 | Coupon Generator for WooCommerce | 40 | 39 | 28 | 10k+ | | | Unsafe printing function |
| #5195 | Custom Error Pages | 45 | 51 | 16 | 600 | | | Output is not escaped |
| #5196 | Custom Recent Posts Widget | 41 | 63 | 4 | 1k+ | | | Output is not escaped |
| #5197 | Debug Bar Rewrite Rules | 69 | 29 | 38 | 800 | | | Non-prefixed global variable |
| #5198 | Easy Search Replace – Find & Replace Text/HTML/URLs, Remove Footer Credit | 51 | 6 | 61 | 500 | | | Input is not sanitized |
| #5199 | Enhanced Admin Bar with Codex Search | 39 | 64 | 3 | 1k+ | | | Missing Arg Domain |
| #5200 | Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | 40 | 23 | 44 | 30k+ | | | Missing direct file access protection |