| #5401 | Per User Prompt for Google Authenticator | 43 | 8 | 52 | 400 | | | Nonce verification recommended |
| #5402 | Granular Controls For Elementor | 47 | 56 | 4 | 10k+ | | | Output is not escaped |
| #5403 | WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager | 88 | 27 | 33 | 3m+ | | | wp function not compatible with requires wp |
| #5404 | Kadence for WooCommerce and Elementor | 35 | 39 | 21 | 3k+ | | | Output is not escaped |
| #5405 | Lightweight Social Icons | 42 | 59 | 1 | 30k+ | | | Output is not escaped |
| #5406 | Madquick WP Legal Pages – One Click, 100% Free | 85 | 5 | 55 | 600 | | | Non-prefixed global variable |
| #5407 | Mediavine Control Panel | 89 | 30 | 30 | 10k+ | | | Text Domain Mismatch |
| #5408 | WP Options Importer | 96 | 56 | 4 | 6k+ | | | Text Domain Mismatch |
| #5409 | Plugin Activation Tracker | 41 | 36 | 24 | 1k+ | | | Text Domain Mismatch |
| #5410 | Reoon Email Verifier | 43 | 22 | 38 | 600 | | | Missing nonce verification |
| #5411 | REST API Custom Fields | 40 | 44 | 16 | 800 | | | Text Domain Mismatch |
| #5412 | Scroll Down Arrow | 69 | 30 | 30 | 800 | | | Missing Arg Domain |
| #5413 | Term Taxonomy Converter | 95 | 57 | 3 | 500 | | | Text Domain Mismatch |
| #5414 | The Events Calendar: Category Colors | 88 | 18 | 42 | 5k+ | | | Non-prefixed global variable |
| #5415 | User role based shipping methods | 43 | 53 | 7 | 400 | | | Output is not escaped |
| #5416 | Video Backgrounds for SiteOrigin Page Builder | 72 | 55 | 5 | 2k+ | | | Text Domain Mismatch |
| #5417 | Weer | 56 | 54 | 6 | 400 | | | Output is not escaped |
| #5418 | Minicart for WooCommerce | 95 | 1 | 59 | 1k+ | | | Non-prefixed global variable |
| #5419 | WooCommerce Gateway Affirm | 35 | 2 | 58 | 6k+ | | | Nonce verification recommended |
| #5420 | GoCardless for WooCommerce | 80 | | 60 | 1k+ | | | Non-prefixed class |
| #5421 | WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System | 51 | 22 | 38 | 5k+ | | | Output is not escaped |
| #5422 | WP Test Email | 41 | 32 | 28 | 20k+ | | | Unsafe printing function |
| #5423 | WP Theme Test | 40 | 21 | 39 | 7k+ | | | Input is not sanitized |
| #5424 | Admin Custom Font | 39 | 34 | 25 | 1k+ | | | Unsafe printing function |
| #5425 | AffiliateWP – Sign Up Bonus | 74 | 46 | 13 | 400 | | | Text Domain Mismatch |
| #5426 | AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o | 96 | 5 | 54 | 2k+ | | | Non-prefixed global variable |
| #5427 | Astra Theme Visual Hooks | 84 | 54 | 5 | 2k+ | | | Text Domain Mismatch |
| #5428 | Block Manager | 35 | 33 | 26 | 4k+ | | | Text Domain Mismatch |
| #5429 | Christmas Panda | 62 | 14 | 45 | 400 | | | Input is not validated |
| #5430 | Custom Background Changer | 79 | 48 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #5431 | Simpliest Social Share | 42 | 37 | 22 | 600 | | | Unsafe printing function |
| #5432 | Debug | 69 | 25 | 34 | 2k+ | | | Input is not sanitized |
| #5433 | Delete Duplicate Posts | 47 | 9 | 50 | 10k+ | | | Direct Query |
| #5434 | Easy PayPal Shopping Cart | 43 | 19 | 40 | 1k+ | | | Input is not sanitized |
| #5435 | FAQ Concertina | 40 | 43 | 16 | 600 | | | Output is not escaped |
| #5436 | FCM Push Notification from WP | 42 | 43 | 16 | 500 | | | Non Singular String Literal Domain |
| #5437 | Formstack Online Forms | 52 | 39 | 20 | 1k+ | | | Output is not escaped |
| #5438 | Fusion Page Builder : Extension – Gallery | 42 | 29 | 30 | 600 | | | Output is not escaped |
| #5439 | Event Tracking for Gravity Forms | 43 | 34 | 25 | 20k+ | | | rand mt rand |
| #5440 | PWA — easy way to Progressive Web App | 54 | 15 | 44 | 2k+ | | | Dynamic hook name |
| #5441 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | | | Non-prefixed hook name |
| #5442 | LifterLMS Labs | 55 | 51 | 8 | 2k+ | | | Output is not escaped |
| #5443 | Mailster Live | 48 | 22 | 37 | 600 | | | Missing Translators Comment |
| #5444 | Map Block Leaflet | 67 | 52 | 7 | 700 | | | Short PHP open tag found |
| #5445 | Multiple Domain | 41 | 42 | 17 | 10k+ | | | Output is not escaped |
| #5446 | OSS Aliyun | 41 | 19 | 40 | 4k+ | | | Request data is not unslashed |
| #5447 | Post Grid & Post Slider – Carousel, Filter Tabs & Related Posts | 70 | 6 | 53 | 1k+ | | | Request data is not unslashed |
| #5448 | Post UI Tabs | 76 | 55 | 4 | 400 | | | Non Singular String Literal Domain |
| #5449 | Query Posts | 63 | 53 | 6 | 800 | | | Output is not escaped |
| #5450 | Remove admin menus by role | 57 | 5 | 54 | 8k+ | | | Input is not validated |