| #5601 | Integration of Bitrix24 with Contact Form 7 | 83 | 14 | 40 | 600 | | | Non-prefixed function |
| #5602 | CloudGuard | 41 | 41 | 13 | 1k+ | | | Output is not escaped |
| #5603 | Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) | 40 | 39 | 15 | 6k+ | | | Missing direct file access protection |
| #5604 | Easy Hide Admin Menu Items | 96 | 43 | 11 | 1k+ | | | Text Domain Mismatch |
| #5605 | Extended Post Status | 45 | 27 | 27 | 1k+ | | | Output is not escaped |
| #5606 | Featured Post | 40 | 36 | 18 | 800 | | | Output is not escaped |
| #5607 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 45 | 1m+ | | | Direct Query |
| #5608 | Flexible Invoices for WooCommerce – KSeF Add-on | 35 | 39 | 15 | 600 | | | Non-prefixed global variable |
| #5609 | Cron Jobs | 62 | 21 | 33 | 2k+ | | | Nonce verification recommended |
| #5610 | Order Delivery Date And Time | 75 | 26 | 28 | 1k+ | | | Text Domain Mismatch |
| #5611 | Plethora Plugins Tabs + Accordions | 57 | 44 | 10 | 2k+ | | | Output is not escaped |
| #5612 | Propovoice: All-in-One Client Management System | 92 | 13 | 41 | 800 | | | Non-prefixed global variable |
| #5613 | Responsive Cookie Consent | 46 | 50 | 4 | 2k+ | | | Unsafe printing function |
| #5614 | Revision Manager TMC | 92 | 40 | 14 | 1k+ | | | Text Domain Mismatch |
| #5615 | RICG Responsive Images | 35 | 29 | 25 | 2k+ | | | wp function not compatible with requires wp |
| #5616 | Secondary Product Image for WooCommerce | 49 | 25 | 29 | 2k+ | | | Output is not escaped |
| #5617 | Slope Widgets | 35 | 5 | 49 | 500 | | | Non-prefixed global variable |
| #5618 | Social Media Widget | 47 | 51 | 3 | 400 | | | Output is not escaped |
| #5619 | TextBuilder | 56 | 20 | 34 | 4k+ | | | Missing Arg Domain |
| #5620 | Usersnap | 41 | 37 | 17 | 500 | | | Output is not escaped |
| #5621 | Wistia WordPress Plugin | 61 | 42 | 12 | 2k+ | | | Output is not escaped |
| #5622 | Wonder PDF Embed | 75 | 53 | 1 | 8k+ | | | badly named files |
| #5623 | wp-cleanumlauts2 | 61 | 32 | 22 | 1k+ | | | Output is not escaped |
| #5624 | WP Custom Author URL | 47 | 16 | 38 | 5k+ | | | Non-prefixed global variable |
| #5625 | WP User Switch | 53 | 8 | 46 | 1k+ | | | Input is not sanitized |
| #5626 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #5627 | WPTurbo -WordPress性能优化插件 | 38 | 20 | 34 | 700 | | | Output is not escaped |
| #5628 | zipaddr-jp | 98 | 2 | 52 | 50k+ | | | Non-prefixed global variable |
| #5629 | Portfolio Grid – Filterable Gallery, Grid & Slider Showcase | 96 | 3 | 50 | 900 | | | Non-prefixed function |
| #5630 | AudioIgniter Music Player | 59 | | 53 | 10k+ | | | Input is not validated |
| #5631 | Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) | 41 | 16 | 37 | 1k+ | | | Missing nonce verification |
| #5632 | Bullhorn Career Portal WordPress Plugin | 46 | 46 | 7 | 1k+ | | | Output is not escaped |
| #5633 | Successful Redirection for Contact Form | 49 | 33 | 20 | 10k+ | | | Text Domain Mismatch |
| #5634 | Click to Call or Chat Buttons | 43 | 47 | 6 | 1k+ | | | Output is not escaped |
| #5635 | CoinGate for WooCommerce | 74 | 35 | 18 | 400 | | | Text Domain Mismatch |
| #5636 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #5637 | Easy!Appointments | 44 | 47 | 6 | 600 | | | Unsafe printing function |
| #5638 | Featured Video for WooCommerce | 68 | 40 | 13 | 700 | | | Text Domain Mismatch |
| #5639 | Flexible FAQ | 58 | 27 | 26 | 1k+ | | | Text Domain Mismatch |
| #5640 | FSM Custom Featured Image Caption | 47 | 26 | 27 | 5k+ | | | Output is not escaped |
| #5641 | Github Embed | 44 | 18 | 35 | 1k+ | | | Non-prefixed global variable |
| #5642 | GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time | 52 | 26 | 27 | 1k+ | | | Exception output is not escaped |
| #5643 | Hello Plus | 94 | 15 | 38 | 80k+ | | | Post Not In exclude |
| #5644 | Image Widget | 44 | 48 | 5 | 3k+ | | | Output is not escaped |
| #5645 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |
| #5646 | Juiz Lang Attribute | 54 | 26 | 27 | 2k+ | | | Text Domain Mismatch |
| #5647 | Social Intents – Live Chat | 63 | 42 | 11 | 400 | | | Non Singular String Literal Domain |
| #5648 | Metronet Tag Manager | 52 | 17 | 36 | 20k+ | | | Input is not validated |
| #5649 | MilesWeb Tools | 95 | 4 | 49 | 10k+ | | | Non-prefixed global variable |
| #5650 | Progress Bar | 96 | 52 | 1 | 1k+ | | | Text Domain Mismatch |