| #5851 | Shortcake (Shortcode UI) | 35 | 9 | 39 | 10k+ | | | Request data is not unslashed |
| #5852 | Simple SMTP by Maileroo | 75 | 40 | 8 | 700 | | | Text Domain Mismatch |
| #5853 | Smooth Back To Top Button | 56 | 41 | 7 | 40k+ | | | Output is not escaped |
| #5854 | TAO Schedule Update | 66 | 37 | 11 | 2k+ | | | Text Domain Mismatch |
| #5855 | Contact Form 7 Text CAPTCHA | 76 | 14 | 34 | 1k+ | | | Non-prefixed global variable |
| #5856 | Product Compare for WooCommerce | 82 | 6 | 42 | 3k+ | | | Non-prefixed global variable |
| #5857 | Timeline History | 40 | 31 | 17 | 500 | | | Output is not escaped |
| #5858 | Ultimate Category Excluder | 42 | 22 | 26 | 50k+ | | | Missing nonce verification |
| #5859 | Ultra Addons Lite for Elementor | 84 | 30 | 18 | 700 | | | wp function not compatible with requires wp |
| #5860 | Visual Header | 85 | 6 | 42 | 400 | | | Non-prefixed function |
| #5861 | Waymark | 72 | 16 | 32 | 900 | | | Missing direct file access protection |
| #5862 | WooReer | 59 | 44 | 4 | 1k+ | | | Exception output is not escaped |
| #5863 | WooCommerce Shipping | 71 | | 48 | 70k+ | | | Direct Query |
| #5864 | WP OpenAPI | 45 | 26 | 22 | 400 | | | Output is not escaped |
| #5865 | WP Social Preview | 54 | 33 | 15 | 800 | | | Non Singular String Literal Domain |
| #5866 | Admin Bar User Switching | 55 | 16 | 31 | 2k+ | | | Input is not validated |
| #5867 | AffiliateWP – Allow Own Referrals | 78 | 37 | 10 | 600 | | | Text Domain Mismatch |
| #5868 | AffiliateWP – Force Pending Referrals | 79 | 35 | 12 | 500 | | | Text Domain Mismatch |
| #5869 | Custom Spinner for Contact Form 7 | 42 | 36 | 11 | 1k+ | | | Output is not escaped |
| #5870 | Coupon & Discount Code Reveal Button | 89 | 37 | 10 | 1k+ | | | wp function not compatible with requires wp |
| #5871 | Download PDF After Submit Form | 53 | 2 | 45 | 500 | | | Input is not sanitized |
| #5872 | Duplicate Page and Post | 41 | 26 | 21 | 80k+ | | | Unsafe printing function |
| #5873 | easypay Gateway Checkout for WooCommerce | 77 | 6 | 41 | 600 | | | Nonce verification recommended |
| #5874 | Featured Image Generator | 41 | 31 | 16 | 1k+ | | | Output is not escaped |
| #5875 | Fullscreen Galleria | 52 | 37 | 10 | 800 | | | Output is not escaped |
| #5876 | Gravity Forms No CAPTCHA reCAPTCHA | 51 | 30 | 17 | 10k+ | | | Text Domain Mismatch |
| #5877 | Home Page Banner for Astra Theme | 96 | 45 | 2 | 2k+ | | | Text Domain Mismatch |
| #5878 | Instant Images – One-click Image Uploads from Unsplash, Openverse, Pixabay, Pexels, and Giphy | 63 | 31 | 16 | 100k+ | | | Missing direct file access protection |
| #5879 | Form data to kintone | 56 | 25 | 22 | 1k+ | | | Output is not escaped |
| #5880 | PHP Compatibility Checker | 97 | 42 | 5 | 200k+ | | | Text Domain Mismatch |
| #5881 | Flutterwave Payments | 79 | 8 | 39 | 700 | | | Non-prefixed global variable |
| #5882 | Registration Form for WooCommerce | 75 | 5 | 42 | 1k+ | | | Non-prefixed global variable |
| #5883 | Responsive Like Box, Like Box Widget | 54 | 43 | 4 | 1k+ | | | Output is not escaped |
| #5884 | Serbian Addons for WooCommerce | 91 | 34 | 13 | 600 | | | Text Domain Mismatch |
| #5885 | Simple Membership Custom Messages | 67 | 47 | 0 | 7k+ | | | Text Domain Mismatch |
| #5886 | SoundPress Plugin | 53 | 44 | 3 | 1k+ | | | Output is not escaped |
| #5887 | Stars Rating | 46 | 13 | 34 | 1k+ | | | Missing nonce verification |
| #5888 | Tax Switch for WooCommerce | 54 | 15 | 32 | 900 | | | Nonce verification recommended |
| #5889 | Tockify Events Calendar | 35 | 35 | 12 | 2k+ | | | Output is not escaped |
| #5890 | Travel Map | 52 | 36 | 11 | 1k+ | | | Output is not escaped |
| #5891 | Easy Username Updater | 69 | 19 | 28 | 10k+ | | | Missing Arg Domain |
| #5892 | Veeqo for WooCommerce | 50 | 30 | 17 | 700 | | | Missing direct file access protection |
| #5893 | Was This Helpful? | 49 | 19 | 28 | 1k+ | | | Output is not escaped |
| #5894 | Website Open/Closed Toggle | 44 | 14 | 33 | 500 | | | Output is not escaped |
| #5895 | Websitescanner Custom Schema | 65 | 28 | 19 | 600 | | | wp function not compatible with requires wp |
| #5896 | Dynamic Remarketing for Google Ads and WooCommerce | 42 | 32 | 15 | 2k+ | | | Output is not escaped |
| #5897 | WP First Letter Avatar | 48 | 40 | 7 | 2k+ | | | Output is not escaped |
| #5898 | Advanced Custom Fields: Gravity Forms Add-on | 78 | 33 | 13 | 30k+ | | | Text Domain Mismatch |
| #5899 | AddFunc Head & Footer Code | 43 | 28 | 18 | 20k+ | | | Output is not escaped |
| #5900 | Anonymous Restricted Content | 43 | 22 | 24 | 1k+ | | | Unsafe printing function |