| #5901 | Websitescanner Custom Schema | 65 | 28 | 19 | 600 | | | wp function not compatible with requires wp |
| #5902 | Dynamic Remarketing for Google Ads and WooCommerce | 42 | 32 | 15 | 2k+ | | | Output is not escaped |
| #5903 | WP First Letter Avatar | 48 | 40 | 7 | 2k+ | | | Output is not escaped |
| #5904 | Advanced Custom Fields: Gravity Forms Add-on | 78 | 33 | 13 | 30k+ | | | Text Domain Mismatch |
| #5905 | AddFunc Head & Footer Code | 43 | 28 | 18 | 20k+ | | | Output is not escaped |
| #5906 | Anonymous Restricted Content | 43 | 22 | 24 | 1k+ | | | Unsafe printing function |
| #5907 | Block Temporary Email | 42 | 33 | 13 | 500 | | | Unsafe printing function |
| #5908 | Charla Live Chat | 43 | 33 | 13 | 500 | | | Output is not escaped |
| #5909 | Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons | 69 | 22 | 24 | 30k+ | | | Text Domain Mismatch |
| #5910 | Comment Form WP – Customize Default Comment Form | 61 | 39 | 7 | 600 | | | Output is not escaped |
| #5911 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | | | Unsafe printing function |
| #5912 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | | | Text Domain Mismatch |
| #5913 | Custom Post Order | 39 | 14 | 32 | 400 | | | Input is not sanitized |
| #5914 | Duplicate Post Page Menu & Custom Post Type | 41 | 35 | 11 | 10k+ | | | Text Domain Mismatch |
| #5915 | Equivalent Mobile Redirect | 35 | 29 | 17 | 2k+ | | | Text Domain Mismatch |
| #5916 | exovia GDPR Google Maps | 62 | 40 | 6 | 4k+ | | | Output is not escaped |
| #5917 | Expanding Archives | 54 | 37 | 9 | 3k+ | | | Output is not escaped |
| #5918 | F4 Media Taxonomies | 54 | 7 | 39 | 1k+ | | | Input is not sanitized |
| #5919 | Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later | 80 | 21 | 25 | 800 | | | Non-prefixed global variable |
| #5920 | GetTerms Cookie Consent & Policies | 98 | | 46 | 800 | | | Non-prefixed global variable |
| #5921 | Icon Element – Icon Pack for Elementor Page Builder (6718 icons) | 64 | 30 | 16 | 40k+ | | | wp function not compatible with requires wp |
| #5922 | KCSG Kartra Pages | 47 | 30 | 16 | 500 | | | Heredoc Output Not Escaped |
| #5923 | Linked Variations for WooCommerce – Link Separate Products by Attribute with Swatches, Quick View & Shortcodes | 97 | 12 | 34 | 500 | | | Non-prefixed global variable |
| #5924 | MSN Partner Hub | 54 | 21 | 25 | 1k+ | | | Missing direct file access protection |
| #5925 | Ocean Social Sharing | 84 | 10 | 36 | 60k+ | | | Non-prefixed global variable |
| #5926 | Page Comments Off Please | 40 | 17 | 29 | 1k+ | | | Nonce verification recommended |
| #5927 | PageLoader Lite – Loading Screen | 58 | 29 | 17 | 700 | | | Output is not escaped |
| #5928 | Panda Video | 80 | 29 | 17 | 3k+ | | | Non-prefixed global variable |
| #5929 | Plugin Notes | 57 | 17 | 29 | 400 | | | Input is not validated |
| #5930 | Post Update Add-On – Gravity Forms | 97 | 44 | 2 | 400 | | | Non Singular String Literal Domain |
| #5931 | Print Bangla News | 71 | 29 | 17 | 2k+ | | | Output is not escaped |
| #5932 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 600 | | | Non-prefixed global variable |
| #5933 | Really Simple CSV Importer | 66 | 38 | 8 | 40k+ | | | Output is not escaped |
| #5934 | Self-Hosted Google Fonts | 77 | 35 | 11 | 30k+ | | | Text Domain Mismatch |
| #5935 | Semrush Content Toolkit | 55 | 22 | 24 | 2k+ | | | Non-prefixed global variable |
| #5936 | Simple Google Sitemap XML | 38 | 38 | 8 | 2k+ | | | Output is not escaped |
| #5937 | Simple Restrict | 41 | 34 | 12 | 1k+ | | | Output is not escaped |
| #5938 | Simple Side Tab | 42 | 29 | 17 | 10k+ | | | Unsafe printing function |
| #5939 | SM Vertical Menu | 55 | 45 | 1 | 400 | | | Output is not escaped |
| #5940 | Spocket ‑ US & EU Dropshipping | 70 | 15 | 31 | 1k+ | | | Direct Query |
| #5941 | Threat Scan Plugin | 41 | 29 | 17 | 400 | | | Output is not escaped |
| #5942 | Add to Cart Custom Redirect for WooCommerce | 52 | 33 | 13 | 2k+ | | | Text Domain Mismatch |
| #5943 | WP Anti-Clickjack | 66 | 4 | 42 | 4k+ | | | Nonce verification recommended |
| #5944 | SNY Auto Featured Image | 95 | 41 | 5 | 1k+ | | | Text Domain Mismatch |
| #5945 | WP Multisite User Sync/Unsync | 66 | 15 | 31 | 700 | | | Missing Arg Domain |
| #5946 | WP Post Redirect | 42 | 29 | 17 | 3k+ | | | Unsafe printing function |
| #5947 | WP Secure Maintenance | 52 | 28 | 18 | 1k+ | | | Output is not escaped |
| #5948 | WPML to Polylang | 90 | 1 | 45 | 6k+ | | | Direct Query |
| #5949 | Video Popup for Elementor – WPTD | 66 | 33 | 13 | 1k+ | | | Output is not escaped |
| #5950 | Accesibilidad Web con el Widget de AccedeMe | 60 | 22 | 23 | 1k+ | | | Text Domain Mismatch |