| #5951 | Video Popup for Elementor – WPTD | 66 | 33 | 13 | 1k+ | | | Output is not escaped |
| #5952 | Accesibilidad Web con el Widget de AccedeMe | 60 | 22 | 23 | 1k+ | | | Text Domain Mismatch |
| #5953 | Another Mailchimp Widget | 71 | 28 | 17 | 5k+ | | | Missing Translators Comment |
| #5954 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | | | Text Domain Mismatch |
| #5955 | Bulk Change Media Author | 42 | 25 | 20 | 2k+ | | | Unsafe printing function |
| #5956 | Cachify | 84 | 9 | 36 | 9k+ | | | Non-prefixed global variable |
| #5957 | Collapsing Archives | 64 | 36 | 9 | 3k+ | | | date date |
| #5958 | Custom Layouts – Post + Product grids made easy | 89 | 23 | 22 | 4k+ | | | Missing Translators Comment |
| #5959 | Duplica – Duplicate Posts, Pages, Custom Posts or Users | 35 | 14 | 31 | 2k+ | | | Non-prefixed global variable |
| #5960 | Dynamic Conditions | 74 | 42 | 3 | 60k+ | | | Missing Arg Domain |
| #5961 | Exclude Pages | 42 | 31 | 14 | 30k+ | | | Non Singular String Literal Domain |
| #5962 | flowpaper | 58 | 14 | 31 | 10k+ | | | Non-prefixed function |
| #5963 | FluentPlayer – Video Player With Forms & Lead Capture | 76 | 5 | 40 | 1k+ | | | Database parameter is not escaped |
| #5964 | Focus Videos | 53 | 36 | 9 | 400 | | | Text Domain Mismatch |
| #5965 | Genesis Widget Column Classes | 73 | 41 | 4 | 5k+ | | | Non Singular String Literal Domain |
| #5966 | Gifty | 75 | 38 | 7 | 400 | | | wp function not compatible with requires wp |
| #5967 | Gutenverse Companion | 81 | 16 | 29 | 8k+ | | | Nonce verification recommended |
| #5968 | Heartbeat Control | 35 | 27 | 18 | 80k+ | | | Missing Arg Domain |
| #5969 | Hide Admin Menu | 55 | 18 | 27 | 20k+ | | | Non-prefixed function |
| #5970 | Import Users from CSV | 47 | 33 | 12 | 10k+ | | | Unsafe printing function |
| #5971 | Index WP Users For Speed | 77 | 10 | 35 | 1k+ | | | Non-prefixed global variable |
| #5972 | KKiapay WooCommerce Plugin | 44 | 20 | 25 | 400 | | | Output is not escaped |
| #5973 | Multiple external product URLs for WooCommerce | 53 | 28 | 17 | 400 | | | Text Domain Mismatch |
| #5974 | N360 | Splash Screen | 46 | 32 | 13 | 600 | | | Output is not escaped |
| #5975 | NS Cloner – Site Copier | 35 | 29 | 16 | 7k+ | | | Missing direct file access protection |
| #5976 | PageMenu | 42 | 16 | 29 | 1k+ | | | Missing nonce verification |
| #5977 | payOS | 62 | 19 | 26 | 500 | | | Request data is not unslashed |
| #5978 | Press This | 70 | 1 | 44 | 5k+ | | | Non-prefixed hook name |
| #5979 | Ninjalytics: Sales Reports & Order Export for WooCommerce and EDD | 35 | 15 | 30 | 6k+ | | | Non-prefixed global variable |
| #5980 | Protect Login | 95 | 26 | 19 | 600 | | | Missing direct file access protection |
| #5981 | Share a Draft | 41 | 39 | 6 | 3k+ | | | Output is not escaped |
| #5982 | Simple Image Widget | 44 | 26 | 19 | 10k+ | | | Unsafe printing function |
| #5983 | Slick Slider | 35 | 36 | 9 | 2k+ | | | Output is not escaped |
| #5984 | TailPress – Tailwind for WordPress | 35 | 23 | 22 | 500 | | | Output is not escaped |
| #5985 | Category Order and Taxonomy Terms Order | 76 | 35 | 10 | 500k+ | | | wp function not compatible with requires wp |
| #5986 | TC Custom JavaScript | 35 | 19 | 26 | 10k+ | | | Missing Version |
| #5987 | The Social Links | 35 | 16 | 29 | 2k+ | | | Non-prefixed global variable |
| #5988 | Theme Duplicator | 41 | 14 | 31 | 500 | | | Nonce verification recommended |
| #5989 | Themify Icons | 35 | 33 | 12 | 3k+ | | | Output is not escaped |
| #5990 | TNC Toolbox: Web Performance | 52 | 20 | 25 | 1k+ | | | Output is not escaped |
| #5991 | TopBar Call To Action | 85 | 40 | 5 | 2k+ | | | Text Domain Mismatch |
| #5992 | WC Korkmaz Contract – Contracts for WooCommerce | 59 | 7 | 38 | 600 | | | Non-prefixed global variable |
| #5993 | WiserNotify – Social Proof & FOMO Notifications, WooCommerce Sales Popups, Reviews & Announcement Bar | 62 | 13 | 32 | 1k+ | | | Request data is not unslashed |
| #5994 | WP Notification Bars | 67 | 13 | 32 | 10k+ | | | Request data is not unslashed |
| #5995 | WP Search with Algolia | 64 | 33 | 12 | 7k+ | | | Missing direct file access protection |
| #5996 | WPC Grouped Product for WooCommerce | 84 | | 45 | 3k+ | | | Nonce verification recommended |
| #5997 | WPC Variation Bulk Editor for WooCommerce | 63 | 13 | 32 | 1k+ | | | Request data is not unslashed |
| #5998 | WPSSO Tune WP Image Editors | 91 | 35 | 10 | 900 | | | Missing Translators Comment |
| #5999 | WP All Import – Import SEO Settings for Yoast SEO | 46 | 19 | 26 | 20k+ | | | Nonce verification recommended |
| #6000 | Yoast Test Helper | 95 | 2 | 43 | 60k+ | | | Direct Query |