| #6051 | Multiple Post Thumbnails | 53 | 25 | 18 | 20k+ | | | Output is not escaped |
| #6052 | Ollie Menu Designer | 91 | | 43 | 3k+ | | | Non-prefixed global variable |
| #6053 | ONTRApages | 53 | 16 | 27 | 1k+ | | | Output is not escaped |
| #6054 | Outfunnel: Web Visitor Tracking & CRM Integration | 74 | 34 | 9 | 600 | | | Short PHP open tag found |
| #6055 | Passwords Evolved | 45 | 26 | 17 | 1k+ | | | Output is not escaped |
| #6056 | Remove Uppercase Accents | 52 | 41 | 2 | 8k+ | | | Unsafe printing function |
| #6057 | Responsive Image Widget | 49 | 43 | 0 | 500 | | | Output is not escaped |
| #6058 | Responsive Slider | 40 | 28 | 15 | 3k+ | | | Output is not escaped |
| #6059 | Seed Social | 56 | 36 | 7 | 6k+ | | | Output is not escaped |
| #6060 | Slider Templates | 45 | 10 | 33 | 1k+ | | | Request data is not unslashed |
| #6061 | Spam Comments Cleaner | 62 | 14 | 29 | 1k+ | | | Non-prefixed function |
| #6062 | Star Rating Field For Contact Form 7 | 51 | 36 | 7 | 800 | | | Output is not escaped |
| #6063 | Super Web Share – Native Social Sharing Button | 82 | 24 | 19 | 2k+ | | | Non-prefixed function |
| #6064 | TrustedSite | 50 | 29 | 14 | 20k+ | | | Output is not escaped |
| #6065 | WP Adsterra Dashboard | 57 | 22 | 21 | 400 | | | wp function not compatible with requires wp |
| #6066 | WP PDF Generator | 84 | 21 | 22 | 1k+ | | | Request data is not unslashed |
| #6067 | WP Prefix Changer | 47 | 27 | 16 | 900 | | | Missing Arg Domain |
| #6068 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 600 | | | Output is not escaped |
| #6069 | WPC Shop as a Customer for WooCommerce | 64 | 5 | 38 | 400 | | | Request data is not unslashed |
| #6070 | Migrate to WordPress.com | 62 | 15 | 28 | 2k+ | | | Output is not escaped |
| #6071 | Adjust Admin Categories | 51 | 30 | 12 | 10k+ | | | Output is not escaped |
| #6072 | All in One SEO Pack Importer | 56 | 17 | 25 | 500 | | | Direct Query |
| #6073 | Antispam Bee | 80 | 4 | 38 | 700k+ | | | Nonce verification recommended |
| #6074 | Coming soon Page | 40 | 24 | 18 | 500 | | | Text Domain Mismatch |
| #6075 | Cashfree for WooCommerce | 47 | 21 | 21 | 8k+ | | | Nonce verification recommended |
| #6076 | Change Background Color for Pages, Posts, Widgets | 42 | 35 | 7 | 500 | | | Text Domain Mismatch |
| #6077 | Plugin de Clip para WooCommerce | 93 | 13 | 29 | 800 | | | Non-prefixed global variable |
| #6078 | Comment Image | 44 | 19 | 23 | 1k+ | | | Output is not escaped |
| #6079 | CookiePro | Simplify Compliance with GDPR & EU Cookie Laws | 90 | 37 | 5 | 1k+ | | | Missing Arg Domain |
| #6080 | Envíos Coordinadora Woocommerce (Oficial) – WordPress plugin | 68 | 12 | 30 | 600 | | | Missing Arg Domain |
| #6081 | CTA Button Styler | 91 | 3 | 39 | 400 | | | Non-prefixed global variable |
| #6082 | Easy Basic Authentication – Add basic auth to site or admin area | 46 | 14 | 28 | 600 | | | Input is not sanitized |
| #6083 | Easy Quotes | 55 | 11 | 31 | 700 | | | Direct Query |
| #6084 | Flying Pages: Preload Pages for Faster Navigation & Improved User Experience | 47 | 21 | 21 | 20k+ | | | Missing direct file access protection |
| #6085 | GamiPress – Button | 60 | 34 | 8 | 900 | | | Text Domain Mismatch |
| #6086 | Real Time Validation For Gravity Forms | 99 | 41 | 1 | 500 | | | Text Domain Mismatch |
| #6087 | Goolytics – Simple Google Analytics | 42 | 37 | 5 | 4k+ | | | Unsafe printing function |
| #6088 | Live Summary for Gravity Forms | 54 | 15 | 27 | 1k+ | | | Nonce verification recommended |
| #6089 | LJ Multi Column Archive | 40 | 17 | 25 | 1k+ | | | Output is not escaped |
| #6090 | Logo or Image Replace by mycore.global | 59 | 30 | 12 | 400 | | | Text Domain Mismatch |
| #6091 | Manage User Columns | 42 | 15 | 27 | 1k+ | | | Request data is not unslashed |
| #6092 | Lite Video Embed | 51 | 35 | 7 | 1k+ | | | Output is not escaped |
| #6093 | PDF Thumbnail Generator | 42 | 26 | 16 | 2k+ | | | Output is not escaped |
| #6094 | PDF Viewer Block for Gutenberg | 95 | 39 | 3 | 10k+ | | | badly named files |
| #6095 | Pronamic Google Maps | 85 | 24 | 18 | 1k+ | | | Non-prefixed global variable |
| #6096 | Security Headers | 74 | 31 | 11 | 3k+ | | | Deprecated parameter: unregister_setting parameter 3 |
| #6097 | Simple Revisions Delete | 43 | 16 | 26 | 10k+ | | | Output is not escaped |
| #6098 | Smartarget – Chat Buttons & Engagement Apps | 68 | 31 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #6099 | Sözleşmeler | 50 | 6 | 36 | 1k+ | | | Input is not sanitized |
| #6100 | Trusona for WordPress | 55 | 8 | 34 | 500 | | | Non-prefixed function |