| #6151 | Admin filter posts by year | 64 | 8 | 32 | 400 | | | Non-prefixed function |
| #6152 | Admin Help Docs | 97 | 9 | 31 | 500 | | | Non-prefixed global variable |
| #6153 | In-feed ads for Google AdSense | 70 | 20 | 20 | 7k+ | | | Non-prefixed global variable |
| #6154 | AffiliateWP – Affiliate QR Codes | 78 | 32 | 8 | 1k+ | | | Text Domain Mismatch |
| #6155 | Automatic NBSP | 42 | 24 | 16 | 3k+ | | | Output is not escaped |
| #6156 | Banner Upload | 65 | 36 | 4 | 500 | | | Output is not escaped |
| #6157 | Bestfreebie Elementor Icons | 73 | 27 | 13 | 400 | | | Text Domain Mismatch |
| #6158 | Bg RuTube Embed | 53 | 19 | 21 | 1k+ | | | Unsafe printing function |
| #6159 | Cloudways WordPress Migrator | 62 | 15 | 25 | 20k+ | | | Output is not escaped |
| #6160 | Custom Cart Link for WooCommerce | 40 | 24 | 16 | 700 | | | Unsafe printing function |
| #6161 | Clover Payments for WooCommerce | 42 | 25 | 15 | 2k+ | | | Exception output is not escaped |
| #6162 | Colorful Categories | 41 | 20 | 20 | 2k+ | | | Output is not escaped |
| #6163 | Cryptocurrency Widgets – Price Ticker & Coins List | 92 | 4 | 36 | 7k+ | | | Non-prefixed global variable |
| #6164 | CodeKit – Custom Codes Editor | 77 | 11 | 29 | 4k+ | | | Non-prefixed global variable |
| #6165 | Custom Fields Account Registration For Woocommerce | 64 | | 40 | 700 | | | Missing nonce verification |
| #6166 | Custom Sidebars by ProteusThemes | 62 | 17 | 23 | 1k+ | | | Missing nonce verification |
| #6167 | Default Attributes for WooCommerce | 68 | 22 | 18 | 400 | | | Non-prefixed hook name |
| #6168 | DX Delete Attached Media | 46 | 32 | 8 | 4k+ | | | Output is not escaped |
| #6169 | Easy Video Player | 42 | 20 | 20 | 20k+ | | | Output is not escaped |
| #6170 | Email Notification on Login | 43 | 33 | 7 | 1k+ | | | Unsafe printing function |
| #6171 | Fathom Analytics for WP | 63 | 25 | 15 | 10k+ | | | Output is not escaped |
| #6172 | FV Top Level Categories | 56 | 24 | 16 | 20k+ | | | Text Domain Mismatch |
| #6173 | Gettext override translations | 59 | 33 | 7 | 2k+ | | | Missing Arg Domain |
| #6174 | Country and State Selection Addon for Gravity Forms | 61 | 14 | 26 | 1k+ | | | Non-prefixed constant |
| #6175 | Simple Slider Block – Create Sliders From Core Blocks | 87 | 6 | 34 | 600 | | | Non-prefixed global variable |
| #6176 | Online Payments with iK Pay Gateway | 64 | 12 | 28 | 1k+ | | | Missing nonce verification |
| #6177 | JivoChat Live Chat – WP live chat plugin for WordPress | 81 | 27 | 13 | 20k+ | | | wp function not compatible with requires wp |
| #6178 | Calendar.online / Kalender.digital – Plugin | 72 | 33 | 7 | 2k+ | | | Output is not escaped |
| #6179 | KIA Subtitle | 51 | 21 | 19 | 7k+ | | | Non-prefixed global variable |
| #6180 | Link Juice Keeper | 91 | 4 | 36 | 10k+ | | | Non-prefixed hook name |
| #6181 | PopBox For Elementor | 66 | 31 | 9 | 3k+ | | | Output is not escaped |
| #6182 | N-Genius Online by Network | 92 | 2 | 38 | 1k+ | | | Non-prefixed class |
| #6183 | Page Tagger | 55 | 30 | 10 | 2k+ | | | Output is not escaped |
| #6184 | Page Meta | 66 | 26 | 14 | 800 | | | Missing Arg Domain |
| #6185 | Post Cloner | 41 | 25 | 15 | 1k+ | | | Text Domain Mismatch |
| #6186 | Postepay Gateway per Woocommerce | 68 | 36 | 4 | 1k+ | | | Text Domain Mismatch |
| #6187 | WP All Export – Product Export Add-On for WooCommerce | 90 | 14 | 26 | 10k+ | | | Non-prefixed hook name |
| #6188 | RDFa Breadcrumb | 53 | 27 | 13 | 600 | | | Output is not escaped |
| #6189 | EMI Calculator | 54 | 28 | 12 | 700 | | | Output is not escaped |
| #6190 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 64 | 6 | 34 | 6k+ | | | Interpolated SQL is not prepared |
| #6191 | Easy SSL Plugin for SAKURA Rental Server | 62 | 23 | 17 | 50k+ | | | Input is not sanitized |
| #6192 | Animator – Scroll Triggered Animations | 78 | 16 | 24 | 2k+ | | | Missing direct file access protection |
| #6193 | Seed Fonts | 66 | 29 | 11 | 20k+ | | | Output is not escaped |
| #6194 | Send Email From Admin | 53 | 27 | 13 | 800 | | | Text Domain Mismatch |
| #6195 | Serviceform Pixel | 40 | 18 | 22 | 400 | | | Output is not escaped |
| #6196 | Shopkeeper Extender | 35 | 14 | 26 | 5k+ | | | Missing Version |
| #6197 | Smart WYSIWYG Blocks Of Content | 70 | 36 | 4 | 1k+ | | | Output is not escaped |
| #6198 | Tabbed Contents Block – Display Content in Tabbed Layout | 90 | 4 | 36 | 800 | | | Non-prefixed global variable |
| #6199 | QR Code PicPay for WooCommerce | 61 | 15 | 25 | 600 | | | Non-prefixed global variable |
| #6200 | WP Clean Admin Menu | 56 | 29 | 11 | 2k+ | | | Output is not escaped |