| #6201 | Bulk Term Generator – Import multiple tags, categories, and taxonomies easily | 66 | 8 | 31 | 2k+ | | | Request data is not unslashed |
| #6202 | UniqueID for Contact Form 7 | 64 | 21 | 18 | 2k+ | | | Text Domain Mismatch |
| #6203 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | | | Unsafe printing function |
| #6204 | Complianz – Terms and Conditions | 95 | 13 | 26 | 300k+ | | | Non-prefixed global variable |
| #6205 | Custom Post Type UI | 53 | 16 | 23 | 1m+ | | | Output is not escaped |
| #6206 | Disabled Source, Disabled Right Click and Content Protection | 59 | 6 | 33 | 10k+ | | | Nonce verification recommended |
| #6207 | Potent Donations for WooCommerce | 35 | 14 | 25 | 2k+ | | | Missing nonce verification |
| #6208 | Easy Font Resize | 54 | 33 | 6 | 700 | | | Setting is missing a sanitization callback |
| #6209 | Easy Sidebar Menu Widget | 58 | 32 | 7 | 2k+ | | | Output is not escaped |
| #6210 | F4 Total Stock Value for WooCommerce | 43 | 27 | 12 | 1k+ | | | Output is not escaped |
| #6211 | Cool Flipbox – Shortcode & Gutenberg Block | 89 | 29 | 10 | 5k+ | | | wp function not compatible with requires wp |
| #6212 | G Meta Keywords | 47 | 31 | 8 | 10k+ | | | Unsafe printing function |
| #6213 | Embed Files from Google Drive | 77 | 4 | 35 | 5k+ | | | Nonce verification recommended |
| #6214 | Happierleads – Identify your B2B website visitors even if they work remotely | 63 | 32 | 7 | 600 | | | wp function not compatible with requires wp |
| #6215 | leadlovers for Elementor | 95 | 34 | 5 | 2k+ | | | Text Domain Mismatch |
| #6216 | Lightbox | 43 | 29 | 10 | 700 | | | Unsafe printing function |
| #6217 | Mu Manager – Manage mu-plugins like standard plugins | 80 | 21 | 18 | 800 | | | Missing Arg Domain |
| #6218 | MultiManager WP – Manage All Your WordPress Sites Easily | 91 | 28 | 11 | 1k+ | | | Missing Arg Domain |
| #6219 | Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls | 68 | 21 | 18 | 1k+ | | | Output is not escaped |
| #6220 | Preloader Awesome – Page Loading Animation with Spinner & Gif | 96 | 32 | 7 | 1k+ | | | Missing direct file access protection |
| #6221 | Quick Bulk Term Taxonomy Creator | 55 | 37 | 2 | 400 | | | Text Domain Mismatch |
| #6222 | Quick Flickr Widget | 56 | 37 | 2 | 400 | | | Output is not escaped |
| #6223 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | | | wp function not compatible with requires wp |
| #6224 | Rename Taxonomies by WebMan | 69 | 32 | 7 | 1k+ | | | Missing Arg Domain |
| #6225 | Responsive Mobile-Friendly Tooltip | 79 | 25 | 14 | 700 | | | Missing Arg Domain |
| #6226 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 65 | 6 | 33 | 6k+ | | | Interpolated SQL is not prepared |
| #6227 | ShopMagic Abandoned Cart Recovery for WooCommerce | 35 | 16 | 23 | 2k+ | | | Non-prefixed global variable |
| #6228 | Shortcode for Current Date | 66 | 27 | 12 | 10k+ | | | Text Domain Mismatch |
| #6229 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | | | date date |
| #6230 | Simple Sticky Header on Scroll | 70 | 31 | 8 | 900 | | | Output is not escaped |
| #6231 | SKT Blocks – Gutenberg based Page Builder | 94 | 14 | 25 | 1k+ | | | Non-prefixed function |
| #6232 | SrbTransLatin – Serbian Latinisation | 35 | 11 | 28 | 2k+ | | | Non-prefixed global variable |
| #6233 | Tiny gtag.js Analytics | 51 | 39 | 0 | 400 | | | Output is not escaped |
| #6234 | Two Factor (2FA) Authentication via Email | 61 | 12 | 27 | 9k+ | | | Request data is not unslashed |
| #6235 | WC Price History | 42 | 18 | 21 | 4k+ | | | Database parameter is not escaped |
| #6236 | WCFM – Multivendor Marketplace REST API for WooCommerce | 91 | 5 | 34 | 1k+ | | | Non-prefixed hook name |
| #6237 | Show Variations as Single Products for WooCommerce | 61 | 12 | 27 | 500 | | | Unsafe printing function |
| #6238 | Custom Price Labels for WooCommerce | 46 | 17 | 22 | 1k+ | | | Output is not escaped |
| #6239 | WP Force SSL & HTTPS SSL Redirect | 92 | 18 | 21 | 90k+ | | | Non-prefixed global variable |
| #6240 | WP Reset | 96 | 8 | 31 | 300k+ | | | Non-prefixed global variable |
| #6241 | WPThumb | 70 | 30 | 9 | 800 | | | Output is not escaped |
| #6242 | Yext Plugin | 55 | 16 | 23 | 700 | | | Non-prefixed function |
| #6243 | aapanel WP Toolkit | 71 | 20 | 18 | 2k+ | | | wp function not compatible with requires wp |
| #6244 | AC Advanced Flamingo Settings | 66 | 6 | 32 | 700 | | | Nonce verification recommended |
| #6245 | Add Polylang support for Customizer | 48 | 18 | 20 | 2k+ | | | Nonce verification recommended |
| #6246 | Anti-spam Reloaded | 43 | 19 | 19 | 2k+ | | | Output is not escaped |
| #6247 | Dynific Addons for Elementor (formerly AnyWhere Elementor) | 84 | 33 | 5 | 70k+ | | | Text Domain Mismatch |
| #6248 | Popup for CF7 with Sweet Alert | 35 | 26 | 12 | 2k+ | | | Text Domain Mismatch |
| #6249 | Contact Information Widget | 69 | 35 | 3 | 3k+ | | | Output is not escaped |
| #6250 | Content Blocks Builder – Create blocks, repeater blocks with carousel, grid, popup layouts | 98 | | 38 | 1k+ | | | Non-prefixed hook name |