| #6351 | GamiPress – Multimedia Content | 49 | 11 | 25 | 500 | | | Nonce verification recommended |
| #6352 | Goftino | 45 | 16 | 20 | 10k+ | | | Output is not escaped |
| #6353 | GPX Viewer | 71 | 10 | 26 | 900 | | | Missing Version |
| #6354 | Hreflang Manager – Hreflang Implementation for International SEO | 68 | 21 | 15 | 8k+ | | | wp function not compatible with requires wp |
| #6355 | HREFLANG Tags Management By Webnow | 83 | 2 | 34 | 600 | | | Non-prefixed global variable |
| #6356 | Integrate GA4 Google Analytics | 63 | 33 | 3 | 500 | | | Text Domain Mismatch |
| #6357 | Kama SpamBlock | 64 | 29 | 7 | 5k+ | | | Short PHP open tag found |
| #6358 | LoftLoader | 81 | 17 | 19 | 70k+ | | | Missing direct file access protection |
| #6359 | One Tap Google Sign in | 63 | 6 | 30 | 900 | | | Request data is not unslashed |
| #6360 | Pluginception | 56 | 7 | 29 | 4k+ | | | Request data is not unslashed |
| #6361 | Product Bundles – Variation Bundles | 52 | 23 | 13 | 600 | | | Output is not escaped |
| #6362 | Protect the Children! | 35 | 2 | 34 | 1k+ | | | Missing nonce verification |
| #6363 | Reveal IDs | 35 | 23 | 13 | 40k+ | | | Output is not escaped |
| #6364 | Simple Full Screen Background Image | 44 | 23 | 13 | 10k+ | | | Output is not escaped |
| #6365 | Simple Owl Carousel | 60 | 23 | 13 | 500 | | | Missing Translators Comment |
| #6366 | Simple XML Sitemap Generator | 54 | 8 | 28 | 3k+ | | | Non-prefixed function |
| #6367 | Simplelightbox | 59 | 32 | 4 | 1k+ | | | Output is not escaped |
| #6368 | Siteready Coming Soon Under Construction | 76 | 6 | 30 | 3k+ | | | Non-prefixed global variable |
| #6369 | Smart Custom Fields | 95 | 8 | 28 | 50k+ | | | Dynamic hook name |
| #6370 | Sp*tify Play Button for WordPress | 54 | 21 | 15 | 3k+ | | | Text Domain Mismatch |
| #6371 | Visual Composer Templates Library | 94 | 25 | 11 | 600 | | | Missing direct file access protection |
| #6372 | Dynamic Pricing & Discounts Lite | 96 | 35 | 1 | 400 | | | Missing direct file access protection |
| #6373 | Flutterwave Payment Gateway for WooCommerce | 48 | 14 | 22 | 2k+ | | | Output is not escaped |
| #6374 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #6375 | Action Network | 76 | 19 | 17 | 400 | | | error log error log |
| #6376 | JAMstack Deployments | 67 | 33 | 3 | 1k+ | | | Short PHP open tag found |
| #6377 | WP Post Expires | 43 | 21 | 15 | 2k+ | | | Output is not escaped |
| #6378 | WP Redis | 66 | 11 | 25 | 9k+ | | | Interpolated SQL is not prepared |
| #6379 | WPC Show Single Variations for WooCommerce | 67 | 5 | 31 | 1k+ | | | Nonce verification recommended |
| #6380 | Affiliate Link Marker | 35 | 31 | 4 | 400 | | | Text Domain Mismatch |
| #6381 | Anchor Episodes Index (Spotify for Podcasters) | 75 | 32 | 3 | 1k+ | | | Text Domain Mismatch |
| #6382 | Auto Featured Image (Auto Post Thumbnail) | 79 | 5 | 30 | 50k+ | | | Non-prefixed hook name |
| #6383 | Block Patterns for Food Bloggers | 96 | 21 | 14 | 800 | | | Missing direct file access protection |
| #6384 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 600 | | | badly named files |
| #6385 | Constructor for SiteOrigin | 61 | 29 | 6 | 600 | | | Output is not escaped |
| #6386 | Contact Form DB for Enfold | 58 | 21 | 14 | 700 | | | Output is not escaped |
| #6387 | Contact Form7: Autocomplete | 73 | 27 | 8 | 500 | | | Text Domain Mismatch |
| #6388 | CSV Importer | 54 | 24 | 11 | 3k+ | | | Missing direct file access protection |
| #6389 | Custom Related Products for WooCommerce | 48 | 25 | 10 | 5k+ | | | Text Domain Mismatch |
| #6390 | Devices for Elementor | 62 | 22 | 13 | 400 | | | Output is not escaped |
| #6391 | Disable Title | 72 | 20 | 15 | 2k+ | | | Text Domain Mismatch |
| #6392 | Easy Media Download | 49 | 20 | 15 | 9k+ | | | Output is not escaped |
| #6393 | Elegant Blog Themes Demo Importer | 96 | 22 | 13 | 500 | | | Text Domain Mismatch |
| #6394 | Embed Google Fonts | 64 | 28 | 7 | 5k+ | | | Output is not escaped |
| #6395 | Export Categories | 66 | 22 | 13 | 1k+ | | | Output is not escaped |
| #6396 | Feedbucket – Website Feedback Tool | 55 | 10 | 25 | 1k+ | | | Input is not validated |
| #6397 | Fluent Forms Connector for MailPoet | 98 | 28 | 7 | 1k+ | | | Text Domain Mismatch |
| #6398 | Live Chat by Formilla – Real-time Chat & Chatbots Plugin | 57 | 22 | 13 | 2k+ | | | Missing Arg Domain |
| #6399 | Fullwidth Templates for Any Theme & Page Builder | 81 | 12 | 23 | 20k+ | | | Non-prefixed constant |
| #6400 | Gravity Forms CLI Add-On | 81 | 31 | 4 | 20k+ | | | Missing direct file access protection |