| #6451 | Linker – URL shortener & track outbound link clicks | 43 | 17 | 17 | 2k+ | | | Output is not escaped |
| #6452 | Menu Swapper | 58 | 20 | 14 | 3k+ | | | Output is not escaped |
| #6453 | Admin Bookmarks | 76 | 30 | 4 | 500 | | | Text Domain Mismatch |
| #6454 | NETOPIA Payments Payment Gateway | 73 | 3 | 31 | 10k+ | | | Missing nonce verification |
| #6455 | New Recent Posts Select Categories By Thao Marky | 64 | 33 | 1 | 500 | | | Text Domain Mismatch |
| #6456 | PDF Smart Viewer for Elementor | 77 | 18 | 16 | 1k+ | | | Non-prefixed global variable |
| #6457 | Preserved HTML Editor Markup | 53 | 12 | 22 | 600 | | | Output is not escaped |
| #6458 | Preserved HTML Editor Markup Plus | 53 | 12 | 22 | 3k+ | | | Output is not escaped |
| #6459 | Publish Post Email Notification | 61 | 16 | 18 | 600 | | | Output is not escaped |
| #6460 | Rapid URL Indexer for WP – Index Websites in Google | 90 | 6 | 28 | 900 | | | error log error log |
| #6461 | SEOWriting | 52 | 10 | 24 | 30k+ | | | Output is not escaped |
| #6462 | AI Agent by SiteGround | 54 | 28 | 6 | 1m+ | | | Exception output is not escaped |
| #6463 | Slightly troublesome permalink | 63 | 24 | 10 | 1k+ | | | Non Singular String Literal Domain |
| #6464 | Video Dashboard | 56 | 33 | 1 | 600 | | | Output is not escaped |
| #6465 | Extra Shipping Rates for WooCommerce | 74 | 15 | 19 | 800 | | | Non-prefixed global variable |
| #6466 | GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time | 97 | | 34 | 3k+ | | | Non-prefixed constant |
| #6467 | WebP Conversion | 82 | 1 | 33 | 3k+ | | | Non-prefixed global variable |
| #6468 | Chat Button & Custom ChatGPT-Powered Bot by GetButton.io | 58 | 26 | 8 | 20k+ | | | Non-prefixed function |
| #6469 | Widget Context | 53 | 14 | 20 | 40k+ | | | Non-prefixed hook name |
| #6470 | Call for Price for WooCommerce | 35 | 3 | 31 | 8k+ | | | Non-prefixed hook name |
| #6471 | Cloak Affiliate Links for WooCommerce | 58 | 28 | 6 | 2k+ | | | Non Singular String Literal Domain |
| #6472 | ShipStation for WooCommerce | 81 | | 34 | 40k+ | | | Non-prefixed class |
| #6473 | easy AMP | 56 | 10 | 24 | 600 | | | Input is not sanitized |
| #6474 | WP API SwaggerUI | 74 | 14 | 20 | 2k+ | | | Missing direct file access protection |
| #6475 | WP Favicon | 68 | 25 | 9 | 500 | | | Non Singular String Literal Domain |
| #6476 | WP Login Form | 48 | 14 | 20 | 7k+ | | | Request data is not unslashed |
| #6477 | WP Login Timeout Settings | 54 | 27 | 7 | 600 | | | Output is not escaped |
| #6478 | WP User Profile Restriction | 47 | 26 | 8 | 400 | | | Output is not escaped |
| #6479 | WPC Variations Table for WooCommerce | 85 | | 34 | 400 | | | Non-prefixed hook name |
| #6480 | WPCopyRights网站防复制插件 | 93 | 1 | 33 | 500 | | | Non-prefixed global variable |
| #6481 | WPGet API – Connect to any external REST API | 89 | 15 | 19 | 10k+ | | | Missing direct file access protection |
| #6482 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #6483 | Accessibility by AudioEye | 95 | 17 | 16 | 2k+ | | | Non-prefixed global variable |
| #6484 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | | | curl curl setopt |
| #6485 | Advanced Custom Fields: Nav Menu Field | 85 | 27 | 6 | 8k+ | | | Missing Arg Domain |
| #6486 | Advanced Custom Fields: Widget Area Field | 74 | 29 | 4 | 400 | | | Text Domain Mismatch |
| #6487 | AI Provider for Google | 65 | 32 | 1 | 30k+ | | | Exception output is not escaped |
| #6488 | Analytify – Dashboard Widget for Google Analytics | 96 | 21 | 12 | 10k+ | | | wp function not compatible with requires wp |
| #6489 | Auto Delete Applications – Add-on for WP Job Openings | 96 | 19 | 14 | 1k+ | | | Text Domain Mismatch |
| #6490 | Auto Image Alt Attribute | 55 | 26 | 7 | 6k+ | | | Unsafe printing function |
| #6491 | Beacon Lead Magnets and Lead Capture | 75 | 8 | 25 | 500 | | | Nonce verification recommended |
| #6492 | Better Menu Widget | 54 | 32 | 1 | 600 | | | Output is not escaped |
| #6493 | Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More | 89 | 13 | 20 | 2k+ | | | wp function not compatible with requires wp |
| #6494 | CloudFilt Bot & Spam Protection | 51 | 11 | 22 | 600 | | | Output is not escaped |
| #6495 | Compact WP Audio Player | 61 | 12 | 21 | 20k+ | | | Non-prefixed function |
| #6496 | CookieFox – Cookie Notice | 48 | 14 | 19 | 400 | | | Output is not escaped |
| #6497 | Custom Login URL | 69 | 16 | 17 | 1k+ | | | Missing Arg Domain |
| #6498 | Datareporter Webcare | 74 | 12 | 21 | 700 | | | Non-prefixed global variable |
| #6499 | Digital Signature For Contact Form 7 | 84 | 22 | 11 | 5k+ | | | file system operations fwrite |
| #6500 | Dynamic Year Block – display a copyright notice in your footer with the current year | 90 | 5 | 28 | 2k+ | | | Non-prefixed global variable |