| #6501 | Digital Signature For Contact Form 7 | 84 | 22 | 11 | 5k+ | | | file system operations fwrite |
| #6502 | Dynamic Year Block – display a copyright notice in your footer with the current year | 90 | 5 | 28 | 2k+ | | | Non-prefixed global variable |
| #6503 | Live Chat with Messenger Customer Chat | 65 | 10 | 23 | 3k+ | | | Input is not sanitized |
| #6504 | FD Footnotes Plugin | 77 | 28 | 5 | 1k+ | | | Non Singular String Literal Domain |
| #6505 | Integrate Firebase | 64 | 26 | 7 | 500 | | | Output is not escaped |
| #6506 | Invoice Gateway for WooCommerce – Invoice Payment Gateway | 75 | 3 | 30 | 2k+ | | | Nonce verification recommended |
| #6507 | jQuery Lightbox For Native Galleries | 73 | 26 | 7 | 4k+ | | | Text Domain Mismatch |
| #6508 | LearnPress – bbPress Integration | 53 | 19 | 14 | 2k+ | | | Output is not escaped |
| #6509 | Listamester | 35 | 17 | 16 | 600 | | | Output is not escaped |
| #6510 | Media Slider for Photos Images Videos | 69 | 10 | 23 | 2k+ | | | Missing Version |
| #6511 | Reorder Posts – Quick Post Type and Page Ordering | 61 | 10 | 23 | 10k+ | | | Request data is not unslashed |
| #6512 | No External Links | 85 | 7 | 26 | 5k+ | | | Database parameter is not escaped |
| #6513 | Missed Scheduled Posts Publisher by WPBeginner | 63 | 16 | 17 | 30k+ | | | Text Domain Mismatch |
| #6514 | MotoPress Hotel Booking for Divi | 95 | 22 | 11 | 1k+ | | | Missing direct file access protection |
| #6515 | Email Marketing for WooCommerce by Omnisend | 35 | 12 | 21 | 40k+ | | | Non-prefixed function |
| #6516 | Plugins Condition | 96 | 3 | 30 | 1k+ | | | Non-prefixed global variable |
| #6517 | Post Type Converter | 53 | 5 | 28 | 1k+ | | | Nonce verification recommended |
| #6518 | ProveSource Social Proof | 96 | 26 | 7 | 2k+ | | | wp function not compatible with requires wp |
| #6519 | Real-Time Find and Replace | 57 | 23 | 10 | 70k+ | | | Output is not escaped |
| #6520 | reCAPTCHA for bbPress | 75 | 14 | 19 | 700 | | | Non-prefixed function |
| #6521 | Remove Featured Image | 61 | 21 | 12 | 1k+ | | | Missing Arg Domain |
| #6522 | Remove Taxonomy URL | 73 | 17 | 16 | 1k+ | | | Output is not escaped |
| #6523 | Reusable Gutenberg Blocks Widget | 68 | 24 | 9 | 500 | | | Output is not escaped |
| #6524 | SEO Image Toolbox | 62 | 19 | 14 | 1k+ | | | Output is not escaped |
| #6525 | Server-Side Cache AutoPurge | 73 | 16 | 17 | 10k+ | | | Text Domain Mismatch |
| #6526 | SF Author Url Control | 68 | 29 | 4 | 1k+ | | | Output is not escaped |
| #6527 | Show-Hide / Collapse-Expand | 70 | 18 | 15 | 10k+ | | | Missing direct file access protection |
| #6528 | Sight – Professional Image Gallery and Portfolio | 97 | 30 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #6529 | Simple Google Analytics Tag Manager | 99 | 33 | 0 | 1k+ | | | Non Singular String Literal Domain |
| #6530 | Simple MyISAM to InnoDB | 49 | 11 | 22 | 1k+ | | | Output is not escaped |
| #6531 | SocketLabs | 65 | 15 | 18 | 900 | | | Output is not escaped |
| #6532 | Specify Missing Image Dimensions | 45 | 21 | 12 | 1k+ | | | Unsafe printing function |
| #6533 | Sticky Content – Make Any Section Sticky on Scroll | 82 | 24 | 9 | 400 | | | Text Domain Mismatch |
| #6534 | Storefront Top Bar | 77 | 20 | 13 | 2k+ | | | Non-prefixed hook name |
| #6535 | Custom Post Template By Templatic | 52 | 19 | 14 | 600 | | | Text Domain Mismatch |
| #6536 | Today's Date Inserter | 70 | 32 | 1 | 700 | | | Output is not escaped |
| #6537 | Tooltip for Gravity Forms | 96 | 23 | 10 | 900 | | | Text Domain Mismatch |
| #6538 | Userback | 47 | 13 | 20 | 2k+ | | | Output is not escaped |
| #6539 | Users by Date Registered | 49 | 13 | 20 | 1k+ | | | Nonce verification recommended |
| #6540 | VWE – Voorheen Autodealers.nl | 69 | 23 | 10 | 500 | | | curl curl setopt |
| #6541 | Thank You Page for WooCommerce | 68 | 6 | 27 | 10k+ | | | Non-prefixed global variable |
| #6542 | WC Variations Radio Buttons | 69 | 12 | 21 | 3k+ | | | Non-prefixed global variable |
| #6543 | Wompi Portal de Pagos | 86 | 23 | 10 | 5k+ | | | wp function not compatible with requires wp |
| #6544 | Export Orders for WooCommerce – CSV, Excel, XML, JSON & PDF Export | 85 | 24 | 9 | 400 | | | wp function not compatible with requires wp |
| #6545 | Sequential Order Numbers for WooCommerce | 57 | 9 | 24 | 10k+ | | | Interpolated SQL is not prepared |
| #6546 | WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics) | 69 | 9 | 24 | 700 | | | Non-prefixed constant |
| #6547 | Solid Mail – SMTP email and logging made by SolidWP | 68 | 16 | 17 | 60k+ | | | Database parameter is not escaped |
| #6548 | WP101 Video Tutorial Plugin | 86 | 15 | 18 | 10k+ | | | Missing direct file access protection |
| #6549 | Zion Builder – Website Builder for Speed & Creativity | 74 | 4 | 29 | 1k+ | | | Non-prefixed hook name |
| #6550 | ACF Options For Polylang | 94 | 9 | 23 | 10k+ | | | Non-prefixed constant |