| #6651 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #6652 | Team Members | 96 | 15 | 16 | 20k+ | | | Missing direct file access protection |
| #6653 | ThemeinWP Import Companion | 56 | 17 | 14 | 4k+ | | | Unsafe printing function |
| #6654 | Themify Audio Dock | 35 | 22 | 9 | 900 | | | Non-prefixed global variable |
| #6655 | Themx Maximum Upload File Size | Increase Maximum Upload File Size | 93 | 17 | 14 | 1k+ | | | Text Domain Mismatch |
| #6656 | Typing Text | 81 | 15 | 16 | 600 | | | file system operations mkdir |
| #6657 | Custom Product tabs for WooCommerce | 96 | 25 | 6 | 10k+ | | | wp function not compatible with requires wp |
| #6658 | WCBoost – Wishlist | 97 | 2 | 29 | 50k+ | | | Non-prefixed global variable |
| #6659 | When Last Login – Export User Records | 61 | 18 | 13 | 500 | | | Output is not escaped |
| #6660 | which template file | 52 | 19 | 12 | 4k+ | | | Output is not escaped |
| #6661 | Display Eventbrite Events | 96 | | 31 | 3k+ | | | error log print r |
| #6662 | Price Per Unit for WooCommerce | 98 | 1 | 30 | 1k+ | | | Non-prefixed global variable |
| #6663 | Satispay for WooCommerce | 62 | 19 | 12 | 7k+ | | | Exception output is not escaped |
| #6664 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | | | Exception output is not escaped |
| #6665 | WooCommerce Product Fees | 62 | 6 | 25 | 2k+ | | | Missing nonce verification |
| #6666 | WP Approve User | 95 | 20 | 11 | 3k+ | | | Text Domain Mismatch |
| #6667 | WP Max Submit Protect | 65 | 19 | 12 | 400 | | | Output is not escaped |
| #6668 | WP Instant Feeds | 35 | 19 | 12 | 6k+ | | | Output is not escaped |
| #6669 | RSS Feed Retriever | 61 | 23 | 8 | 7k+ | | | wp function not compatible with requires wp |
| #6670 | WP Sanitize Accented Uploads | 68 | 15 | 16 | 800 | | | Quoted Simple Placeholder |
| #6671 | WP Theme Changelogs | 68 | 13 | 18 | 900 | | | Nonce verification recommended |
| #6672 | WP YouTube Player | 61 | 14 | 17 | 1k+ | | | Output is not escaped |
| #6673 | WP Telegram Widget and Join Link | 95 | 13 | 18 | 4k+ | | | Missing direct file access protection |
| #6674 | ACF Enhanced Message Field | 71 | 29 | 1 | 600 | | | Text Domain Mismatch |
| #6675 | Address Geocoder | 51 | 12 | 18 | 500 | | | Output is not escaped |
| #6676 | CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress | 35 | 20 | 10 | 100k+ | | | Missing Arg Domain |
| #6677 | Animated Text Block – Add Typing and Looping Text Effects | 78 | 5 | 25 | 4k+ | | | Non-prefixed class |
| #6678 | Web Accessibility Toolkit – Accessibility Checker & ARIA for WCAG, Section 508 & ADA Compliance | 58 | 9 | 21 | 500 | | | Output is not escaped |
| #6679 | Cache-Control | 57 | 26 | 4 | 1k+ | | | Output is not escaped |
| #6680 | Catch Breadcrumb | 86 | 1 | 29 | 2k+ | | | Non-prefixed global variable |
| #6681 | Click to top | 72 | 22 | 8 | 2k+ | | | Output is not escaped |
| #6682 | CoolClock – a Javascript Analog Clock | 79 | 21 | 9 | 2k+ | | | Output is not escaped |
| #6683 | Custom Header Extended | 48 | 19 | 11 | 1k+ | | | Unsafe printing function |
| #6684 | Custom Login Page Templates – Change Logo, Background and CSS | 66 | 25 | 5 | 2k+ | | | Missing Arg Domain |
| #6685 | Custom Site Logo | 62 | 26 | 4 | 1k+ | | | Unsafe printing function |
| #6686 | Interlinks Manager – Internal Links Optimizer | 80 | 17 | 13 | 7k+ | | | Database parameter is not escaped |
| #6687 | Custom Post Carousels with Owl | 95 | 3 | 27 | 2k+ | | | Non-prefixed hook name |
| #6688 | Drag and Drop File Upload for Elementor Forms | 94 | 29 | 1 | 1k+ | | | curl curl setopt |
| #6689 | Drip – Marketing Automation for WooCommerce | 97 | 23 | 7 | 1k+ | | | Non Singular String Literal Domain |
| #6690 | Easy Media Replace | 67 | 16 | 14 | 1k+ | | | Output is not escaped |
| #6691 | Easy Digital Downloads Featured Downloads | 56 | 15 | 15 | 1k+ | | | Output is not escaped |
| #6692 | Flying Analytics: Self-Host Google Analytics v4 with Speed Optimization | 35 | 17 | 13 | 4k+ | | | Missing direct file access protection |
| #6693 | Fr Multi Bank Transfer Payment Gateways for WooCommerce | 89 | 28 | 2 | 2k+ | | | Text Domain Mismatch |
| #6694 | Genesis Columns Advanced | 55 | 26 | 4 | 10k+ | | | Unsafe printing function |
| #6695 | Image Captcha For Gravity Forms | 80 | 20 | 10 | 400 | | | Text Domain Mismatch |
| #6696 | WP All Import – Import SEO Settings for All In One SEO | 65 | 19 | 11 | 900 | | | Output is not escaped |
| #6697 | 简数采集器 | 69 | 5 | 25 | 1k+ | | | Request data is not unslashed |
| #6698 | Lazy Loader | 59 | 6 | 24 | 9k+ | | | Nonce verification recommended |
| #6699 | LINE Auto Post | 45 | 19 | 11 | 500 | | | Heredoc Output Not Escaped |
| #6700 | Market Exporter | 93 | 10 | 20 | 1k+ | | | Non-prefixed hook name |