| #6901 | Ocean Posts Slider | 76 | 13 | 14 | 10k+ | | | Output is not escaped |
| #6902 | Ocean Product Sharing | 86 | 9 | 18 | 20k+ | | | Non-prefixed global variable |
| #6903 | Shipping Notices and No shipping options found info for WooCommerce | 70 | 9 | 18 | 400 | | | Non-prefixed global variable |
| #6904 | Order Status Control for WooCommerce | 90 | 23 | 4 | 5k+ | | | Text Domain Mismatch |
| #6905 | Pageviews | 64 | 15 | 12 | 1k+ | | | Missing Translators Comment |
| #6906 | Parallax Slider Block | 82 | 15 | 12 | 900 | | | file system operations mkdir |
| #6907 | PJ News Ticker | 75 | 13 | 14 | 3k+ | | | Output is not escaped |
| #6908 | Post Editor Buttons Fork | 54 | 24 | 3 | 800 | | | Unsafe printing function |
| #6909 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #6910 | Protection Against DDoS | 68 | 22 | 5 | 3k+ | | | Output is not escaped |
| #6911 | Flutterwave WooCommerce | 35 | 7 | 20 | 2k+ | | | Non-prefixed class |
| #6912 | Read More Excerpt Link | 65 | 19 | 8 | 3k+ | | | Output is not escaped |
| #6913 | Reading progressbar | 65 | 25 | 2 | 6k+ | | | Output is not escaped |
| #6914 | Logos Reftagger | 75 | 12 | 15 | 10k+ | | | Deprecated parameter: add_option parameter 3 |
| #6915 | Share on Mastodon | 96 | 24 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #6916 | Shoutcast Icecast HTML5 Radio Player | 67 | 17 | 10 | 1k+ | | | Input is not validated |
| #6917 | Slide-out Menu – Mobile Friendly modern navigation | 87 | 5 | 22 | 500 | | | Non-prefixed global variable |
| #6918 | Image Slider Block | 82 | 13 | 14 | 3k+ | | | wp function not compatible with requires wp |
| #6919 | Sticky Menu & Sticky Header | 97 | 4 | 23 | 100k+ | | | Non-prefixed global variable |
| #6920 | Suffice Toolkit | 98 | 2 | 25 | 1k+ | | | Non-prefixed class |
| #6921 | Super Cool Ad Inserter Plugin | 35 | 22 | 5 | 600 | | | Text Domain Mismatch |
| #6922 | Timeline Block – Beautiful Timeline Builder | 99 | 26 | 1 | 3k+ | | | Text Domain Mismatch |
| #6923 | Timeline Module for Divi | 84 | 16 | 11 | 3k+ | | | Text Domain Mismatch |
| #6924 | Ultimate Member Custom Tab Builder Lite | 72 | 12 | 15 | 500 | | | Output is not escaped |
| #6925 | User Location and IP | 70 | 2 | 25 | 400 | | | Input is not sanitized |
| #6926 | WC Duplicate Order | 54 | 12 | 15 | 500 | | | Nonce verification recommended |
| #6927 | Custom Fee Woocommerce | 97 | 24 | 3 | 400 | | | Text Domain Mismatch |
| #6928 | WP Simple Mail Sender | 78 | 21 | 6 | 3k+ | | | Non Singular String Literal Domain |
| #6929 | Wp Theme plugin Download | 62 | 11 | 16 | 2k+ | | | Output is not escaped |
| #6930 | WP Updates Notifier | 35 | 23 | 4 | 30k+ | | | Missing Translators Comment |
| #6931 | WP-UTF8-Excerpt | 61 | 17 | 10 | 700 | | | Unsafe printing function |
| #6932 | WPC Show Single Variations for WooCommerce | 77 | 1 | 26 | 1k+ | | | Nonce verification recommended |
| #6933 | WPS HTML Blocks | 91 | 23 | 4 | 1k+ | | | Text Domain Mismatch |
| #6934 | Web Accessibility by accessiBe | 72 | 1 | 25 | 10k+ | | | Input is not sanitized |
| #6935 | ACF Content Analysis for Yoast SEO | 35 | 9 | 17 | 100k+ | | | Non-prefixed constant |
| #6936 | ACF: Rus-To-Lat | 66 | 15 | 11 | 2k+ | | | Output is not escaped |
| #6937 | Add Follow Button For Pintrest | 91 | 21 | 5 | 400 | | | Non Singular String Literal Domain |
| #6938 | Amedea – Unique Design Elements for Elementor | 89 | 1 | 25 | 500 | | | Mixed line endings |
| #6939 | Animentor – Lottie & Bodymovin for Elementor | 70 | 18 | 8 | 4k+ | | | Output is not escaped |
| #6940 | atec Cache Info | 89 | 24 | 2 | 1k+ | | | wp function not compatible with requires wp |
| #6941 | Automatic Featured Images from Videos | 63 | 13 | 13 | 7k+ | | | Missing direct file access protection |
| #6942 | Bulk Page Creator | 62 | 9 | 17 | 10k+ | | | Request data is not unslashed |
| #6943 | Calculation For Contact Form 7 | 74 | 21 | 5 | 1k+ | | | Text Domain Mismatch |
| #6944 | CoCart – Headless REST API for WooCommerce | 99 | | 26 | 1k+ | | | Non-prefixed global variable |
| #6945 | Classic Text Widget | 63 | 25 | 1 | 2k+ | | | Output is not escaped |
| #6946 | Coinbase Commerce Payment Gateway for WooCommerce | 94 | 21 | 5 | 4k+ | | | Missing Arg Domain |
| #6947 | Contact Form 7 Leads Tracking | 72 | 3 | 23 | 600 | | | Input is not sanitized |
| #6948 | Custom Global Variables | 65 | 14 | 12 | 5k+ | | | Output is not escaped |
| #6949 | Disable Theme and Plugin Auto-Update Emails | 79 | 21 | 5 | 10k+ | | | Text Domain Mismatch |
| #6950 | EDD Hide Download | 65 | 13 | 13 | 600 | | | Output is not escaped |