| #4901 | Revisionize | 41 | 54 | 24 | 4k+ | | | Output is not escaped |
| #4902 | Safety Exit | 58 | 52 | 26 | 1k+ | | | Text Domain Mismatch |
| #4903 | Taxonomy Converter | 41 | 54 | 24 | 600 | | | Output is not escaped |
| #4904 | Visibility Control for LearnDash | 40 | 55 | 23 | 1k+ | | | Missing Arg Domain |
| #4905 | Visual Editor Custom Buttons | 40 | 30 | 48 | 4k+ | | | Output is not escaped |
| #4906 | Smart COD for WooCommerce | 39 | 50 | 28 | 30k+ | | | Output is not escaped |
| #4907 | WP Ajax Load More Pagination and Infinite Scroll | 40 | 63 | 15 | 400 | | | Output is not escaped |
| #4908 | Media Library Categories | 40 | 29 | 49 | 20k+ | | | Output is not escaped |
| #4909 | WPUpper Share Buttons | 86 | 4 | 74 | 4k+ | | | Dynamic hook name |
| #4910 | XPS Ship Integration | 91 | 58 | 20 | 1k+ | | | Text Domain Mismatch |
| #4911 | Advanced Custom Order Status for WooCommerce | 55 | 44 | 33 | 500 | | | Text Domain Mismatch |
| #4912 | AWEOS WP Lock | 39 | 24 | 53 | 400 | | | Output is not escaped |
| #4913 | Feeds for TikTok – Display Video Feeds in Grid Layouts | 51 | 18 | 59 | 1k+ | | | Request data is not unslashed |
| #4914 | Bricksable for Bricks Builder | 80 | 1 | 76 | 10k+ | | | Post Not In exclude |
| #4915 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #4916 | Change Login Page Logo | 57 | 69 | 8 | 1k+ | | | Output is not escaped |
| #4917 | country-redirect | 38 | 58 | 19 | 400 | | | Text Domain Mismatch |
| #4918 | Custom 404 Pro | 35 | 50 | 27 | 7k+ | | | wp function not compatible with requires wp |
| #4919 | Debug Log Manager – Conveniently Monitor and Inspect Errors | 66 | 33 | 44 | 10k+ | | | Input is not validated |
| #4920 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #4921 | 301 Redirects – Redirect Manager | 88 | 6 | 71 | 300k+ | | | Non-prefixed global variable |
| #4922 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions | 95 | 17 | 60 | 7k+ | | | Non-prefixed hook name |
| #4923 | Mailster AmazonSES Integration | 60 | 52 | 25 | 1k+ | | | Missing Arg Domain |
| #4924 | MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall | 82 | 55 | 22 | 200k+ | | | Missing direct file access protection |
| #4925 | Prepare New Version | 42 | 53 | 24 | 6k+ | | | Output is not escaped |
| #4926 | Real Category Management: Content Management in Category Folders | 79 | 4 | 73 | 2k+ | | | Non-prefixed constant |
| #4927 | Like This | 38 | 60 | 17 | 1k+ | | | Output is not escaped |
| #4928 | Snow Monkey Forms | 91 | 36 | 41 | 30k+ | | | Non-prefixed global variable |
| #4929 | Text Domain Inspector | 61 | 41 | 36 | 400 | | | Non-prefixed global variable |
| #4930 | WPVibe – MCP Server for WordPress. Connect Claude, ChatGPT, Gemini & Cursor | 52 | 19 | 58 | 4k+ | | | Interpolated SQL is not prepared |
| #4931 | Payment Integration Wompi – El Salvador | 55 | 50 | 27 | 800 | | | Text Domain Mismatch |
| #4932 | WP Calorie Calculator | 70 | 22 | 55 | 1k+ | | | Non-prefixed global variable |
| #4933 | Spam Protect for Contact Form 7 | 41 | 16 | 61 | 10k+ | | | Request data is not unslashed |
| #4934 | WP Last Modified Info | 79 | 45 | 32 | 40k+ | | | Short PHP open tag found |
| #4935 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | | Request data is not unslashed |
| #4936 | authLdap | 37 | 46 | 30 | 4k+ | | | Exception output is not escaped |
| #4937 | Bangladeshi Payment Gateways – Make Payment Using QR Code | 40 | 40 | 36 | 5k+ | | | Output is not escaped |
| #4938 | Bulk Delete Comments | 41 | 15 | 61 | 5k+ | | | Direct Query |
| #4939 | Button Generator – Easily Create Custom Buttons with Icons and Analytics | 96 | 8 | 68 | 5k+ | | | Non-prefixed global variable |
| #4940 | Quick Buy Now Button for WooCommerce | 55 | 37 | 39 | 5k+ | | | Output is not escaped |
| #4941 | Gravity Forms ConvertKit Add-On | 95 | 65 | 11 | 700 | | | Text Domain Mismatch |
| #4942 | Current Year, Symbols and IP Shortcode | 96 | 76 | 0 | 10k+ | | | wp function not compatible with requires wp |
| #4943 | Custom Taxonomy Order | 42 | 20 | 56 | 50k+ | | | Output is not escaped |
| #4944 | GA Google Analytics – Connect Google Analytics to WordPress | 42 | 46 | 30 | 400k+ | | | Output is not escaped |
| #4945 | GD bbPress Tools | 43 | 15 | 61 | 1k+ | | | Input is not sanitized |
| #4946 | Magic Login – Passwordless Authentication for WordPress – Login Without Password | 35 | 23 | 53 | 3k+ | | | Missing nonce verification |
| #4947 | Mystery Themes Demo Importer | 95 | | 76 | 7k+ | | | Non-prefixed global variable |
| #4948 | Elements For Elementor | 74 | 39 | 37 | 10k+ | | | Non-prefixed global variable |
| #4949 | PDF Catalog for WooCommerce | 38 | 30 | 46 | 1k+ | | | Nonce verification recommended |
| #4950 | PuSHPress | 42 | 11 | 65 | 20k+ | | | Missing nonce verification |