| #5151 | QR code MeCard/vCard generator | 40 | 322 | 21 | 2k+ | | | Unsafe printing function |
| #5152 | Thumbnail carousel slider | 34 | 277 | 143 | 2k+ | | | Output is not escaped |
| #5153 | WP-RTL | 97 | 4 | 5 | 2k+ | | | trademarked term |
| #5154 | WP Safe Mode | 38 | 95 | 55 | 2k+ | | | Output is not escaped |
| #5155 | WP Scraper | 98 | 2 | 4 | 2k+ | | | trademarked term |
| #5156 | WP Session Manager | 91 | 5 | 16 | 2k+ | | | Direct Query |
| #5157 | Social Share Buttons & Analytics Plugin – GetSocial.io | 40 | 97 | 25 | 2k+ | | | Output is not escaped |
| #5158 | External Store for Shopify | 38 | 97 | 33 | 2k+ | | | Output is not escaped |
| #5159 | WP Spam Question Filter | 35 | 63 | 30 | 2k+ | | | Output is not escaped |
| #5160 | Special Text Boxes | 37 | 38 | 42 | 2k+ | | | Direct Query |
| #5161 | WP Spell Check | 25 | | 4,425 | 2k+ | | | Direct Query |
| #5162 | WP-Stats | 32 | 237 | 126 | 2k+ | | | Output is not escaped |
| #5163 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #5164 | WP Super Edit | 36 | 35 | 185 | 2k+ | | | Nonce verification recommended |
| #5165 | WP Term Images | 66 | 4 | 18 | 2k+ | | | Nonce verification recommended |
| #5166 | Wp Theme plugin Download | 62 | 11 | 16 | 2k+ | | | Output is not escaped |
| #5167 | Divi Gravity Forms (WP Tools) | 23 | 579 | 1,311 | 2k+ | | | Non-prefixed global variable |
| #5168 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | | Non-prefixed global variable |
| #5169 | WP Twitter Feeds | 34 | 202 | 82 | 2k+ | | | Output is not escaped |
| #5170 | WP Upload Restriction | 86 | 59 | 16 | 2k+ | | | Text Domain Mismatch |
| #5171 | WP Upload Size | 77 | 6 | 14 | 2k+ | | | Non-prefixed function |
| #5172 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #5173 | WP-Yomigana | 35 | 17 | 15 | 2k+ | | | Output is not escaped |
| #5174 | WPBase Cache | 27 | 189 | 113 | 2k+ | | | Text Domain Mismatch |
| #5175 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | | | Non-prefixed global variable |
| #5176 | WPC Badge Management for WooCommerce | 35 | 13 | 81 | 2k+ | | | Missing nonce verification |
| #5177 | WPC Product Quantity for WooCommerce | 94 | | 32 | 2k+ | | | Non-prefixed global variable |
| #5178 | WPC Product Size Chart for WooCommerce | 97 | | 19 | 2k+ | | | Non-prefixed class |
| #5179 | WPC Sticky Add To Cart for WooCommerce | 98 | | 17 | 2k+ | | | Non-prefixed class |
| #5180 | Migrate to WordPress.com | 62 | 15 | 28 | 2k+ | | | Output is not escaped |
| #5181 | WP Directory Kit | 19 | 1,526 | 2,621 | 2k+ | | | Non-prefixed global variable |
| #5182 | WP Views Counter | 35 | 81 | 42 | 2k+ | | | Output is not escaped |
| #5183 | WPGlobus for WPBakery Visual Composer | 95 | 4 | 7 | 2k+ | | | trademarked term |
| #5184 | WPGSI: Spreadsheet Integration | 24 | 784 | 1,587 | 2k+ | | | Non-prefixed global variable |
| #5185 | WPJM Extra Fields | 88 | 5 | 5 | 2k+ | | | trademarked term |
| #5186 | wpLingua – Automatic translation – Translate and make website multilingual | 35 | 79 | 167 | 2k+ | | | Nonce verification recommended |
| #5187 | Photo Engine (Media Organizer & Lightroom) | 23 | 252 | 650 | 2k+ | | | Direct Query |
| #5188 | DietPress | 100 | | 1 | 2k+ | | | trademarked term |
| #5189 | WPOrLogin – Custom Login, Social Login, Limit Attempts, Hide Login & reCAPTCHA | 30 | 484 | 222 | 2k+ | | | Unsafe printing function |
| #5190 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #5191 | WP Synchro – The Ultimate WordPress Migration Tool | 28 | 243 | 244 | 2k+ | | | Missing Translators Comment |
| #5192 | WRC Pricing Tables – Responsive CSS3 Pricing Tables | 50 | 5 | 96 | 2k+ | | | Missing nonce verification |
| #5193 | WS Action Scheduler Cleaner | 48 | 13 | 80 | 2k+ | | | error log error log |
| #5194 | XML Sitemaps | 33 | 65 | 62 | 2k+ | | | Output is not escaped |
| #5195 | Yaad Sarig Payment Gateway For WC | 30 | 158 | 271 | 2k+ | | | Nonce verification recommended |
| #5196 | Yada Wiki | 37 | 207 | 45 | 2k+ | | | Text Domain Mismatch |
| #5197 | Yes/No Chart | 35 | 136 | 139 | 2k+ | | | Unsafe printing function |
| #5198 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #5199 | Yotpo: Product & Photo Reviews for WooCommerce | 35 | 24 | 189 | 2k+ | | | Non-prefixed function |
| #5200 | Playlist Player for YouTube | 99 | 3 | 1 | 2k+ | | | Missing direct file access protection |
