| #5601 | Simple Mortgage Calculator | 43 | 67 | 3 | 1k+ | | | Text Domain Mismatch |
| #5602 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #5603 | Currency Converter Calculator | 100 | | 0 | 1k+ | | | No open findings |
| #5604 | Current Year Shortcodes | 97 | 11 | 1 | 1k+ | | | date date |
| #5605 | Custom 404 Error Page | 82 | 12 | 3 | 1k+ | | | Text Domain Mismatch |
| #5606 | Custom Alt Text for Elementor Images | 97 | 8 | 2 | 1k+ | | | Text Domain Mismatch |
| #5607 | Custom API for WP | 59 | 173 | 16 | 1k+ | | | wp function not compatible with requires wp |
| #5608 | Custom Background Changer | 47 | 44 | 14 | 1k+ | | | Non Singular String Literal Domain |
| #5609 | Custom Block Patterns | 99 | 5 | 2 | 1k+ | | | Text Domain Mismatch |
| #5610 | Custom Color Palette for Gutenberg | 98 | 2 | 4 | 1k+ | | | Discouraged text-domain loading |
| #5611 | Custom Content Width | 86 | 8 | 0 | 1k+ | | | Text Domain Mismatch |
| #5612 | Custom CSS | 24 | 703 | 657 | 1k+ | | | Output is not escaped |
| #5613 | Custom CSS Manager | 37 | 55 | 20 | 1k+ | | | Output is not escaped |
| #5614 | Custom Currency Symbol for WooCommerce | 97 | 7 | 2 | 1k+ | | | Text Domain Mismatch |
| #5615 | Custom Cursor For WP | 77 | 10 | 7 | 1k+ | | | Setting is missing a sanitization callback |
| #5616 | Custom Datepicker NMR | 73 | 4 | 12 | 1k+ | | | Missing Version |
| #5617 | Custom Feed for TikTok – Social Post Feed Plugin for TikTok | 99 | | 3 | 1k+ | | | Non-prefixed class |
| #5618 | Custom Fields for Gutenberg | 42 | 24 | 24 | 1k+ | | | Output is not escaped |
| #5619 | Custom Header Extended | 48 | 19 | 11 | 1k+ | | | Unsafe printing function |
| #5620 | Custom Link Widget | 67 | 28 | 0 | 1k+ | | | Output is not escaped |
| #5621 | Custom Login URL | 69 | 16 | 17 | 1k+ | | | Missing Arg Domain |
| #5622 | Custom Post Type Cleanup | 41 | 70 | 12 | 1k+ | | | Output is not escaped |
| #5623 | Custom Post Type Rewrite | 99 | 1 | 1 | 1k+ | | | plugin header nonexistent domain path |
| #5624 | Custom Product Tabs for WooCommerce WP All Import Add-on | 65 | 18 | 18 | 1k+ | | | Non-prefixed global variable |
| #5625 | Custom Recent Posts Widget | 41 | 63 | 4 | 1k+ | | | Output is not escaped |
| #5626 | Custom Sidebars by ProteusThemes | 62 | 17 | 23 | 1k+ | | | Missing nonce verification |
| #5627 | Custom Site Logo | 62 | 26 | 4 | 1k+ | | | Unsafe printing function |
| #5628 | Custom Template for LearnDash | 76 | 7 | 9 | 1k+ | | | Non-prefixed hook name |
| #5629 | Add Featured Image Custom Link | 89 | 3 | 6 | 1k+ | | | Request data is not unslashed |
| #5630 | Customize My Account Page | 35 | 4 | 10 | 1k+ | | | Dynamic hook name |
| #5631 | Customize Posts | 38 | 31 | 77 | 1k+ | | | Non-prefixed hook name |
| #5632 | Style Contact Form 7 | 100 | | 1 | 1k+ | | | Discouraged text-domain loading |
| #5633 | Login Page Customizer – Customize Login Screen & Branding | 38 | 36 | 172 | 1k+ | | | Non-prefixed function |
| #5634 | Customizer Reset – Export & Import | 88 | 6 | 9 | 1k+ | | | wp function not compatible with requires wp |
| #5635 | WebDefender Security – Protection & AntiSpam | 70 | 176 | 61 | 1k+ | | | wp function not compatible with requires wp |
| #5636 | CWW Companion | 23 | 307 | 223 | 1k+ | | | Output is not escaped |
| #5637 | Autolinks Manager – SEO Auto Linker | 87 | 7 | 16 | 1k+ | | | Database parameter is not escaped |
| #5638 | Daily Prayer Time | 21 | 947 | 1,780 | 1k+ | | | Non-prefixed global variable |
| #5639 | Daisy Comments — Disable Comments & Stop Spam | 95 | 1 | 3 | 1k+ | | | Non-prefixed class |
| #5640 | Dam Spam | 100 | | 1 | 1k+ | | | unexpected markdown file |
| #5641 | Markdown Editor (Formerly Dark Mode) | 97 | 2 | 19 | 1k+ | | | Non-prefixed function |
| #5642 | Known Agents – Track AI Bots and Crawlers, Block Scrapers, Analyze LLM Referral Traffic | 57 | 37 | 12 | 1k+ | | | Setting is missing a sanitization callback |
| #5643 | Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin | 28 | 639 | 85 | 1k+ | | | Text Domain Mismatch |
| #5644 | DarkMySite – Advanced Dark Mode Plugin for WordPress | 46 | 22 | 100 | 1k+ | | | Request data is not unslashed |
| #5645 | Dashboard Columns | 98 | 2 | 6 | 1k+ | | | Non-prefixed function |
| #5646 | Dashboard To-Do List | 50 | 21 | 8 | 1k+ | | | Unsafe printing function |
| #5647 | Database Collation Fix | 36 | 50 | 32 | 1k+ | | | Output is not escaped |
| #5648 | Date counter | 95 | 12 | 2 | 1k+ | | | Missing direct file access protection |
| #5649 | Date Time Picker for WPForms | 96 | 7 | 4 | 1k+ | | | Text Domain Mismatch |
| #5650 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |