| #6951 | WP-CORS | 61 | 7 | 23 | 1k+ | | | error log error log |
| #6952 | Countdown Block | 35 | 5 | 2 | 1k+ | | | Hidden files included |
| #6953 | WP Counter Up – Animated Number Counter & Milestone Showcase | 51 | 18 | 239 | 1k+ | | | Non-prefixed global variable |
| #6954 | WP CountUP JS | 87 | 3 | 3 | 1k+ | | | trademarked term |
| #6955 | WP Coupons and Deals – WordPress Coupon Plugin | 25 | 914 | 1,460 | 1k+ | | | Non-prefixed global variable |
| #6956 | WP Create Multiple Posts & Pages | 99 | | 11 | 1k+ | | | Non-prefixed global variable |
| #6957 | WP-Cron Control | 37 | 54 | 22 | 1k+ | | | Output is not escaped |
| #6958 | WP Cron HTTP Auth | 74 | 12 | 7 | 1k+ | | | Output is not escaped |
| #6959 | WP Disable Site Health | 93 | 4 | 4 | 1k+ | | | trademarked term |
| #6960 | WP Discourse | 24 | 103 | 114 | 1k+ | | | Nonce verification recommended |
| #6961 | WP Docs | 30 | 268 | 271 | 1k+ | | | Output is not escaped |
| #6962 | WP-DraftsForFriends | 38 | 141 | 71 | 1k+ | | | Output is not escaped |
| #6963 | WP Dynamic Keywords Injector | 34 | 44 | 205 | 1k+ | | | Nonce verification recommended |
| #6964 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 910 | 1,835 | 1k+ | | | Non-prefixed global variable |
| #6965 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #6966 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #6967 | WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 30 | 113 | 419 | 1k+ | | | Non-prefixed global variable |
| #6968 | WP Events Manager WooCommerce | 81 | 20 | 10 | 1k+ | | | Text Domain Mismatch |
| #6969 | Ever Accounting – Accounting & Invoicing Solution for Small Businesses | 68 | 69 | 661 | 1k+ | | | Non-prefixed hook name |
| #6970 | Export WordPress Menus | 69 | 94 | 22 | 1k+ | | | wp function not compatible with requires wp |
| #6971 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #6972 | WP fancybox | 86 | 7 | 8 | 1k+ | | | Output is not escaped |
| #6973 | Album Photostream Flickr Gallery | 77 | 30 | 31 | 1k+ | | | Text Domain Mismatch |
| #6974 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | | | Non-prefixed global variable |
| #6975 | FundEngine – Donation and Crowdfunding Platform | 37 | 89 | 9 | 1k+ | | | Exception output is not escaped |
| #6976 | WP Gmail SMTP | 39 | 99 | 50 | 1k+ | | | Text Domain Mismatch |
| #6977 | WP Faster | 78 | 7 | 12 | 1k+ | | | trademarked term |
| #6978 | WP Healthcheck | 58 | 37 | 73 | 1k+ | | | Non-prefixed global variable |
| #6979 | WP Helper Premium | 24 | 3,909 | 1,517 | 1k+ | | | Text Domain Mismatch |
| #6980 | WP Hooks Finder | 52 | 27 | 31 | 1k+ | | | Output is not escaped |
| #6981 | WP Hotel Booking WooCommerce | 36 | 93 | 99 | 1k+ | | | Output is not escaped |
| #6982 | WP-HTML-Compression | 75 | 7 | 22 | 1k+ | | | Input is not sanitized |
| #6983 | WP Hydra | 35 | 10 | 18 | 1k+ | | | Input is not sanitized |
| #6984 | WP Insert Code | 88 | 6 | 4 | 1k+ | | | trademarked term |
| #6985 | WP Inventory Manager | 30 | 856 | 233 | 1k+ | | | Output is not escaped |
| #6986 | JAMstack Deployments | 67 | 33 | 3 | 1k+ | | | Short PHP open tag found |
| #6987 | Test jQuery Updates | 76 | 10 | 3 | 1k+ | | | Unsafe printing function |
| #6988 | WP Mapbox GL JS Maps | 28 | 104 | 119 | 1k+ | | | Output is not escaped |
| #6989 | MDTF – Meta Data and Taxonomies Filter | 16 | 1,550 | 1,956 | 1k+ | | | Non-prefixed global variable |
| #6990 | WP Modal Popup with Cookie Integration | 41 | 88 | 13 | 1k+ | | | Unsafe printing function |
| #6991 | wp-mpdf | 27 | 123 | 382 | 1k+ | | | Non-prefixed global variable |
| #6992 | WP MyLinks | 33 | 354 | 206 | 1k+ | | | Text Domain Mismatch |
| #6993 | WP Nav Plus | 40 | 95 | 13 | 1k+ | | | Output is not escaped |
| #6994 | WP Notification Center | 84 | 7 | 8 | 1k+ | | | Exception output is not escaped |
| #6995 | WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce | 61 | 22 | 74 | 1k+ | | | Non-prefixed global variable |
| #6996 | Override String Translations | 84 | 8 | 6 | 1k+ | | | Nonce verification recommended |
| #6997 | Parse.ly | 35 | 15 | 44 | 1k+ | | | Non-prefixed hook name |
| #6998 | WP PDF Generator | 84 | 21 | 22 | 1k+ | | | Request data is not unslashed |
| #6999 | WP Popup | 32 | 539 | 65 | 1k+ | | | Text Domain Mismatch |
| #7000 | WP Post Navigation | 54 | 14 | 23 | 1k+ | | | Output is not escaped |