| #5001 | Greenshift Smart Code AI | 86 | 9 | 9 | 1k+ | | | Request data is not unslashed |
| #5002 | ELEX WooCommerce Discount Per Payment Method | 69 | 60 | 39 | 1k+ | | | Text Domain Mismatch |
| #5003 | Admin Page Spider | 96 | 10 | 27 | 1k+ | | | Non-prefixed global variable |
| #5004 | Disable User Password Reset Admin Notifications | 87 | 6 | 2 | 1k+ | | | Nonce verification recommended |
| #5005 | Cleanup HTML | 96 | 4 | 3 | 1k+ | | | Missing Version |
| #5006 | Endora | 36 | 53 | 72 | 1k+ | | | Output is not escaped |
| #5007 | Ultra Companion – Companion plugin for WPoperation Themes | 34 | 73 | 116 | 1k+ | | | Missing direct file access protection |
| #5008 | WP Before After Image Slider – Interactive Image and Video Comparison Plugin for WordPress | 42 | 112 | 17 | 1k+ | | | Text Domain Mismatch |
| #5009 | Calculation For Contact Form 7 | 74 | 21 | 5 | 1k+ | | | Text Domain Mismatch |
| #5010 | Catalog Booster & Product Catalog Mode for WooCommerce | 37 | 106 | 168 | 1k+ | | | Non-prefixed function |
| #5011 | Airi Demo Importer | 98 | 1 | 7 | 1k+ | | | Deprecated function: get_page_by_title |
| #5012 | Supreme Google Webfonts | 77 | 12 | 7 | 1k+ | | | Text Domain Mismatch |
| #5013 | SMTP by BestWebSoft | 56 | 486 | 175 | 1k+ | | | Text Domain Mismatch |
| #5014 | WebPlus Gateway for LiqPay on WooCommerce | 87 | 45 | 5 | 1k+ | | | wp function not compatible with requires wp |
| #5015 | Countdown Block | 35 | 5 | 2 | 1k+ | | | Hidden files included |
| #5016 | Menubar | 39 | 171 | 46 | 1k+ | | | Output is not escaped |
| #5017 | Quform Zapier | 39 | 60 | 123 | 1k+ | | | Nonce verification recommended |
| #5018 | Simple Popup Plugin | 47 | 53 | 5 | 1k+ | | | Output is not escaped |
| #5019 | My Favorites | 41 | 35 | 34 | 1k+ | | | Output is not escaped |
| #5020 | Great Restaurant Menu WP | 81 | 89 | 100 | 1k+ | | | Text Domain Mismatch |
| #5021 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #5022 | Bullhorn Career Portal WordPress Plugin | 46 | 46 | 7 | 1k+ | | | Output is not escaped |
| #5023 | Sociality | 98 | 11 | 17 | 1k+ | | | Non-prefixed global variable |
| #5024 | Themes Artist Demo Importer | 97 | 75 | 6 | 1k+ | | | Text Domain Mismatch |
| #5025 | MarqueeAll – Elementor Marquee for Image, Text, Post Grid, Testimonial, Cryptocurrency & News Ticker 🌀 | 100 | | 0 | 1k+ | | | No open findings |
| #5026 | BEA – Sanitize Filename | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #5027 | WPC Share Cart for WooCommerce | 97 | | 32 | 1k+ | | | Non-prefixed hook name |
| #5028 | TW Pagination | 41 | 90 | 23 | 1k+ | | | Non Singular String Literal Domain |
| #5029 | TagPages | 76 | 13 | 4 | 1k+ | | | Missing Arg Domain |
| #5030 | Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin | 25 | 173 | 726 | 1k+ | | | Non-prefixed global variable |
| #5031 | Bop Search Box Item Type For Nav Menus | 41 | 52 | 14 | 1k+ | | | Output is not escaped |
| #5032 | Flexible Subscriptions | 35 | 46 | 249 | 1k+ | | | Non-prefixed global variable |
| #5033 | I Order Terms | 44 | 40 | 24 | 1k+ | | | Output is not escaped |
| #5034 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #5035 | History Timeline for Biography, Company History & Event Timeline | 78 | 29 | 37 | 1k+ | | | Non-prefixed global variable |
| #5036 | Permissions Editor for Ninja Forms | 35 | 29 | 6 | 1k+ | | | Output is not escaped |
| #5037 | 果果推送 | 37 | 31 | 56 | 1k+ | | | Nonce verification recommended |
| #5038 | Collapsed Archives | 41 | 54 | 4 | 1k+ | | | Output is not escaped |
| #5039 | Advanced Category and Custom Taxonomy Image | 100 | | 2 | 1k+ | | | Non-prefixed class |
| #5040 | ChatBot Conversational AI Support | 41 | 72 | 32 | 1k+ | | | Short PHP open tag found |
| #5041 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | | | Output is not escaped |
| #5042 | Masonry Image Gallery Block | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5043 | WP SendFox | 34 | 296 | 118 | 1k+ | | | Text Domain Mismatch |
| #5044 | Add Featured Image Custom Link | 89 | 3 | 6 | 1k+ | | | Request data is not unslashed |
| #5045 | Fan Page Widget by ThemeNcode | 40 | 108 | 3 | 1k+ | | | Output is not escaped |
| #5046 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #5047 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #5048 | Evermore | 64 | 8 | 12 | 1k+ | | | Input is not validated |
| #5049 | EasyIndex | 34 | 74 | 135 | 1k+ | | | Missing nonce verification |
| #5050 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |