| #5101 | Masonry Image Gallery Block | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5102 | WP SendFox | 34 | 296 | 118 | 1k+ | | | Text Domain Mismatch |
| #5103 | Add Featured Image Custom Link | 89 | 3 | 6 | 1k+ | | | Request data is not unslashed |
| #5104 | Fan Page Widget by ThemeNcode | 40 | 108 | 3 | 1k+ | | | Output is not escaped |
| #5105 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #5106 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #5107 | Evermore | 64 | 8 | 12 | 1k+ | | | Input is not validated |
| #5108 | EasyIndex | 34 | 74 | 135 | 1k+ | | | Missing nonce verification |
| #5109 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |
| #5110 | Classic Visual Editor Options | 100 | | 0 | 1k+ | | | No open findings |
| #5111 | Social Media Icons Widget | 72 | 181 | 10 | 1k+ | | | badly named files |
| #5112 | Disable Thumbnails, Threshold and Image Options | 99 | 1 | 1 | 1k+ | | | outdated tested upto header |
| #5113 | Marijuana Age Verify | 23 | 1,154 | 2,630 | 1k+ | | | Non-prefixed global variable |
| #5114 | Russian Post and EMS for WooCommerce | 68 | 16 | 47 | 1k+ | | | Non-prefixed global variable |
| #5115 | Check Conflicts | 83 | 36 | 12 | 1k+ | | | Missing Arg Domain |
| #5116 | Manual Related Posts | 40 | 51 | 32 | 1k+ | | | Output is not escaped |
| #5117 | Tab Ultimate | 34 | 107 | 138 | 1k+ | | | Output is not escaped |
| #5118 | Gutena Star Ratings | 97 | 6 | 1 | 1k+ | | | Missing Arg Domain |
| #5119 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #5120 | Razorpay Payment Button Elementor Plugin | 20 | 479 | 62 | 1k+ | | | Exception output is not escaped |
| #5121 | Automatic image ALT attributes | 98 | 4 | 0 | 1k+ | | | Missing direct file access protection |
| #5122 | Clio Grow Form | 91 | 179 | 19 | 1k+ | | | Text Domain Mismatch |
| #5123 | Download Media Library | 49 | 22 | 40 | 1k+ | | | Text Domain Mismatch |
| #5124 | PhotoSwipe | 92 | 4 | 9 | 1k+ | | | Not In Footer |
| #5125 | Smart Maintenance Mode | 38 | 137 | 128 | 1k+ | | | Output is not escaped |
| #5126 | WC Builder – WooCommerce Page Builder for WPBakery | 36 | 647 | 50 | 1k+ | | | Text Domain Mismatch |
| #5127 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 47 | 5 | 58 | 1k+ | | | Interpolated SQL is not prepared |
| #5128 | WPBakery Page Builder Simple All Responsive | 88 | 4 | 6 | 1k+ | | | Missing direct file access protection |
| #5129 | MomentoPress for Momento360 | 98 | 2 | 3 | 1k+ | | | Missing Version |
| #5130 | Bradmax Player | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5131 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | | | Direct Query |
| #5132 | AffiliateWP – Leaderboard | 49 | 68 | 13 | 1k+ | | | Output is not escaped |
| #5133 | HTTP Security Header | 99 | 1 | 1 | 1k+ | | | Discouraged text-domain loading |
| #5134 | Accordion Slider Gallery | 29 | 379 | 142 | 1k+ | | | Text Domain Mismatch |
| #5135 | Related Products Manager for WooCommerce | 79 | 9 | 43 | 1k+ | | | Non-prefixed global variable |
| #5136 | Phone Orders for WooCommerce | 35 | 1 | 229 | 1k+ | | | Non-prefixed hook name |
| #5137 | wp-cleanumlauts2 | 61 | 32 | 22 | 1k+ | | | Output is not escaped |
| #5138 | Advanced Custom Fields: Ninjaforms Add-on | 76 | 43 | 8 | 1k+ | | | Text Domain Mismatch |
| #5139 | StreamWeasels Twitch Integration | 23 | 555 | 1,465 | 1k+ | | | Non-prefixed global variable |
| #5140 | Export Plugins and Templates | 30 | 143 | 33 | 1k+ | | | file system operations fread |
| #5141 | Fake Pay For WooCommerce | 97 | 13 | 1 | 1k+ | | | Text Domain Mismatch |
| #5142 | Sch.gr Commons | 94 | 6 | 5 | 1k+ | | | Discouraged text-domain loading |
| #5143 | Custom Product Tabs for WooCommerce WP All Import Add-on | 65 | 18 | 18 | 1k+ | | | Non-prefixed global variable |
| #5144 | Section Builder with Backgrounds – Customize with Color, Gradient, Image and Parallax. | 93 | 2 | 7 | 1k+ | | | Non-prefixed global variable |
| #5145 | Tumult Hype Animations | 32 | 56 | 117 | 1k+ | | | Output is not escaped |
| #5146 | PO/MO Editor | 39 | 106 | 45 | 1k+ | | | Unsafe printing function |
| #5147 | Menu By User Roles | 99 | 1 | 1 | 1k+ | | | Non-prefixed constant |
| #5148 | Spam Comments Cleaner | 62 | 14 | 29 | 1k+ | | | Non-prefixed function |
| #5149 | Remove Site Health From Dashboard | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5150 | Newsletter Subscription Form – User Subscriptions Form, Capture Email | 24 | 385 | 829 | 1k+ | | | Non-prefixed global variable |