| #5151 | Spam Comments Cleaner | 62 | 14 | 29 | 1k+ | | | Non-prefixed function |
| #5152 | Remove Site Health From Dashboard | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5153 | Newsletter Subscription Form – User Subscriptions Form, Capture Email | 24 | 385 | 829 | 1k+ | | | Non-prefixed global variable |
| #5154 | NS Category Widget | 88 | 1 | 17 | 1k+ | | | Missing nonce verification |
| #5155 | Affiliates WooCommerce Light | 99 | 1 | 3 | 1k+ | | | trademarked term |
| #5156 | Lili Business Banking | 98 | 18 | 0 | 1k+ | | | Text Domain Mismatch |
| #5157 | Resize images before upload | 54 | 19 | 5 | 1k+ | | | Output is not escaped |
| #5158 | Benchmark Email Lite | 39 | 86 | 23 | 1k+ | | | Output is not escaped |
| #5159 | Authors Widget | 35 | 170 | 19 | 1k+ | | | Output is not escaped |
| #5160 | WP Nav Plus | 40 | 95 | 13 | 1k+ | | | Output is not escaped |
| #5161 | Easy Hide Admin Menu Items | 96 | 43 | 11 | 1k+ | | | Text Domain Mismatch |
| #5162 | Store file uploads for Contact Form 7 | 76 | 5 | 6 | 1k+ | | | Output is not escaped |
| #5163 | Encyclopedia / Glossary / Wiki | 37 | 263 | 48 | 1k+ | | | Output is not escaped |
| #5164 | 360 Javascript Viewer | 37 | 144 | 22 | 1k+ | | | Output is not escaped |
| #5165 | WP Counter Up – Animated Number Counter & Milestone Showcase | 51 | 18 | 239 | 1k+ | | | Non-prefixed global variable |
| #5166 | Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor | 97 | 2 | 14 | 1k+ | | | Dynamic hook name |
| #5167 | Comment Moderation/Notification Recipients | 98 | 2 | 7 | 1k+ | | | Non-prefixed global variable |
| #5168 | CRM Perks Integration for Gravity Forms and Salesforce | 32 | 807 | 178 | 1k+ | | | Text Domain Mismatch |
| #5169 | RCD-Right Click Disabler | 96 | 2 | 9 | 1k+ | | | Missing Version |
| #5170 | WP Image Size Selection | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #5171 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | | | Output is not escaped |
| #5172 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | | | Output is not escaped |
| #5173 | Expire Sticky Posts | 68 | 16 | 8 | 1k+ | | | Text Domain Mismatch |
| #5174 | Extra User Details | 41 | 84 | 15 | 1k+ | | | Non Singular String Literal Domain |
| #5175 | Awin – Advertiser Tracking for WooCommerce | 35 | 46 | 39 | 1k+ | | | Non Singular String Literal Domain |
| #5176 | mowomo Social Share | 34 | 202 | 156 | 1k+ | | | Output is not escaped |
| #5177 | Team Member Block | 81 | 15 | 14 | 1k+ | | | file system operations mkdir |
| #5178 | Easy Duplicate Woo Order | 64 | 17 | 10 | 1k+ | | | Unsafe printing function |
| #5179 | Post Views for Jetpack | 83 | 12 | 3 | 1k+ | | | Output is not escaped |
| #5180 | BuddyPress Group Email Subscription | 24 | 51 | 336 | 1k+ | | | Non-prefixed function |
| #5181 | Improved External Products for WooCommerce | 95 | 1 | 8 | 1k+ | | | Non-prefixed class |
| #5182 | Nginx Cache Controller | 35 | 79 | 96 | 1k+ | | | Text Domain Mismatch |
| #5183 | Cache Images | 39 | 72 | 27 | 1k+ | | | Unsafe printing function |
| #5184 | Classified Ads | 40 | 136 | 38 | 1k+ | | | Text Domain Mismatch |
| #5185 | Templ Optimizer | 72 | 6 | 63 | 1k+ | | | Direct Query |
| #5186 | WP Hydra | 35 | 10 | 18 | 1k+ | | | Input is not sanitized |
| #5187 | Sidebar Shortcode | 98 | 2 | 1 | 1k+ | | | outdated tested upto header |
| #5188 | Guten Post Layout – An Advanced Post Grid Collection | 97 | 1 | 13 | 1k+ | | | Non-prefixed class |
| #5189 | Blocks Export Import – Backup & Move Gutenberg Blocks as JSON | 98 | 2 | 11 | 1k+ | | | Non-prefixed global variable |
| #5190 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #5191 | Payment Gateway Icons For WooCommerce | 86 | 2 | 4 | 1k+ | | | Input is not sanitized |
| #5192 | If Widget – Visibility control for Widgets | 40 | 99 | 25 | 1k+ | | | Unsafe printing function |
| #5193 | N-Genius Online by Network | 92 | 2 | 38 | 1k+ | | | Non-prefixed class |
| #5194 | Reviews Plus | 33 | 223 | 378 | 1k+ | | | Non-prefixed function |
| #5195 | WP Stripe Checkout | 36 | 198 | 118 | 1k+ | | | Unsafe printing function |
| #5196 | Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks | 99 | 1 | 1 | 1k+ | | | mismatched plugin name |
| #5197 | Algori Social Share Buttons | 97 | 2 | 10 | 1k+ | | | Missing Version |
| #5198 | ELEX WooCommerce Google Shopping (Google Product Feed) | 26 | 226 | 242 | 1k+ | | | Text Domain Mismatch |
| #5199 | Visual User Description Editor | 94 | 4 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #5200 | CloudGuard | 41 | 41 | 13 | 1k+ | | | Output is not escaped |