| #5201 | Reorder by Term | 39 | 20 | 84 | 1k+ | | | Request data is not unslashed |
| #5202 | Post Carousel Addons For Elementor | 80 | 9 | 8 | 1k+ | | | Output is not escaped |
| #5203 | TT Extra Fee Option for WooCommerce | 42 | 37 | 19 | 1k+ | | | Output is not escaped |
| #5204 | Review & testimonial widgets | 63 | 62 | 9 | 1k+ | | | Text Domain Mismatch |
| #5205 | WP Post Signature | 37 | 90 | 13 | 1k+ | | | Unsafe printing function |
| #5206 | RSS Redirect & Feedburner Alternative | 26 | 277 | 272 | 1k+ | | | Output is not escaped |
| #5207 | WP Hooks Finder | 52 | 27 | 31 | 1k+ | | | Output is not escaped |
| #5208 | Simple Cookie Notification Bar | 51 | 49 | 6 | 1k+ | | | Text Domain Mismatch |
| #5209 | Post Category Filter (WP Admin) | 98 | 2 | 8 | 1k+ | | | trademarked term |
| #5210 | Product Carousel Slider for Elementor | 36 | 148 | 63 | 1k+ | | | Text Domain Mismatch |
| #5211 | GSheetConnector for Forminator Forms | 33 | 128 | 201 | 1k+ | | | Non-prefixed global variable |
| #5212 | StoryChief | 51 | 12 | 55 | 1k+ | | | Input is not sanitized |
| #5213 | VARGAL – Additional Variation Gallery for WooCommerce | 97 | 3 | 26 | 1k+ | | | Non-prefixed hook name |
| #5214 | Cron Setup and Monitor – Get URL Cron | 100 | | 0 | 1k+ | | | No open findings |
| #5215 | HTML5 jQuery Audio Player | 32 | 251 | 153 | 1k+ | | | Unsafe printing function |
| #5216 | Simple MyISAM to InnoDB | 49 | 11 | 22 | 1k+ | | | Output is not escaped |
| #5217 | Contribuinte Checkout | 41 | 30 | 30 | 1k+ | | | Output is not escaped |
| #5218 | bbPress WP Tweaks | 40 | 147 | 18 | 1k+ | | | Output is not escaped |
| #5219 | Simple Masonry Layout | 53 | 28 | 28 | 1k+ | | | Output is not escaped |
| #5220 | Email Notification on Login | 43 | 33 | 7 | 1k+ | | | Unsafe printing function |
| #5221 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #5222 | Display Featured Image for Genesis | 46 | 64 | 59 | 1k+ | | | Non-prefixed global variable |
| #5223 | MOBILOOK — Mobile View & Mobile‑Friendly Test | 53 | 10 | 20 | 1k+ | | | Missing nonce verification |
| #5224 | Simple WWW Redirect | 63 | 26 | 5 | 1k+ | | | Output is not escaped |
| #5225 | Expand Tabs for WooCommerce | 67 | 10 | 57 | 1k+ | | | Non-prefixed global variable |
| #5226 | Heartbeat Controller | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5227 | PDF Generator for WordPress Elementor | 24 | 513 | 271 | 1k+ | | | Exception output is not escaped |
| #5228 | Categorify – WordPress Media Library Category & File Manager | 24 | 573 | 1,385 | 1k+ | | | Non-prefixed global variable |
| #5229 | Smart Related Products – AI-Inspired Recommendations for WooCommerce | 67 | 13 | 15 | 1k+ | | | Output is not escaped |
| #5230 | Sezzle Woocommerce Payment | 37 | 108 | 105 | 1k+ | | | Text Domain Mismatch |
| #5231 | Smart Phone Field For WPForms, Contact Form 7, Fluent Forms, Elementor Forms, WooCommerce, Formidable Forms | 93 | 6 | 44 | 1k+ | | | Non-prefixed global variable |
| #5232 | Import into Easy Property Listings | 49 | 335 | 24 | 1k+ | | | Text Domain Mismatch |
| #5233 | Flawless Themes Demo Importer | 94 | 39 | 11 | 1k+ | | | Text Domain Mismatch |
| #5234 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #5235 | Media Cloud Sync | 25 | 1,095 | 274 | 1k+ | | | Exception output is not escaped |
| #5236 | Revision Manager TMC | 92 | 40 | 14 | 1k+ | | | Text Domain Mismatch |
| #5237 | LLMs.txt Generator | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5238 | Anant Sites — Elementor & Gutenberg Readymade Template Library Free & Pro Templates | 38 | 20 | 156 | 1k+ | | | Non-prefixed global variable |
| #5239 | WP Taxonomy Order | 99 | | 6 | 1k+ | | | trademarked term |
| #5240 | Flamix: Bitrix24 and Contact Form 7 integrations | 42 | 79 | 4 | 1k+ | | | Output is not escaped |
| #5241 | Hide Related Video Youtube | 90 | 3 | 8 | 1k+ | | | Direct Query |
| #5242 | SX No Homepage Pagination | 95 | 2 | 2 | 1k+ | | | outdated tested upto header |
| #5243 | Hide Content by User Role for WPBakery | 97 | 5 | 5 | 1k+ | | | Missing direct file access protection |
| #5244 | QuadMenu – Divi Mega Menu | 78 | 17 | 2 | 1k+ | | | Text Domain Mismatch |
| #5245 | Image Rotation Fixer | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #5246 | Custom Header Extended | 48 | 19 | 11 | 1k+ | | | Unsafe printing function |
| #5247 | WP Better Permalinks | 36 | 110 | 59 | 1k+ | | | Output is not escaped |
| #5248 | Easy Logo Link Change | 91 | 6 | 1 | 1k+ | | | Deprecated function: screen_icon |
| #5249 | Migrate Store: Export and Import WooCommerce Settings | 38 | 37 | 33 | 1k+ | | | Non-prefixed global variable |
| #5250 | Logo Slider , Logo Carousel , Logo showcase , Client Logo | 38 | 72 | 22 | 1k+ | | | Output is not escaped |