| #5951 | XML Sitemap Generator for Google | 37 | 43 | 79 | 1m+ | | Input is not validated |
| #5952 | Maintenance | 99 | 3 | 0 | 1m+ | | strip tags strip tags |
| #5953 | One Click Demo Import | 38 | 22 | 84 | 1m+ | | Non-prefixed global variable |
| #5954 | ManageWP Worker | 22 | 507 | 565 | 1m+ | | Non-prefixed class |
| #5955 | WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance | 56 | 5 | 769 | 1m+ | | Non-prefixed global variable |
| #5956 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | Text Domain Mismatch |
| #5957 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | | Non-prefixed global variable |
| #5958 | Custom Post Type UI | 53 | 16 | 23 | 1m+ | | Output is not escaped |
| #5959 | AI Agent by SiteGround | 54 | 27 | 6 | 1m+ | | Exception output is not escaped |
| #5960 | SVG Support | 97 | 1 | 27 | 1m+ | | Non-prefixed global variable |
| #5961 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 46 | 1m+ | | Direct Query |
| #5962 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | Unsafe printing function |
| #5963 | Complianz – GDPR/CCPA Cookie Consent | 24 | 487 | 403 | 1m+ | | Missing Arg Domain |
| #5964 | File Manager | 22 | 740 | 520 | 1m+ | | Unsafe printing function |
| #5965 | Loginizer | 25 | 814 | 504 | 1m+ | | Output is not escaped |
| #5966 | Better Search Replace | 39 | 96 | 43 | 1m+ | | Unsafe printing function |
| #5967 | Code Snippets | 36 | 34 | 203 | 1m+ | | Nonce verification recommended |
| #5968 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 21 | 2,572 | 1,277 | 1m+ | | Output is not escaped |
| #5969 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | | Non-prefixed global variable |
| #5970 | WP Super Cache | 25 | 800 | 989 | 1m+ | | Output is not escaped |
| #5971 | Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] | 53 | 15 | 46 | 1m+ | | Non-prefixed global variable |
| #5972 | Loco Translate | 26 | 454 | 242 | 1m+ | | Output is not escaped |
| #5973 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 621 | 602 | 1m+ | | Unsafe printing function |
| #5974 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 40 | 72 | 348 | 1m+ | | Non-prefixed global variable |
| #5975 | Advanced Editor Tools | 41 | 143 | 84 | 1m+ | | Unsafe printing function |
| #5976 | Starter Templates – AI-Powered Templates for Elementor & Gutenberg | 24 | 125 | 396 | 1m+ | | Non-prefixed hook name |
| #5977 | Advanced Custom Fields (ACF®) | 23 | 2,456 | 1,218 | 2m+ | | Text Domain Mismatch |
| #5978 | Jetpack – WP Security, Backup, Speed, & Growth | 23 | 2,821 | 1,303 | 3m+ | | Text Domain Mismatch |
| #5979 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | Output is not escaped |
| #5980 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | | Missing direct file access protection |
| #5981 | WooCommerce | 22 | 1,355 | 6,129 | 7m+ | | Non-prefixed global variable |
| #5982 | WPS Hide Login | 41 | 34 | 72 | 2m+ | | Nonce verification recommended |
| #5983 | Ultimate Addons for Elementor | 35 | 70 | 226 | 2m+ | | Non-prefixed hook name |
| #5984 | Classic Widgets | 97 | 2 | 3 | 2m+ | | outdated tested upto header |
| #5985 | Redirection | 34 | 32 | 293 | 2m+ | | Non-prefixed class |
| #5986 | WordPress Importer | 25 | 238 | 110 | 2m+ | | Output is not escaped |
| #5987 | All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic | 97 | 19 | 3 | 3m+ | | wp function not compatible with requires wp |
| #5988 | WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager | 89 | 21 | 30 | 3m+ | | wp function not compatible with requires wp |
| #5989 | Hostinger Tools | 81 | 14 | 22 | 3m+ | | wp function not compatible with requires wp |
| #5990 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | | Missing Translators Comment |
| #5991 | Duplicate Page | 40 | 39 | 43 | 3m+ | | Unsafe printing function |
| #5992 | UpdraftPlus: WP Backup & Migration Plugin | 24 | 277 | 299 | 3m+ | | Non-prefixed global variable |
| #5993 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | 31 | 45 | 373 | 4m+ | | Non-prefixed global variable |
| #5994 | WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | 36 | 18 | 146 | 4m+ | | Direct Query |
| #5995 | All-in-One WP Migration and Backup | 40 | 28 | 61 | 5m+ | | Missing nonce verification |
| #5996 | WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More | 31 | 165 | 271 | 5m+ | | Non-prefixed global variable |
| #5997 | Akismet Anti-spam: Spam Protection | 35 | 33 | 99 | 6m+ | | Non-prefixed global variable |
| #5998 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | | Non-prefixed global variable |
| #5999 | Classic Editor | 63 | 17 | 7 | 9m+ | | Unsafe printing function |
| #6000 | Contact Form 7 | 69 | 56 | 39 | 10m+ | | Missing direct file access protection |