| #6001 | Hide Admin Bar Based on User Roles | 26 | 549 | 1,345 | 20k+ | | | Non-prefixed global variable |
| #6002 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #6003 | Mantenimiento web | 63 | 49 | 15 | 20k+ | | | Text Domain Mismatch |
| #6004 | SOGO Add Script to Individual Pages Header Footer | 39 | 74 | 40 | 20k+ | | | Output is not escaped |
| #6005 | Login Logout Menu | 72 | 7 | 20 | 20k+ | | | Input is not sanitized |
| #6006 | Twenty20 Image Before-After | 78 | 104 | 14 | 20k+ | | | Text Domain Mismatch |
| #6007 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | | | Nonce verification recommended |
| #6008 | Easy Video Player | 42 | 20 | 20 | 20k+ | | | Output is not escaped |
| #6009 | Themify – WooCommerce Product Filter | 29 | 643 | 145 | 20k+ | | | Output is not escaped |
| #6010 | Basic User Avatars | 58 | 17 | 7 | 20k+ | | | Output is not escaped |
| #6011 | Change WordPress Login Logo | 83 | 5 | 9 | 20k+ | | | Non-prefixed function |
| #6012 | Customizer for WooCommerce | 79 | 4 | 6 | 20k+ | | | Missing nonce verification |
| #6013 | RSS for Yandex Turbo | 32 | 687 | 307 | 20k+ | | | Unsafe printing function |
| #6014 | Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio | 97 | 12 | 70 | 20k+ | | | Text Domain Mismatch |
| #6015 | CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7 | 93 | 3 | 9 | 20k+ | | | Non-prefixed class |
| #6016 | Featured Image Admin Thumb | 90 | 7 | 10 | 20k+ | | | Non-prefixed hook name |
| #6017 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 1,125 | 2,153 | 20k+ | | | Missing direct file access protection |
| #6018 | Utimate Kit ( Styler ) for WPForms | 45 | 240 | 69 | 20k+ | | | Missing Arg Domain |
| #6019 | My-Plugins | 72 | 24 | 6 | 20k+ | | | Missing Arg Domain |
| #6020 | Forget About Shortcode Buttons | 78 | 11 | 25 | 20k+ | | | Missing direct file access protection |
| #6021 | HT Slider For Elementor | 50 | 884 | 40 | 20k+ | | | Text Domain Mismatch |
| #6022 | Mega Addons For WPBakery Page Builder | 39 | 1,320 | 154 | 20k+ | | | Text Domain Mismatch |
| #6023 | Favicon Rotator | 99 | 2 | 2 | 20k+ | | | wp function not compatible with requires wp |
| #6024 | Auto Upload Images | 40 | 62 | 13 | 20k+ | | | Unsafe printing function |
| #6025 | Gutenverse – WordPress Blocks, Page Builder & Site Editor | 51 | 17 | 47 | 20k+ | | | Non-prefixed hook name |
| #6026 | BulletProof Security | 0 | 5,048 | 4,949 | 20k+ | | | Output is not escaped |
| #6027 | Stratum Widgets for Elementor | 60 | 66 | 366 | 20k+ | | | Non-prefixed global variable |
| #6028 | Additional Variation Images Gallery for WooCommerce | 39 | 61 | 127 | 20k+ | | | Non-prefixed global variable |
| #6029 | Advanced Dynamic Pricing and Discount Rules for WooCommerce | 44 | 2 | 813 | 20k+ | | | Non-prefixed namespace |
| #6030 | Team Members | 96 | 15 | 16 | 20k+ | | | Missing direct file access protection |
| #6031 | PW WooCommerce Gift Cards | 34 | 238 | 185 | 20k+ | | | Output is not escaped |
| #6032 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #6033 | Date Time Picker for Contact Form 7 | 97 | 8 | 2 | 20k+ | | | Text Domain Mismatch |
| #6034 | WP Dashboard Notes | 41 | 24 | 29 | 20k+ | | | Unsafe printing function |
| #6035 | Tag Manager – Header, Body And Footer | 38 | 97 | 319 | 20k+ | | | Non-prefixed global variable |
| #6036 | Pochipp | 35 | 27 | 102 | 20k+ | | | Non-prefixed global variable |
| #6037 | LearnPress – Course Review | 37 | 67 | 43 | 20k+ | | | Output is not escaped |
| #6038 | Advanced Automatic Updates | 49 | 26 | 25 | 20k+ | | | Nonce verification recommended |
| #6039 | Link Manager | 98 | 4 | 0 | 20k+ | | | Missing direct file access protection |
| #6040 | Mammoth .docx converter | 83 | 11 | 0 | 20k+ | | | Output is not escaped |
| #6041 | Lightbox with PhotoSwipe | 37 | 179 | 24 | 20k+ | | | Output is not escaped |
| #6042 | PowerPress Podcasting plugin by Blubrry | 23 | 4,807 | 2,394 | 20k+ | | | Output is not escaped |
| #6043 | QODE Optimizer | 74 | 1 | 249 | 20k+ | | | Non-prefixed global variable |
| #6044 | Fullwidth Templates for Any Theme & Page Builder | 81 | 12 | 23 | 20k+ | | | Non-prefixed constant |
| #6045 | Beehive Analytics – Google Analytics Dashboard | 90 | 611 | 22 | 20k+ | | | Text Domain Mismatch |
| #6046 | Bosa Elementor Addons and Templates for WooCommerce | 32 | 40 | 165 | 20k+ | | | slow db query tax query |
| #6047 | Animate It! | 39 | 137 | 16 | 20k+ | | | Text Domain Mismatch |
| #6048 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 30k+ | | | Text Domain Mismatch |
| #6049 | Reading Time WP | 89 | 5 | 33 | 30k+ | | | Non-prefixed global variable |
| #6050 | Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | 34 | 261 | 863 | 30k+ | | | Non-prefixed global variable |