| #6601 | Configurable Tag Cloud (CTC) | 39 | 126 | 121 | 2k+ | | | Output is not escaped |
| #6602 | UseStrict's Calendly Embedder | 35 | 4 | 1 | 2k+ | | | Hidden files included |
| #6603 | Advanced Classic Editor | 99 | 1 | 1 | 2k+ | | | Non-prefixed function |
| #6604 | Serial Number for Contact Form 7 | 39 | 105 | 53 | 2k+ | | | Non Singular String Literal Domain |
| #6605 | WP All Import – Job Listing Import for WP Job Manager | 40 | 35 | 27 | 2k+ | | | Output is not escaped |
| #6606 | DPD Baltic Shipping | 35 | 91 | 202 | 2k+ | | | Text Domain Mismatch |
| #6607 | Affiliate Area Shortcodes by AffiliateWP | 52 | 56 | 16 | 2k+ | | | Text Domain Mismatch |
| #6608 | Protect Admin | 23 | 606 | 1,300 | 2k+ | | | Non-prefixed global variable |
| #6609 | Smart Passworded Pages | 80 | 11 | 8 | 2k+ | | | wp function not compatible with requires wp |
| #6610 | WP Featherlight Disabled | 89 | 5 | 11 | 2k+ | | | trademarked term |
| #6611 | Lucky Orange | 76 | 56 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #6612 | Chaport — Live Chat & Chatbots | 98 | 5 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #6613 | WP Clean Admin Menu | 56 | 29 | 11 | 2k+ | | | Output is not escaped |
| #6614 | Enable vCard Upload | 97 | 3 | 1 | 2k+ | | | outdated tested upto header |
| #6615 | Advanced Country Blocker | 40 | 23 | 77 | 2k+ | | | Exception output is not escaped |
| #6616 | MembershipWorks – Membership, Events & Directory | 40 | 41 | 29 | 2k+ | | | Output is not escaped |
| #6617 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | | | Exception output is not escaped |
| #6618 | Addon Elementor Container Link | 99 | 1 | 1 | 2k+ | | | Discouraged text-domain loading |
| #6619 | Dynamic Year Block – display a copyright notice in your footer with the current year | 90 | 5 | 28 | 2k+ | | | Non-prefixed global variable |
| #6620 | Disable Title | 72 | 20 | 15 | 2k+ | | | Text Domain Mismatch |
| #6621 | GDPR Compliance for Mailchimp | 69 | 7 | 15 | 2k+ | | | Missing nonce verification |
| #6622 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | | | Text Domain Mismatch |
| #6623 | Advanced Custom Fields : CPT Options Pages | 35 | 37 | 11 | 2k+ | | | Output is not escaped |
| #6624 | Shipping Method Display Style for WooCommerce | 26 | 529 | 1,308 | 2k+ | | | Non-prefixed global variable |
| #6625 | LitCommerce: Multi-channel Selling Tool For WooCommerce | 92 | 4 | 3 | 2k+ | | | Missing direct file access protection |
| #6626 | Simple Download Counter | 42 | 58 | 46 | 2k+ | | | Output is not escaped |
| #6627 | Convert to Blocks | 89 | 2 | 11 | 2k+ | | | Non-prefixed hook name |
| #6628 | RSS Image Feed | 37 | 147 | 16 | 2k+ | | | Output is not escaped |
| #6629 | RICG Responsive Images | 35 | 29 | 25 | 2k+ | | | wp function not compatible with requires wp |
| #6630 | Integrate Umami | 35 | 10 | 0 | 2k+ | | | Hidden files included |
| #6631 | Affiliates | 25 | 689 | 1,483 | 2k+ | | | Output is not escaped |
| #6632 | Pen | 98 | 2 | 2 | 2k+ | | | Discouraged text-domain loading |
| #6633 | Holded integration | 55 | 72 | 23 | 2k+ | | | Non Singular String Literal Domain |
| #6634 | Raw HTML Snippets | 48 | 14 | 36 | 2k+ | | | Input is not sanitized |
| #6635 | Headless Mode | 80 | 7 | 0 | 2k+ | | | Unsafe printing function |
| #6636 | Yotpo: Product & Photo Reviews for WooCommerce | 35 | 24 | 189 | 2k+ | | | Non-prefixed function |
| #6637 | Goal Tracker – Custom Event Tracking for GA4 | 38 | 541 | 25 | 2k+ | | | Output is not escaped |
| #6638 | Kenta Companion | 23 | 657 | 1,419 | 2k+ | | | Non-prefixed global variable |
| #6639 | Premmerce Product Filter for WooCommerce | 24 | 817 | 1,486 | 2k+ | | | Non-prefixed global variable |
| #6640 | CrowdSec | 35 | 130 | 119 | 2k+ | | | Output is not escaped |
| #6641 | Open in New Window Plugin | 81 | 6 | 8 | 2k+ | | | Offloaded Content |
| #6642 | WP Views Counter | 35 | 81 | 42 | 2k+ | | | Output is not escaped |
| #6643 | Disable Users | 69 | 11 | 9 | 2k+ | | | Text Domain Mismatch |
| #6644 | Easy UTM Tracking with Contact Form 7 | 85 | 3 | 10 | 2k+ | | | Input is not validated |
| #6645 | Social Share Buttons & Analytics Plugin – GetSocial.io | 40 | 97 | 25 | 2k+ | | | Output is not escaped |
| #6646 | Faster Image Insert | 39 | 94 | 26 | 2k+ | | | Output is not escaped |
| #6647 | Duplica – Duplicate Posts, Pages, Custom Posts or Users | 35 | 14 | 31 | 2k+ | | | Non-prefixed global variable |
| #6648 | Video Thumbnails Reloaded | 36 | 343 | 58 | 2k+ | | | Text Domain Mismatch |
| #6649 | Custom Thank You Page Customize For WooCommerce by Binary Carpenter | 37 | 45 | 80 | 2k+ | | | error log error log |
| #6650 | Easy SwipeBox | 35 | 157 | 10 | 2k+ | | | Non Singular String Literal Domain |