| #7751 | I Recommend This – Love/Like Button for WordPress Posts | 87 | 3 | 49 | 5k+ | | | Direct Query |
| #7752 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | | Output is not escaped |
| #7753 | Kama SpamBlock | 64 | 29 | 7 | 5k+ | | | Short PHP open tag found |
| #7754 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #7755 | Hide featured image on all single page/post | 96 | 4 | 2 | 5k+ | | | Missing Version |
| #7756 | Weaver Show Posts | 93 | | 2 | 5k+ | | | Input is not sanitized |
| #7757 | Redirect | 51 | 26 | 12 | 5k+ | | | Output is not escaped |
| #7758 | Order Status Control for WooCommerce | 90 | 23 | 4 | 5k+ | | | Text Domain Mismatch |
| #7759 | FSM Custom Featured Image Caption | 47 | 26 | 27 | 5k+ | | | Output is not escaped |
| #7760 | Button Block – Design Stylish, Interactive, and Multi-Functional Buttons | 100 | | 2 | 5k+ | | | Non-prefixed global variable |
| #7761 | The Events Calendar: Category Colors | 88 | 18 | 42 | 5k+ | | | Non-prefixed global variable |
| #7762 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 5k+ | | | Non Singular String Literal Domain |
| #7763 | Buzzsprout Podcasting | 41 | 75 | 13 | 5k+ | | | Non Singular String Literal Domain |
| #7764 | Jetpack Search | 45 | 925 | 426 | 5k+ | | | Text Domain Mismatch |
| #7765 | Admin Slug Column | 35 | 2 | 0 | 5k+ | | | Hidden files included |
| #7766 | Plus WebP or AVIF | 98 | | 24 | 5k+ | | | Non-prefixed global variable |
| #7767 | Contact Form 7 Modules | 60 | 47 | 15 | 5k+ | | | Text Domain Mismatch |
| #7768 | Top Image SEO | 41 | 115 | 26 | 5k+ | | | Unsafe printing function |
| #7769 | SmartBill Facturare si Gestiune | 31 | 421 | 164 | 5k+ | | | Text Domain Mismatch |
| #7770 | Flying Analytics: Self-Host Google Analytics v4 with Speed Optimization | 35 | 17 | 13 | 4k+ | | | Missing direct file access protection |
| #7771 | Publish To Apple News | 90 | 882 | 2 | 5k+ | | | Text Domain Mismatch |
| #7772 | News Magazine X Core | 68 | 63 | 30 | 5k+ | | | Missing Translators Comment |
| #7773 | WP Custom Author URL | 47 | 16 | 38 | 5k+ | | | Non-prefixed global variable |
| #7774 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #7775 | Digital Signature For Contact Form 7 | 84 | 22 | 11 | 5k+ | | | file system operations fwrite |
| #7776 | WC Cancel Order | 35 | 52 | 122 | 5k+ | | | Non-prefixed hook name |
| #7777 | Custom Related Products for WooCommerce | 48 | 25 | 10 | 5k+ | | | Text Domain Mismatch |
| #7778 | Child Pages Shortcode | 35 | 5 | 6 | 5k+ | | | Non-prefixed hook name |
| #7779 | Turn Rank Math FAQ Block to Accordion | 99 | 1 | 0 | 5k+ | | | outdated tested upto header |
| #7780 | Ko-fi Button | 41 | 75 | 15 | 5k+ | | | Output is not escaped |
| #7781 | My YouTube Channel | 40 | 54 | 38 | 5k+ | | | Output is not escaped |
| #7782 | Minimum Purchase Amount For Woo Cart – For WooCommerce | 87 | 72 | 8 | 5k+ | | | Text Domain Mismatch |
| #7783 | iPanorama 360 – Advanced Virtual Tour Builder | 87 | 726 | 34 | 5k+ | | | Text Domain Mismatch |
| #7784 | Sliced Invoices – WordPress Invoice Plugin | 26 | 684 | 455 | 5k+ | | | Output is not escaped |
| #7785 | Object Cache 4 everyone | 87 | 2 | 65 | 5k+ | | | Non-prefixed function |
| #7786 | File Uploads Addon for WooCommerce | 88 | 8 | 15 | 5k+ | | | Missing direct file access protection |
| #7787 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | | | Non Singular String Literal Domain |
| #7788 | Theme Demo Import | 50 | 101 | 95 | 5k+ | | | Non-prefixed hook name |
| #7789 | Admin Management Xtended | 38 | 280 | 161 | 5k+ | | | Output is not escaped |
| #7790 | Custom Upload Dir | 55 | 63 | 7 | 5k+ | | | Missing Arg Domain |
| #7791 | Podium | 52 | 21 | 23 | 5k+ | | | Missing direct file access protection |
| #7792 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 35 | 48 | 114 | 5k+ | | | Non-prefixed hook name |
| #7793 | Visual Website Optimizer | 48 | 86 | 4 | 5k+ | | | wp function not compatible with requires wp |
| #7794 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #7795 | Bangladeshi Payment Gateways – Make Payment Using QR Code | 40 | 40 | 36 | 5k+ | | | Output is not escaped |
| #7796 | Pods Alternative Cache | 35 | 1 | 0 | 5k+ | | | Hidden files included |
| #7797 | WP Database Reset | 98 | 1 | 10 | 5k+ | | | Direct Query |
| #7798 | WP Mail From II | 82 | 3 | 7 | 5k+ | | | trademarked term |
| #7799 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | | | Output is not escaped |
| #7800 | Admin Taxonomy Filter | 92 | 3 | 3 | 5k+ | | | Non-prefixed class |