| #4851 | Jellyfish Counter Widget | 41 | 174 | 5 | 1k+ | | | Output is not escaped |
| #4852 | Export/Import Media – CSV Media Library Import & Export | 98 | 7 | 4 | 1k+ | | | Missing Translators Comment |
| #4853 | Book Now | 41 | 75 | 14 | 1k+ | | | Output is not escaped |
| #4854 | Honeypot Anti Spam for Forminator Forms | 75 | 4 | 7 | 1k+ | | | Missing nonce verification |
| #4855 | Openpay Stores Plugin | 31 | 121 | 75 | 1k+ | | | Non-prefixed global variable |
| #4856 | Delete Post with Attachments | 96 | 2 | 15 | 1k+ | | | Direct Query |
| #4857 | WPS HTML Blocks | 91 | 23 | 4 | 1k+ | | | Text Domain Mismatch |
| #4858 | Bookero.pl – system rezerwacji online | 82 | 12 | 7 | 1k+ | | | curl curl setopt |
| #4859 | Price Per Unit for WooCommerce | 98 | 1 | 30 | 1k+ | | | Non-prefixed global variable |
| #4860 | PT Theme Addon | 40 | 67 | 21 | 1k+ | | | Output is not escaped |
| #4861 | news ticker benaceur | 37 | 1,097 | 31 | 1k+ | | | Output is not escaped |
| #4862 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #4863 | CB Custom Beaver Builder Modules | 33 | 748 | 4 | 1k+ | | | Output is not escaped |
| #4864 | Ever Accounting – Accounting & Invoicing Solution for Small Businesses | 68 | 69 | 661 | 1k+ | | | Non-prefixed hook name |
| #4865 | Online Payments with iK Pay Gateway | 64 | 12 | 28 | 1k+ | | | Missing nonce verification |
| #4866 | Trash Duplicate and 301 Redirect | 38 | 13 | 103 | 1k+ | | | Nonce verification recommended |
| #4867 | After Login Redirect | 98 | 1 | 21 | 1k+ | | | Non-prefixed global variable |
| #4868 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #4869 | Acumbamail | 75 | 7 | 36 | 1k+ | | | Non-prefixed global variable |
| #4870 | Walls.io: Social Media Feed | 35 | 10 | 7 | 1k+ | | | Hidden files included |
| #4871 | Invite Anyone | 40 | 32 | 130 | 1k+ | | | Non-prefixed hook name |
| #4872 | Complete Image Sitemap | 40 | 55 | 18 | 1k+ | | | Output is not escaped |
| #4873 | CodeColorer | 64 | 65 | 266 | 1k+ | | | Non-prefixed global variable |
| #4874 | Product Catalog Simple | 24 | 1,555 | 1,982 | 1k+ | | | Output is not escaped |
| #4875 | ContentRemover – remover titles, dates, author | 99 | 1 | 2 | 1k+ | | | Discouraged text-domain loading |
| #4876 | Multi Currency, Currency Switcher, Exchange Rates for WooCommerce – Mudra | 92 | 2 | 9 | 1k+ | | | Non-prefixed hook name |
| #4877 | f(x) Editor | 77 | 14 | 3 | 1k+ | | | Unsafe printing function |
| #4878 | PDF Flipbook Heyzine | 76 | 3 | 46 | 1k+ | | | Non-prefixed global variable |
| #4879 | Pods Gravity Forms Add-On | 43 | | 79 | 1k+ | | | Missing nonce verification |
| #4880 | ThemeRain Core | 35 | 69 | 61 | 1k+ | | | Text Domain Mismatch |
| #4881 | Simple CSS for widgets | 58 | 11 | 15 | 1k+ | | | Missing nonce verification |
| #4882 | Share on Mastodon | 96 | 24 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #4883 | Rename Taxonomies by WebMan | 69 | 32 | 7 | 1k+ | | | Missing Arg Domain |
| #4884 | Royal Mail Shipping Calculator for WooCommerce | 39 | 61 | 31 | 1k+ | | | Text Domain Mismatch |
| #4885 | ActiveDEMAND | 32 | 157 | 161 | 1k+ | | | Output is not escaped |
| #4886 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #4887 | Autopreenchimento de endereço em formulários | 96 | 5 | 1 | 1k+ | | | Missing direct file access protection |
| #4888 | Azigen | 95 | 12 | 0 | 1k+ | | | Missing Arg Domain |
| #4889 | CallPage – Callback Widget | 49 | 41 | 17 | 1k+ | | | Non Singular String Literal Domain |
| #4890 | Disable Revisions | 90 | 5 | 5 | 1k+ | | | Direct Query |
| #4891 | Extended Post Status | 45 | 27 | 27 | 1k+ | | | Output is not escaped |
| #4892 | Janolaw AGB Hosting | 33 | 198 | 11 | 1k+ | | | Short PHP open tag found |
| #4893 | Terms descriptions | 28 | 222 | 423 | 1k+ | | | Non-prefixed function |
| #4894 | Simple Export Import for ACF Data | 35 | 19 | 64 | 1k+ | | | Request data is not unslashed |
| #4895 | Co-marquage service-public.fr | 31 | 84 | 213 | 1k+ | | | Non-prefixed global variable |
| #4896 | Contact Form 7 Syntax Highlighting | 91 | 4 | 10 | 1k+ | | | Nonce verification recommended |
| #4897 | Button Plus for Elementor | 99 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #4898 | Diverse Solutions IDX Real Estate Listings & MLS Search | 22 | 745 | 605 | 1k+ | | | Heredoc Output Not Escaped |
| #4899 | Show Stock Status for WooCommerce | 38 | 30 | 19 | 1k+ | | | Output is not escaped |
| #4900 | Autocomplete LearnDash Lessons and Topics | 40 | 46 | 16 | 1k+ | | | Missing Arg Domain |