| #5051 | Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms | 48 | 34 | 14 | 800 | | | Non Singular String Literal Domain |
| #5052 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | 48 | 63 | 273 | 100k+ | | | Non-prefixed global variable |
| #5053 | Raw HTML Snippets | 48 | 14 | 36 | 2k+ | | | Input is not sanitized |
| #5054 | External Links | 48 | 42 | 13 | 9k+ | | | Output is not escaped |
| #5055 | Seznam Webmaster | 48 | 47 | 8 | 700 | | | Output is not escaped |
| #5056 | Simple Custom Post Order | 48 | 10 | 77 | 300k+ | | | Direct Query |
| #5057 | Simple Regenerate Slug | 48 | 18 | 6 | 400 | | | Unsafe printing function |
| #5058 | FlexStock – Product Stock Sync with Google Sheets for WooCommerce | 48 | | 241 | 700 | | | Direct Query |
| #5059 | Easy Updates Manager | 48 | 13 | 182 | 300k+ | | | Non-prefixed global variable |
| #5060 | Super Simple Google Analytics | 48 | 55 | 3 | 2k+ | | | Output is not escaped |
| #5061 | Tako Movable Comments | 48 | 18 | 39 | 1k+ | | | Input is not sanitized |
| #5062 | ThemeFarmer Companion | 48 | 54 | 51 | 2k+ | | | Missing Version |
| #5063 | Virtuaria PagBank / PagSeguro for WooCommerce | 48 | 12 | 160 | 1k+ | | | Non-prefixed global variable |
| #5064 | Visual Website Optimizer | 48 | 86 | 4 | 5k+ | | | wp function not compatible with requires wp |
| #5065 | WC Provincia Canton Distrito | 48 | 103 | 14 | 1k+ | | | Text Domain Mismatch |
| #5066 | Whitelist IP For Limit Login Attempts | 48 | 18 | 12 | 500 | | | Output is not escaped |
| #5067 | Conditional Display for Mobile – Mobile Detect Plugin | 48 | 4 | 112 | 2k+ | | | Input is not sanitized |
| #5068 | Instamojo for WooCommerce | 48 | 72 | 44 | 5k+ | | | Text Domain Mismatch |
| #5069 | Flutterwave Payment Gateway for WooCommerce | 48 | 14 | 22 | 2k+ | | | Output is not escaped |
| #5070 | WP Attachment Export | 48 | 16 | 25 | 600 | | | Input is not sanitized |
| #5071 | WP First Letter Avatar | 48 | 40 | 7 | 2k+ | | | Output is not escaped |
| #5072 | WP Google Search | 48 | 45 | 17 | 5k+ | | | Output is not escaped |
| #5073 | WP Login Form | 48 | 14 | 20 | 7k+ | | | Request data is not unslashed |
| #5074 | wp-Monalisa | 48 | 56 | 94 | 700 | | | Direct Query |
| #5075 | WP Remote Users Sync | 48 | 355 | 117 | 6k+ | | | Text Domain Mismatch |
| #5076 | WS Action Scheduler Cleaner | 48 | 13 | 80 | 2k+ | | | error log error log |
| #5077 | ACF Quick Edit Fields | 49 | 20 | 72 | 30k+ | | | Nonce verification recommended |
| #5078 | Advanced Custom Fields: Limiter Field | 49 | 57 | 12 | 900 | | | Output is not escaped |
| #5079 | AffiliateWP – Leaderboard | 49 | 68 | 13 | 1k+ | | | Output is not escaped |
| #5080 | Advanced Automatic Updates | 49 | 26 | 25 | 20k+ | | | Nonce verification recommended |
| #5081 | Batcache | 49 | 12 | 53 | 700 | | | Input is not sanitized |
| #5082 | SiteEase Bulk Delete Manager | 49 | 50 | 72 | 900 | | | Direct Query |
| #5083 | Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress | 49 | 478 | 176 | 1k+ | | | Text Domain Mismatch |
| #5084 | CallPage – Callback Widget | 49 | 41 | 17 | 1k+ | | | Non Singular String Literal Domain |
| #5085 | Gallery Carousel Without JetPack | 49 | 56 | 35 | 4k+ | | | Text Domain Mismatch |
| #5086 | Category Posts in Custom Menu | 49 | 19 | 18 | 2k+ | | | Output is not escaped |
| #5087 | Successful Redirection for Contact Form | 49 | 33 | 20 | 10k+ | | | Text Domain Mismatch |
| #5088 | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 49 | 148 | 176 | 100k+ | | | Non-prefixed global variable |
| #5089 | CryptAPI Payment Gateway for WooCommerce | 49 | 185 | 23 | 400 | | | Text Domain Mismatch |
| #5090 | CIO Custom Fields Importer | 49 | 23 | 8 | 400 | | | Output is not escaped |
| #5091 | Dashboard quick links widget | 49 | 22 | 16 | 700 | | | Output is not escaped |
| #5092 | Download Media Library | 49 | 22 | 40 | 1k+ | | | Text Domain Mismatch |
| #5093 | Drag and Drop Multiple File Upload for WooCommerce | 49 | 114 | 29 | 5k+ | | | Text Domain Mismatch |
| #5094 | GDPR Tools: comment ip removement | 49 | 18 | 13 | 2k+ | | | Unsafe printing function |
| #5095 | Easy Google AdSense | 49 | 19 | 12 | 5k+ | | | Output is not escaped |
| #5096 | Easy Media Download | 49 | 20 | 15 | 9k+ | | | Output is not escaped |
| #5097 | Easy Property Listings | 49 | 60 | 66 | 5k+ | | | wp function not compatible with requires wp |
| #5098 | Import into Easy Property Listings | 49 | 335 | 24 | 1k+ | | | Text Domain Mismatch |
| #5099 | FooSales – Point of Sale (POS) for WooCommerce | 49 | 92 | 190 | 700 | | | Non-prefixed global variable |
| #5100 | Friends Link Widget | 49 | 86 | 1 | 500 | | | Output is not escaped |