| #5101 | GamiPress – Multimedia Content | 49 | 11 | 25 | 500 | | | Nonce verification recommended |
| #5102 | Ecommerce Fabrick | 49 | 4 | 135 | 1k+ | | | Nonce verification recommended |
| #5103 | HT Feed | 49 | 76 | 11 | 700 | | | Output is not escaped |
| #5104 | Web Icons | 49 | 51 | 10 | 1k+ | | | Output is not escaped |
| #5105 | Links With Icons Widget | 49 | 53 | 2 | 1k+ | | | Output is not escaped |
| #5106 | Add LinkedIn Insight Tag for LinkedIn Ads | 49 | 126 | 23 | 5k+ | | | Non Singular String Literal Domain |
| #5107 | Logo Carousel Slider | 49 | 102 | 14 | 6k+ | | | Non Singular String Literal Domain |
| #5108 | Meks Simple Flickr Widget | 49 | 38 | 0 | 20k+ | | | Output is not escaped |
| #5109 | OneClick Chat to Order | 49 | 677 | 41 | 40k+ | | | Text Domain Mismatch |
| #5110 | Plugins Last Updated Column | 49 | 21 | 14 | 700 | | | Output is not escaped |
| #5111 | Post/Page Specific Custom Code | 49 | 21 | 14 | 7k+ | | | Output is not escaped |
| #5112 | Read Meter – Reading Time & Progress Bar | 49 | 39 | 50 | 10k+ | | | Request data is not unslashed |
| #5113 | ReCrawler | 49 | 10 | 40 | 4k+ | | | Direct Query |
| #5114 | Registered Users Only | 49 | 14 | 14 | 2k+ | | | Unsafe printing function |
| #5115 | Responsive Image Widget | 49 | 43 | 0 | 400 | | | Output is not escaped |
| #5116 | Scroll Back To Top Button | 49 | 73 | 1 | 3k+ | | | Missing Arg Domain |
| #5117 | Search in Place | 49 | 74 | 57 | 3k+ | | | wp function not compatible with requires wp |
| #5118 | Secondary Product Image for WooCommerce | 49 | 25 | 29 | 2k+ | | | Output is not escaped |
| #5119 | Simple MyISAM to InnoDB | 49 | 11 | 22 | 1k+ | | | Output is not escaped |
| #5120 | Simple Post Expiration | 49 | 47 | 10 | 400 | | | Text Domain Mismatch |
| #5121 | SKT Themes Demo Import | 49 | 218 | 104 | 4k+ | | | Text Domain Mismatch |
| #5122 | Songkick Concerts and Festivals | 49 | 9 | 48 | 500 | | | Input is not sanitized |
| #5123 | SpinupWP | 49 | 43 | 38 | 30k+ | | | Non-prefixed function |
| #5124 | Stop Pinging Yourself | 49 | 47 | 8 | 600 | | | Non Singular String Literal Domain |
| #5125 | Taxonomy Images | 49 | 38 | 50 | 9k+ | | | Output is not escaped |
| #5126 | UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks | 49 | 34 | 38 | 40k+ | | | Missing direct file access protection |
| #5127 | Users by Date Registered | 49 | 13 | 20 | 1k+ | | | Nonce verification recommended |
| #5128 | Video Background | 49 | 35 | 26 | 9k+ | | | Unsafe printing function |
| #5129 | Was This Helpful? | 49 | 19 | 28 | 1k+ | | | Output is not escaped |
| #5130 | Gateway for Wise on WooCommerce | 49 | 28 | 30 | 1k+ | | | Output is not escaped |
| #5131 | PDF Invoices & Packing Slips for WooCommerce – Challan | 49 | 56 | 151 | 4k+ | | | Non-prefixed global variable |
| #5132 | Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit | 49 | 5 | 145 | 1k+ | | | Missing nonce verification |
| #5133 | WooBuilder | 49 | 20 | 17 | 700 | | | Output is not escaped |
| #5134 | Product Slider, Product Grid, Product Masonry | 49 | 55 | 144 | 10k+ | | | wp function not compatible with requires wp |
| #5135 | WP Post Disclaimer | 49 | 34 | 27 | 800 | | | Output is not escaped |
| #5136 | WP Sitemap Page | 49 | 43 | 14 | 200k+ | | | Missing Translators Comment |
| #5137 | WP Smart Import : Import any XML File to WordPress | 49 | 28 | 302 | 1k+ | | | Non-prefixed global variable |
| #5138 | WP Swiper | 49 | 67 | 28 | 5k+ | | | Text Domain Mismatch |
| #5139 | WP User Groups | 49 | 44 | 32 | 600 | | | Missing Translators Comment |
| #5140 | WPC Estimated Delivery Date for WooCommerce | 49 | 9 | 83 | 10k+ | | | Non-prefixed global variable |
| #5141 | Advanced Custom Fields – Taxonomy Field add-on | 50 | 57 | 4 | 1k+ | | | Non Singular String Literal Domain |
| #5142 | Aspexi Social Media Sidebox | 50 | 175 | 12 | 700 | | | Text Domain Mismatch |
| #5143 | Auto Ping Booster Free | 50 | 18 | 21 | 900 | | | Setting is missing a sanitization callback |
| #5144 | Bangla Fonts Collection | 50 | 47 | 3 | 400 | | | Text Domain Mismatch |
| #5145 | Booster for WPForms | 50 | 79 | 45 | 700 | | | Text Domain Mismatch |
| #5146 | BuddyPress Groups Extras | 50 | 30 | 51 | 400 | | | Missing direct file access protection |
| #5147 | Category AJAX Filter — Advanced Filter for Posts & Custom Post Types | 50 | 2 | 435 | 6k+ | | | Non-prefixed global variable |
| #5148 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | | | block api version too low |
| #5149 | Customize Tawk.to Widget | 50 | 21 | 28 | 500 | | | Request data is not unslashed |
| #5150 | Dashboard To-Do List | 50 | 21 | 8 | 1k+ | | | Unsafe printing function |