| #5301 | Preserved HTML Editor Markup | 53 | 12 | 22 | 600 | | | Output is not escaped |
| #5302 | Preserved HTML Editor Markup Plus | 53 | 12 | 22 | 3k+ | | | Output is not escaped |
| #5303 | pretix widget | 53 | 25 | 39 | 400 | | | Non-prefixed global variable |
| #5304 | Pure Metafields | 53 | 5 | 130 | 10k+ | | | Non-prefixed global variable |
| #5305 | RDFa Breadcrumb | 53 | 27 | 13 | 600 | | | Output is not escaped |
| #5306 | REST API Featured Image | 53 | 34 | 16 | 700 | | | Output is not escaped |
| #5307 | Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely | 53 | 34 | 90 | 20k+ | | | Database parameter is not escaped |
| #5308 | Send Email From Admin | 53 | 27 | 13 | 700 | | | Text Domain Mismatch |
| #5309 | Shamor | 53 | 55 | 12 | 400 | | | wp function not compatible with requires wp |
| #5310 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #5311 | Simple Copy Post Button | 53 | 14 | 24 | 400 | | | Input is not sanitized |
| #5312 | Simple Masonry Layout | 53 | 28 | 28 | 1k+ | | | Output is not escaped |
| #5313 | Skroutz Analytics for WooCommerce | 53 | 57 | 15 | 1k+ | | | Text Domain Mismatch |
| #5314 | Social Media Widget | 53 | 90 | 21 | 30k+ | | | Text Domain Mismatch |
| #5315 | SoundPress Plugin | 53 | 44 | 3 | 1k+ | | | Output is not escaped |
| #5316 | Texty – SMS Notification for WordPress, WooCommerce, Dokan and more | 53 | 31 | 34 | 8k+ | | | Output is not escaped |
| #5317 | Morning for WooCommerce | 53 | 7 | 59 | 1k+ | | | Non-prefixed global variable |
| #5318 | Weight Based Shipping for WooCommerce | 53 | 48 | 41 | 60k+ | | | Missing direct file access protection |
| #5319 | Widget Context | 53 | 14 | 20 | 40k+ | | | Non-prefixed hook name |
| #5320 | Widget Icon | 53 | 53 | 10 | 700 | | | Output is not escaped |
| #5321 | Widgets Reloaded | 53 | 62 | 20 | 1k+ | | | Output is not escaped |
| #5322 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | | | Non-prefixed global variable |
| #5323 | WP Console – WordPress PHP Console powered by PsySH | 53 | 34 | 48 | 20k+ | | | Exception output is not escaped |
| #5324 | WP Login Logo | 53 | 28 | 9 | 500 | | | Unsafe printing function |
| #5325 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 600 | | | Output is not escaped |
| #5326 | WP User Switch | 53 | 8 | 46 | 1k+ | | | Input is not sanitized |
| #5327 | aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | 54 | 8 | 382 | 2k+ | | | Non-prefixed global variable |
| #5328 | AffiliateWP – Order Details For Affiliates | 54 | 62 | 27 | 2k+ | | | Output is not escaped |
| #5329 | Analytics Head | 54 | 34 | 7 | 600 | | | Output is not escaped |
| #5330 | Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder | 54 | 29 | 207 | 700 | | | Non-prefixed global variable |
| #5331 | Better Admin Bar | 54 | 27 | 63 | 3k+ | | | Non-prefixed global variable |
| #5332 | Better Menu Widget | 54 | 32 | 1 | 600 | | | Output is not escaped |
| #5333 | Blockskit | 54 | 33 | 29 | 8k+ | | | Text Domain Mismatch |
| #5334 | Booking Calendar | 54 | 28 | 87 | 50k+ | | | Mixed line endings |
| #5335 | Boostify Header Footer Builder for Elementor | 54 | 419 | 55 | 7k+ | | | Text Domain Mismatch |
| #5336 | CSV Importer | 54 | 24 | 11 | 3k+ | | | Missing direct file access protection |
| #5337 | Custom Category Templates | 54 | 11 | 11 | 3k+ | | | Unsafe printing function |
| #5338 | Customizable Post Listings | 54 | 42 | 13 | 700 | | | Deprecated parameter: the_author parameter 1 |
| #5339 | Cyr-To-Lat | 54 | 16 | 48 | 300k+ | | | Dynamic hook name |
| #5340 | Disable Media Sizes | 54 | 14 | 7 | 10k+ | | | Output is not escaped |
| #5341 | Discount Rules for WooCommerce – Disco | Dynamic Pricing, Conditions, Bulk, Bundle, BOGO | 54 | 1 | 61 | 2k+ | | | Request data is not unslashed |
| #5342 | Disqus Comment System | 54 | 17 | 33 | 40k+ | | | Non-prefixed hook name |
| #5343 | Easy Elementor Addons – Addons Pack for Elementor Page Builder | 54 | 35 | 68 | 1k+ | | | Post Not In exclude |
| #5344 | Easy Font Resize | 54 | 33 | 6 | 700 | | | Setting is missing a sanitization callback |
| #5345 | Expandable Row for Beaver Builder | 54 | 116 | 9 | 900 | | | Text Domain Mismatch |
| #5346 | Expanding Archives | 54 | 37 | 9 | 3k+ | | | Output is not escaped |
| #5347 | Extended User Search In WP-Admin | 54 | 14 | 17 | 1k+ | | | SQL query is not prepared |
| #5348 | F2 Tag Cloud Widget | 54 | 66 | 2 | 500 | | | Output is not escaped |
| #5349 | F4 Media Taxonomies | 54 | 7 | 39 | 1k+ | | | Input is not sanitized |
| #5350 | FireCask Like & Share Button | 54 | 32 | 6 | 400 | | | Output is not escaped |