| #5401 | Feedbucket – Website Feedback Tool | 55 | 10 | 25 | 1k+ | | | Input is not validated |
| #5402 | Genesis Columns Advanced | 55 | 26 | 4 | 10k+ | | | Unsafe printing function |
| #5403 | Go Live Update Urls | 55 | 11 | 49 | 80k+ | | | Non-prefixed hook name |
| #5404 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | | | Missing Arg Domain |
| #5405 | Head Meta Data | 55 | 19 | 42 | 10k+ | | | Non-prefixed function |
| #5406 | Head, Footer and Post Injections | 55 | 9 | 52 | 200k+ | | | Non-prefixed global variable |
| #5407 | Hide Admin Menu | 55 | 18 | 27 | 20k+ | | | Non-prefixed function |
| #5408 | Holded integration | 55 | 72 | 23 | 2k+ | | | Non Singular String Literal Domain |
| #5409 | Insert Pages | 55 | 52 | 30 | 40k+ | | | Output is not escaped |
| #5410 | JetWidgets For Elementor | 55 | 99 | 279 | 10k+ | | | Non-prefixed global variable |
| #5411 | Landingi Landing Pages | 55 | 18 | 23 | 2k+ | | | Input is not sanitized |
| #5412 | LifterLMS Labs | 55 | 51 | 8 | 2k+ | | | Output is not escaped |
| #5413 | Login or Logout Menu Item | 55 | 13 | 7 | 20k+ | | | Unsafe printing function |
| #5414 | LoginPress | wp-login Custom Login Page Customizer | 55 | 125 | 308 | 200k+ | | | Non-prefixed function |
| #5415 | Mailster for WooCommerce | 55 | 23 | 32 | 1k+ | | | Non-prefixed global variable |
| #5416 | LexonRank: AI Link Building, Free Backlinks & SEO Automation | 55 | 15 | 20 | 1k+ | | | Nonce verification recommended |
| #5417 | Marvy – Background Animations for Elementor | 55 | 63 | 34 | 4k+ | | | Text Domain Mismatch |
| #5418 | Mortgage Calculator | 55 | 98 | 16 | 4k+ | | | Text Domain Mismatch |
| #5419 | Page Animations And Transitions | 55 | 89 | 67 | 1k+ | | | Non Singular String Literal Domain |
| #5420 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | | | Direct Query |
| #5421 | Page Tagger | 55 | 30 | 10 | 2k+ | | | Output is not escaped |
| #5422 | Virtual Robots.txt | 55 | 10 | 21 | 40k+ | | | Input is not validated |
| #5423 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 55 | 54 | 692 | 700k+ | | | Non-prefixed hook name |
| #5424 | Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More | 55 | 44 | 64 | 7k+ | | | Text Domain Mismatch |
| #5425 | ProductFrame – Curated products from affiliate feeds | 55 | 3 | 85 | 400 | | | Direct Query |
| #5426 | Quick and Easy Testimonials | 55 | 62 | 32 | 3k+ | | | Non Singular String Literal Domain |
| #5427 | Quick Bulk Post & Page Creator | 55 | 43 | 1 | 2k+ | | | Text Domain Mismatch |
| #5428 | Quick Bulk Term Taxonomy Creator | 55 | 37 | 2 | 400 | | | Text Domain Mismatch |
| #5429 | Refer A Friend for WooCommerce by WPGens | 55 | 77 | 21 | 1k+ | | | Text Domain Mismatch |
| #5430 | Rescue Shortcodes | 55 | 54 | 2 | 1k+ | | | Unsafe printing function |
| #5431 | Semrush Content Toolkit | 55 | 22 | 24 | 2k+ | | | Non-prefixed global variable |
| #5432 | Slider Block by Sliderberg – WordPress Slider & Carousel Plugin for Gutenberg | 55 | 23 | 19 | 1k+ | | | Output is not escaped |
| #5433 | SM Vertical Menu | 55 | 45 | 1 | 400 | | | Output is not escaped |
| #5434 | Free customer chat solution | 55 | 18 | 10 | 500 | | | Output is not escaped |
| #5435 | Text Changer for Welcart | 55 | 477 | 43 | 500 | | | Text Domain Mismatch |
| #5436 | Themeflection Numbers – Number Counter and Animated Numbers | 55 | 224 | 73 | 3k+ | | | Text Domain Mismatch |
| #5437 | Trusona for WordPress | 55 | 8 | 34 | 500 | | | Non-prefixed function |
| #5438 | VS Contact Form | 55 | 3 | 318 | 7k+ | | | Non-prefixed global variable |
| #5439 | VK Block Patterns | 55 | 8 | 61 | 100k+ | | | Non-prefixed function |
| #5440 | AAArdvark Accessibility Reports | 55 | 62 | 42 | 700 | | | Non-prefixed global variable |
| #5441 | Payment Integration Wompi – El Salvador | 55 | 50 | 27 | 800 | | | Text Domain Mismatch |
| #5442 | WP Ultimate Review | 55 | 23 | 381 | 70k+ | | | Non-prefixed global variable |
| #5443 | Image Widget by Angie Makes | 55 | 48 | 3 | 500 | | | Output is not escaped |
| #5444 | WPC Smart Messages for WooCommerce | 55 | 6 | 84 | 1k+ | | | Non-prefixed global variable |
| #5445 | Yext Plugin | 55 | 16 | 23 | 700 | | | Non-prefixed function |
| #5446 | Admin Bar Fix | 56 | 40 | 18 | 400 | | | Text Domain Mismatch |
| #5447 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #5448 | All in One SEO Pack Importer | 56 | 17 | 25 | 500 | | | Direct Query |
| #5449 | Anti-Captcha (anti-spam botblocker) | 56 | 23 | 26 | 1k+ | | | rand mt rand |
| #5450 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |