| #5901 | Page in Widget | 64 | 26 | 0 | 1k+ | | | Output is not escaped |
| #5902 | Page Tag Cloud | 64 | 21 | 3 | 500 | | | Output is not escaped |
| #5903 | Pageviews | 64 | 15 | 12 | 1k+ | | | Missing Translators Comment |
| #5904 | PHP Code Widget | 64 | 22 | 1 | 80k+ | | | Output is not escaped |
| #5905 | Product Import Export for WooCommerce – Import Export Product CSV Suite | 64 | 246 | 766 | 80k+ | | | Non-prefixed global variable |
| #5906 | Retrigger Notifications Gravity Forms | 64 | 55 | 8 | 1k+ | | | Text Domain Mismatch |
| #5907 | Send From | 64 | 5 | 18 | 500 | | | Input is not sanitized |
| #5908 | Simple HTTPS Redirect | 64 | 19 | 5 | 900 | | | Output is not escaped |
| #5909 | Click to Call Button | 64 | 58 | 3 | 1k+ | | | Output is not escaped |
| #5910 | SMK Sidebar Generator | 64 | 19 | 5 | 10k+ | | | Output is not escaped |
| #5911 | Stag Custom Sidebars | 64 | 10 | 12 | 2k+ | | | Text Domain Mismatch |
| #5912 | Stancer for WooCommerce | 64 | 2 | 108 | 400 | | | Non-prefixed global variable |
| #5913 | Oceanwp sticky header | 64 | 8 | 13 | 10k+ | | | Missing nonce verification |
| #5914 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #5915 | Thumbnail Crop Position | 64 | 43 | 1 | 2k+ | | | Output is not escaped |
| #5916 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #5917 | Twitter | 64 | 27 | 23 | 9k+ | | | Missing Translators Comment |
| #5918 | WProofreader spell & grammar check plugin for WordPress | 64 | 12 | 43 | 4k+ | | | Non-prefixed global variable |
| #5919 | Werk aan de Muur | 64 | 48 | 20 | 900 | | | Non Singular String Literal Domain |
| #5920 | JTL-Connector for WooCommerce | 64 | 7 | 166 | 1k+ | | | Direct Query |
| #5921 | WP Login Door | 64 | 19 | 11 | 400 | | | Output is not escaped |
| #5922 | WP REST API Controller | 64 | 8 | 22 | 8k+ | | | Nonce verification recommended |
| #5923 | WP REST Cache | 64 | 11 | 113 | 10k+ | | | Direct Query |
| #5924 | WP Search with Algolia | 64 | 26 | 16 | 7k+ | | | Exception output is not escaped |
| #5925 | WP Term Order | 64 | 2 | 26 | 6k+ | | | Nonce verification recommended |
| #5926 | WPC Shop as a Customer for WooCommerce | 64 | 5 | 38 | 400 | | | Request data is not unslashed |
| #5927 | YaMaps for WordPress Plugin | 64 | 21 | 30 | 10k+ | | | Non-prefixed global variable |
| #5928 | Яндекс.ПДС Пингер / Yandex Site search pinger | 64 | 21 | 5 | 800 | | | Output is not escaped |
| #5929 | ACF: Sidebar Selector | 65 | 27 | 2 | 800 | | | Output is not escaped |
| #5930 | AdSimple Cookie Consent Banner | 65 | 55 | 109 | 600 | | | wp function not compatible with requires wp |
| #5931 | AI Provider for Google | 65 | 32 | 1 | 20k+ | | | Exception output is not escaped |
| #5932 | Authorizer | 65 | 3 | 54 | 5k+ | | | Nonce verification recommended |
| #5933 | Banner Upload | 65 | 36 | 4 | 500 | | | Output is not escaped |
| #5934 | Contact Form 7 – Success Page Redirects | 65 | 5 | 15 | 10k+ | | | Input is not sanitized |
| #5935 | Creta Testimonial Showcase | 65 | 28 | 41 | 3k+ | | | Non-prefixed global variable |
| #5936 | Custom Global Variables | 65 | 14 | 12 | 5k+ | | | Output is not escaped |
| #5937 | Custom Product Tabs for WooCommerce WP All Import Add-on | 65 | 18 | 18 | 1k+ | | | Non-prefixed global variable |
| #5938 | Custom Share Buttons with Floating Sidebar | 65 | 164 | 20 | 4k+ | | | Text Domain Mismatch |
| #5939 | Cyr to Lat Reloaded – Transliteration of Links and File Names | 65 | 13 | 36 | 30k+ | | | Direct Query |
| #5940 | Dashboard Directory Size | 65 | 32 | 9 | 400 | | | Missing Arg Domain |
| #5941 | Disable REST API | 65 | 12 | 15 | 90k+ | | | Output is not escaped |
| #5942 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | | | Text Domain Mismatch |
| #5943 | QRCode | 65 | 21 | 39 | 400 | | | Non-prefixed constant |
| #5944 | Easy Twitter Feed Widget Plugin | 65 | 90 | 15 | 10k+ | | | Text Domain Mismatch |
| #5945 | EDD Hide Download | 65 | 13 | 13 | 600 | | | Output is not escaped |
| #5946 | Email Tracker | 65 | 25 | 4 | 800 | | | SQL query is not prepared |
| #5947 | Live Chat with Messenger Customer Chat | 65 | 10 | 23 | 3k+ | | | Input is not sanitized |
| #5948 | Featured Galleries | 65 | 15 | 10 | 3k+ | | | Output is not escaped |
| #5949 | Futy.io Leadbots | 65 | 73 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #5950 | Genesis Visual Hook Guide | 65 | 13 | 14 | 700 | | | Nonce verification recommended |