| #5951 | MW WP Form reCAPTCHA | 65 | 11 | 14 | 2k+ | | | Input is not sanitized |
| #5952 | Notibar – Notification Bar for WordPress | 65 | 43 | 62 | 8k+ | | | wp function not compatible with requires wp |
| #5953 | Product Image and Video Gallery Slider for WooCommerce | 65 | 13 | 7 | 700 | | | Output is not escaped |
| #5954 | QR Code Composer – Automatic QR Code Generator | 65 | 33 | 2 | 3k+ | | | Output is not escaped |
| #5955 | Read More Excerpt Link | 65 | 19 | 8 | 3k+ | | | Output is not escaped |
| #5956 | Reading progressbar | 65 | 25 | 2 | 6k+ | | | Output is not escaped |
| #5957 | Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini | 65 | 6 | 33 | 6k+ | | | Interpolated SQL is not prepared |
| #5958 | Slider Revolution Search Replace | 65 | 5 | 14 | 900 | | | Input is not validated |
| #5959 | SocketLabs | 65 | 15 | 18 | 900 | | | Output is not escaped |
| #5960 | SQL Buddy – Database Management Made Easy | 65 | 12 | 16 | 5k+ | | | SQL query is not prepared |
| #5961 | T4B News Ticker – Responsive News Scroller, Slider, and Animations | 65 | 20 | 10 | 7k+ | | | Output is not escaped |
| #5962 | WebberZone Top 10 — Popular Posts | 65 | 37 | 176 | 10k+ | | | Database parameter is not escaped |
| #5963 | User Last Login | 65 | 27 | 5 | 600 | | | Output is not escaped |
| #5964 | Lime Connect (formerly Userlike) – WordPress Live Chat plugin | 65 | 22 | 3 | 900 | | | Output is not escaped |
| #5965 | Web and WooCommerce Addons for WPBakery Builder | 65 | 497 | 123 | 1k+ | | | Text Domain Mismatch |
| #5966 | Vf Expansion | 65 | 58 | 52 | 1k+ | | | Non-prefixed global variable |
| #5967 | VK Link Target Controller | 65 | 13 | 10 | 30k+ | | | Output is not escaped |
| #5968 | Websitescanner Custom Schema | 65 | 28 | 19 | 600 | | | wp function not compatible with requires wp |
| #5969 | Add to Cart Text Changer and Customize Button, Add Custom Icon | 65 | 87 | 18 | 2k+ | | | Text Domain Mismatch |
| #5970 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | | | Exception output is not escaped |
| #5971 | AI Product Gallery Slider for WooCommerce, Slider, Zoom, Video & Variation Images – WPBean | 65 | 264 | 16 | 2k+ | | | Text Domain Mismatch |
| #5972 | Ajaxify Comments – Ajax and Lazy Loading Comments | 65 | 20 | 38 | 3k+ | | | Non-prefixed hook name |
| #5973 | WP Change Default From Email | 65 | 51 | 7 | 10k+ | | | Non Singular String Literal Domain |
| #5974 | WP-Farsi | 65 | 26 | 36 | 600 | | | Non-prefixed function |
| #5975 | WP Max Submit Protect | 65 | 19 | 12 | 400 | | | Output is not escaped |
| #5976 | WP SEO HTML Sitemap | 65 | 22 | 15 | 6k+ | | | Output is not escaped |
| #5977 | WPC Free Gift Coupons for WooCommerce | 65 | 8 | 25 | 400 | | | Non-prefixed class |
| #5978 | AC Advanced Flamingo Settings | 66 | 6 | 32 | 700 | | | Nonce verification recommended |
| #5979 | ACF RGBA Color Picker | 66 | 37 | 3 | 6k+ | | | Text Domain Mismatch |
| #5980 | ACF: Rus-To-Lat | 66 | 15 | 11 | 2k+ | | | Output is not escaped |
| #5981 | CP Media Player – Audio Player and Video Player | 66 | 224 | 48 | 3k+ | | | Text Domain Mismatch |
| #5982 | WPAdmin AWS CDN | 66 | 161 | 42 | 500 | | | Text Domain Mismatch |
| #5983 | Password Reset with Code for WordPress REST API | 66 | 24 | 8 | 900 | | | Exception output is not escaped |
| #5984 | Black Ribbon | 66 | 29 | 5 | 500 | | | Output is not escaped |
| #5985 | Bopo – WooCommerce Product Bundle Builder | 66 | 137 | 135 | 1k+ | | | Text Domain Mismatch |
| #5986 | Bulk Term Generator – Import multiple tags, categories, and taxonomies easily | 66 | 8 | 31 | 2k+ | | | Request data is not unslashed |
| #5987 | Calculated fields for ACF | 66 | 5 | 18 | 1k+ | | | Non-prefixed global variable |
| #5988 | Social comments by WpDevArt | 66 | 9 | 19 | 8k+ | | | Missing Version |
| #5989 | Cookie Warning | 66 | 14 | 15 | 700 | | | Non-prefixed function |
| #5990 | Custom Author Byline | 66 | 11 | 8 | 500 | | | Output is not escaped |
| #5991 | Custom Login Page Templates – Change Logo, Background and CSS | 66 | 25 | 5 | 2k+ | | | Missing Arg Domain |
| #5992 | Custom Posts Per Page | 66 | 20 | 2 | 900 | | | Unsafe printing function |
| #5993 | Custom Posts Per Page Reloaded | 66 | 40 | 3 | 700 | | | Text Domain Mismatch |
| #5994 | Debug Log Manager – Conveniently Monitor and Inspect Errors | 66 | 33 | 44 | 10k+ | | | Input is not validated |
| #5995 | No Right Click, Content Copy Protection, Disable Right Click by RB | 66 | 23 | 2 | 600 | | | Unsafe printing function |
| #5996 | Duplicate Menu | 66 | 11 | 7 | 100k+ | | | Unsafe printing function |
| #5997 | Easy PHP Settings | 66 | 34 | 48 | 1k+ | | | Missing Translators Comment |
| #5998 | Elementic | 66 | 22 | 9 | 900 | | | Text Domain Mismatch |
| #5999 | Estatik Mortgage Calculator | 66 | 22 | 6 | 1k+ | | | Output is not escaped |
| #6000 | Export Categories | 66 | 22 | 13 | 1k+ | | | Output is not escaped |