| #6101 | WP Image Zoom | 67 | 30 | 46 | 10k+ | | | Non-prefixed global variable |
| #6102 | JAMstack Deployments | 67 | 33 | 3 | 1k+ | | | Short PHP open tag found |
| #6103 | WP Logout Redirect | 67 | 20 | 5 | 400 | | | Unsafe printing function |
| #6104 | WP SMTP Mailer – SMTP7 | 67 | 2 | 33 | 9k+ | | | Request data is not unslashed |
| #6105 | WP Notification Bars | 67 | 13 | 32 | 10k+ | | | Request data is not unslashed |
| #6106 | WP Post Branches | 67 | 16 | 12 | 4k+ | | | Nonce verification recommended |
| #6107 | wp-Typography | 67 | 91 | 33 | 20k+ | | | Missing direct file access protection |
| #6108 | WPC Show Single Variations for WooCommerce | 67 | 5 | 31 | 1k+ | | | Nonce verification recommended |
| #6109 | ACF: Yandex Maps Field | 68 | 73 | 10 | 800 | | | Text Domain Mismatch |
| #6110 | Auto Image Title & Alt | 68 | 13 | 4 | 400 | | | Missing direct file access protection |
| #6111 | Autoclear Autoptimize Cache | 68 | 16 | 3 | 8k+ | | | Output is not escaped |
| #6112 | Book Previewer for Woocommerce | 68 | 23 | 40 | 1k+ | | | Non-prefixed global variable |
| #6113 | Booter – Bots & Crawlers Manager | 68 | | 81 | 7k+ | | | Non-prefixed global variable |
| #6114 | Member Swipe for BuddyPress | 68 | 9 | 13 | 500 | | | Missing direct file access protection |
| #6115 | Category Featured Images | 68 | 5 | 12 | 600 | | | Input is not sanitized |
| #6116 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | | | Non-prefixed function |
| #6117 | Collapsing Categories | 68 | 29 | 8 | 4k+ | | | Missing direct file access protection |
| #6118 | Comment Approved | 68 | 6 | 14 | 500 | | | Input is not sanitized |
| #6119 | Controls for Contact Form 7 (Redirects, Analytics & Tracking) | 68 | 4 | 14 | 10k+ | | | Missing nonce verification |
| #6120 | ConvertBox Auto Embed WordPress plugin | 68 | 18 | 10 | 5k+ | | | Missing direct file access protection |
| #6121 | Content Security Policy Manager | 68 | 19 | 2 | 2k+ | | | Output is not escaped |
| #6122 | Default Attributes for WooCommerce | 68 | 22 | 18 | 400 | | | Non-prefixed hook name |
| #6123 | Desert Companion | 68 | 412 | 837 | 20k+ | | | Non-prefixed global variable |
| #6124 | Exchange Rates Today | 68 | 9 | 10 | 400 | | | Non-prefixed function |
| #6125 | Expire Sticky Posts | 68 | 16 | 8 | 1k+ | | | Text Domain Mismatch |
| #6126 | Export media with selected content (by DKZR) | 68 | 10 | 14 | 40k+ | | | Direct Query |
| #6127 | Faire for WooCommerce | 68 | 4 | 86 | 800 | | | Direct Query |
| #6128 | Fatal Error Notify | 68 | 10 | 12 | 6k+ | | | Request data is not unslashed |
| #6129 | Featured Video for WooCommerce | 68 | 40 | 13 | 700 | | | Text Domain Mismatch |
| #6130 | Free Assets Library – Openverse/Pixabay 600+ Million Images | 68 | 44 | 36 | 4k+ | | | Text Domain Mismatch |
| #6131 | WCAG 2.0 form fields for Gravity Forms | 68 | 11 | 13 | 5k+ | | | Output is not escaped |
| #6132 | Guestplan Booking Widget | 68 | 43 | 6 | 1k+ | | | Text Domain Mismatch |
| #6133 | Hreflang Manager – Hreflang Implementation for International SEO | 68 | 21 | 15 | 8k+ | | | wp function not compatible with requires wp |
| #6134 | 简数采集器 | 68 | 5 | 25 | 1k+ | | | Request data is not unslashed |
| #6135 | Logo Switcher | 68 | 14 | 2 | 800 | | | Output is not escaped |
| #6136 | Mailster Contact Form 7 | 68 | 35 | 20 | 1k+ | | | Text Domain Mismatch |
| #6137 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | | | Input is not validated |
| #6138 | News Magazine X Core | 68 | 63 | 30 | 5k+ | | | Missing Translators Comment |
| #6139 | One Stop Shop for WooCommerce | 68 | 23 | 83 | 10k+ | | | Input is not sanitized |
| #6140 | PagBank for WooCommerce | 68 | 8 | 36 | 3k+ | | | Input is not sanitized |
| #6141 | Pinterest Verify Meta Tag | 68 | 20 | 6 | 600 | | | Output is not escaped |
| #6142 | POS Entegratör – Gurmehub Ödeme Eklentisi | 68 | 1,321 | 69 | 1k+ | | | Text Domain Mismatch |
| #6143 | Hide Title | 68 | 13 | 6 | 900 | | | Output is not escaped |
| #6144 | Postepay Gateway per Woocommerce | 68 | 36 | 4 | 1k+ | | | Text Domain Mismatch |
| #6145 | Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls | 68 | 21 | 18 | 1k+ | | | Output is not escaped |
| #6146 | Protection Against DDoS | 68 | 22 | 5 | 3k+ | | | Output is not escaped |
| #6147 | Reusable Gutenberg Blocks Widget | 68 | 24 | 9 | 500 | | | Output is not escaped |
| #6148 | Russian Post and EMS for WooCommerce | 68 | 16 | 47 | 1k+ | | | Non-prefixed global variable |
| #6149 | Series | 68 | 55 | 6 | 2k+ | | | Text Domain Mismatch |
| #6150 | SF Author Url Control | 68 | 29 | 4 | 1k+ | | | Output is not escaped |