| #6201 | Hand Talk | 69 | 34 | 4 | 400 | | | Output is not escaped |
| #6202 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #6203 | 简数采集器 | 69 | 5 | 25 | 1k+ | | | Request data is not unslashed |
| #6204 | Mailster WordPress Newsletter Plugin | 69 | 14 | 11 | 8k+ | | | Output is not escaped |
| #6205 | Gist All-In-One Marketing – Live Chat, Popups, Email | 69 | 24 | 11 | 500 | | | Output is not escaped |
| #6206 | Media Slider for Photos Images Videos | 69 | 10 | 23 | 2k+ | | | Missing Version |
| #6207 | Patterns Kit | 69 | 182 | 5 | 3k+ | | | Missing direct file access protection |
| #6208 | Payment Gateway for PhonePe and for Woocommerce | 69 | 15 | 14 | 900 | | | Non Singular String Literal Domain |
| #6209 | PDF.js Viewer | 69 | 14 | 38 | 20k+ | | | Non-prefixed global variable |
| #6210 | Post Featured Video | 69 | 4 | 15 | 900 | | | Missing nonce verification |
| #6211 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 600 | | | Non-prefixed global variable |
| #6212 | Rename Taxonomies by WebMan | 69 | 32 | 7 | 1k+ | | | Missing Arg Domain |
| #6213 | Rife Extensions & Templates for Elementor | 69 | 22 | 7 | 20k+ | | | Output is not escaped |
| #6214 | Scroll Down Arrow | 69 | 30 | 30 | 800 | | | Missing Arg Domain |
| #6215 | Search by SKU for Woocommerce | 69 | 13 | 10 | 10k+ | | | Direct Query |
| #6216 | Search & Filter | 69 | 21 | 28 | 50k+ | | | Input is not sanitized |
| #6217 | Shoppable Social Media Galleries by Sauce | 69 | 13 | 13 | 2k+ | | | Non-prefixed function |
| #6218 | Simple Login Lockdown | 69 | 13 | 6 | 4k+ | | | Output is not escaped |
| #6219 | Simple Mathjax | 69 | 29 | 3 | 4k+ | | | Short PHP open tag found |
| #6220 | Simple YouTube Embed | 69 | 11 | 11 | 5k+ | | | Nonce verification recommended |
| #6221 | SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) | 69 | 17 | 952 | 7k+ | | | Non-prefixed global variable |
| #6222 | Sticky Header Effects for Elementor | 69 | 354 | 71 | 300k+ | | | Text Domain Mismatch |
| #6223 | TJ Custom CSS | 69 | 18 | 10 | 8k+ | | | Output is not escaped |
| #6224 | Easy Username Updater | 69 | 19 | 28 | 10k+ | | | Missing Arg Domain |
| #6225 | VWE – Voorheen Autodealers.nl | 69 | 23 | 10 | 500 | | | curl curl setopt |
| #6226 | WC Variations Radio Buttons | 69 | 12 | 21 | 3k+ | | | Non-prefixed global variable |
| #6227 | WP Disable Automatic Updates | 69 | 14 | 8 | 2k+ | | | Output is not escaped |
| #6228 | Export WordPress Menus | 69 | 94 | 22 | 1k+ | | | wp function not compatible with requires wp |
| #6229 | WP Mapa Politico España | 69 | 32 | 12 | 400 | | | Output is not escaped |
| #6230 | WP Original Media Path | 69 | 35 | 3 | 6k+ | | | Non Singular String Literal Domain |
| #6231 | WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics) | 69 | 9 | 24 | 700 | | | Non-prefixed constant |
| #6232 | Zapper Payments | 69 | 11 | 11 | 600 | | | Output is not escaped |
| #6233 | Add Widget After Content | 70 | 6 | 11 | 7k+ | | | Setting is missing a sanitization callback |
| #6234 | In-feed ads for Google AdSense | 70 | 20 | 20 | 6k+ | | | Non-prefixed global variable |
| #6235 | Ambrosite Next/Previous Page Link Plus | 70 | 11 | 21 | 900 | | | Interpolated SQL is not prepared |
| #6236 | Animentor – Lottie & Bodymovin for Elementor | 70 | 18 | 8 | 4k+ | | | Output is not escaped |
| #6237 | AppScenic – Smart AI Dropshipping | 70 | 16 | 41 | 3k+ | | | Dynamic hook name |
| #6238 | Private Store for WooCommerce B2B & Wholesale by B2BKing | 70 | 86 | 8 | 600 | | | Text Domain Mismatch |
| #6239 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | | | Text Domain Mismatch |
| #6240 | Checkfront Online Booking System | 70 | 32 | 16 | 2k+ | | | wp function not compatible with requires wp |
| #6241 | Comment Form CSRF Protection | 70 | 7 | 10 | 500 | | | Request data is not unslashed |
| #6242 | Comment Form Js Validation | 70 | 23 | 8 | 2k+ | | | Missing Arg Domain |
| #6243 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #6244 | ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators | 70 | 9 | 12 | 800 | | | Output is not escaped |
| #6245 | Custom Currency for WooCommerce | 70 | 63 | 5 | 2k+ | | | Missing direct file access protection |
| #6246 | WebDefender Security – Protection & AntiSpam | 70 | 176 | 61 | 1k+ | | | wp function not compatible with requires wp |
| #6247 | Gutenberg Blocks Templates – 50+ Free Gutenberg Block Designs | 70 | 2 | 23 | 700 | | | Request data is not unslashed |
| #6248 | Yoast Duplicate Post | 70 | 8 | 88 | 4m+ | | | Nonce verification recommended |
| #6249 | Easy Hotel – Powerful Hotel Booking | 70 | 4 | 1,900 | 800 | | | Non-prefixed global variable |
| #6250 | Embed Code – Headers & Footers by DesignBombs | 70 | 19 | 5 | 4k+ | | | Output is not escaped |