RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#6201Hand Talk69344400Output is not escaped
#6202HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service691512k+Output is not escaped
#6203简数采集器695251k+Request data is not unslashed
#6204Mailster WordPress Newsletter Plugin6914118k+Output is not escaped
#6205Gist All-In-One Marketing – Live Chat, Popups, Email692411500Output is not escaped
#6206Media Slider for Photos Images Videos6910232k+Missing Version
#6207Patterns Kit6918253k+Missing direct file access protection
#6208Payment Gateway for PhonePe and for Woocommerce691514900Non Singular String Literal Domain
#6209PDF.js Viewer69143820k+Non-prefixed global variable
#6210Post Featured Video69415900Missing nonce verification
#6211PrivacyBee – Datenschutz im Autopilot691927600Non-prefixed global variable
#6212Rename Taxonomies by WebMan693271k+Missing Arg Domain
#6213Rife Extensions & Templates for Elementor6922720k+Output is not escaped
#6214Scroll Down Arrow693030800Missing Arg Domain
#6215Search by SKU for Woocommerce69131010k+Direct Query
#6216Search & Filter69212850k+Input is not sanitized
#6217Shoppable Social Media Galleries by Sauce6913132k+Non-prefixed function
#6218Simple Login Lockdown691364k+Output is not escaped
#6219Simple Mathjax692934k+Short PHP open tag found
#6220Simple YouTube Embed6911115k+Nonce verification recommended
#6221SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)69179527k+Non-prefixed global variable
#6222Sticky Header Effects for Elementor6935471300k+Text Domain Mismatch
#6223TJ Custom CSS6918108k+Output is not escaped
#6224Easy Username Updater69192810k+Missing Arg Domain
#6225VWE – Voorheen Autodealers.nl692310500curl curl setopt
#6226WC Variations Radio Buttons6912213k+Non-prefixed global variable
#6227WP Disable Automatic Updates691482k+Output is not escaped
#6228Export WordPress Menus6994221k+wp function not compatible with requires wp
#6229WP Mapa Politico España693212400Output is not escaped
#6230WP Original Media Path693536k+Non Singular String Literal Domain
#6231WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics)69924700Non-prefixed constant
#6232Zapper Payments691111600Output is not escaped
#6233Add Widget After Content706117k+Setting is missing a sanitization callback
#6234In-feed ads for Google AdSense7020206k+Non-prefixed global variable
#6235Ambrosite Next/Previous Page Link Plus701121900Interpolated SQL is not prepared
#6236Animentor – Lottie & Bodymovin for Elementor701884k+Output is not escaped
#6237AppScenic – Smart AI Dropshipping7016413k+Dynamic hook name
#6238Private Store for WooCommerce B2B & Wholesale by B2BKing70868600Text Domain Mismatch
#6239BestPrice Analytics Integration7035101k+Text Domain Mismatch
#6240Checkfront Online Booking System7032162k+wp function not compatible with requires wp
#6241Comment Form CSRF Protection70710500Request data is not unslashed
#6242Comment Form Js Validation702382k+Missing Arg Domain
#6243Lead info with country for Contact Form 77025283k+Text Domain Mismatch
#6244ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators70912800Output is not escaped
#6245Custom Currency for WooCommerce706352k+Missing direct file access protection
#6246WebDefender Security – Protection & AntiSpam70176611k+wp function not compatible with requires wp
#6247Gutenberg Blocks Templates – 50+ Free Gutenberg Block Designs70223700Request data is not unslashed
#6248Yoast Duplicate Post708884m+Nonce verification recommended
#6249Easy Hotel – Powerful Hotel Booking7041,900800Non-prefixed global variable
#6250Embed Code – Headers & Footers by DesignBombs701954k+Output is not escaped