| #6251 | Ghost | 70 | 25 | 12 | 600 | | | Output is not escaped |
| #6252 | Host Header Injection Fix | 70 | 9 | 8 | 400 | | | Output is not escaped |
| #6253 | Library | 70 | 14 | 3 | 700 | | | Output is not escaped |
| #6254 | Xpro Slider For Beaver Builder – Lite | 70 | 147 | 13 | 500 | | | Text Domain Mismatch |
| #6255 | Multipart robots.txt editor | 70 | 19 | 8 | 1k+ | | | Output is not escaped |
| #6256 | Shipping Notices and No shipping options found info for WooCommerce | 70 | 9 | 18 | 400 | | | Non-prefixed global variable |
| #6257 | onepay Payment Gateway For WooCommerce | 70 | 49 | 13 | 900 | | | Text Domain Mismatch |
| #6258 | PipraPay Gateway | 70 | 11 | 6 | 400 | | | Output is not escaped |
| #6259 | Portfolio Post Type | 70 | 7 | 11 | 50k+ | | | Nonce verification recommended |
| #6260 | Post Grid & Post Slider – Carousel, Filter Tabs & Related Posts | 70 | 6 | 53 | 1k+ | | | Request data is not unslashed |
| #6261 | Press This | 70 | 1 | 44 | 5k+ | | | Non-prefixed hook name |
| #6262 | Purchased Items Column for WooCommerce Orders | 70 | 10 | 8 | 800 | | | Output is not escaped |
| #6263 | Remove Taxonomy Base Slug | 70 | 12 | 18 | 5k+ | | | Deprecated parameter: get_terms parameter 2 |
| #6264 | Ridhi Companion | 70 | 37 | 38 | 500 | | | Non-prefixed global variable |
| #6265 | RSS Importer | 70 | 14 | 2 | 30k+ | | | Output is not escaped |
| #6266 | Search and Replace | 70 | 7 | 9 | 10k+ | | | Input is not sanitized |
| #6267 | Show-Hide / Collapse-Expand | 70 | 18 | 15 | 10k+ | | | Missing direct file access protection |
| #6268 | Show IP address | 70 | 6 | 20 | 1k+ | | | Input is not sanitized |
| #6269 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | | | date date |
| #6270 | Simple Post Notes | 70 | 5 | 16 | 9k+ | | | Request data is not unslashed |
| #6271 | Simple Site Verify | 70 | 20 | 0 | 900 | | | Output is not escaped |
| #6272 | Simple Sticky Header on Scroll | 70 | 31 | 8 | 900 | | | Output is not escaped |
| #6273 | Smart WYSIWYG Blocks Of Content | 70 | 36 | 4 | 1k+ | | | Output is not escaped |
| #6274 | Spocket ‑ US & EU Dropshipping | 70 | 15 | 31 | 1k+ | | | Direct Query |
| #6275 | SQL Executioner | 70 | 18 | 17 | 2k+ | | | Non-prefixed global variable |
| #6276 | Stitch Express | 70 | 10 | 6 | 400 | | | Output is not escaped |
| #6277 | SubHeading | 70 | 22 | 13 | 1k+ | | | Non Singular String Literal Domain |
| #6278 | Support Me | 70 | 12 | 6 | 900 | | | Unsafe printing function |
| #6279 | Today's Date Inserter | 70 | 32 | 1 | 700 | | | Output is not escaped |
| #6280 | TP Product Image Flipper for WooCommerce | 70 | 17 | 15 | 9k+ | | | Non-prefixed function |
| #6281 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #6282 | Export Users With Meta | 70 | 13 | 13 | 2k+ | | | Direct Query |
| #6283 | User Location and IP | 70 | 2 | 25 | 400 | | | Input is not sanitized |
| #6284 | Block Emails & Addresses for WooCommerce Checkout | 70 | 4 | 12 | 700 | | | error log set error handler |
| #6285 | WEBKINDER Integration for Google Analytics and Google Tag Manager | 70 | 15 | 22 | 10k+ | | | Output is not escaped |
| #6286 | Bulk Price Update for Woocommerce | 70 | 2 | 28 | 2k+ | | | Request data is not unslashed |
| #6287 | Cart All In One For WooCommerce | 70 | 6 | 150 | 5k+ | | | Non-prefixed global variable |
| #6288 | Related Products for WooCommerce | 70 | 12 | 12 | 3k+ | | | Setting is missing a sanitization callback |
| #6289 | Quick Buy For Woocommerce | 70 | 105 | 22 | 1k+ | | | Text Domain Mismatch |
| #6290 | WP Calorie Calculator | 70 | 22 | 55 | 1k+ | | | Non-prefixed global variable |
| #6291 | WP Image Borders | 70 | 47 | 6 | 2k+ | | | Text Domain Mismatch |
| #6292 | Post Template | 70 | 12 | 11 | 400 | | | Missing nonce verification |
| #6293 | WPThumb | 70 | 30 | 9 | 800 | | | Output is not escaped |
| #6294 | Download Manager Addons for Elementor | 70 | 272 | 13 | 6k+ | | | Non Singular String Literal Domain |
| #6295 | Yampi Checkout | 70 | 6 | 10 | 900 | | | Nonce verification recommended |
| #6296 | aapanel WP Toolkit | 71 | 20 | 18 | 2k+ | | | wp function not compatible with requires wp |
| #6297 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | | | curl curl setopt |
| #6298 | ACF Enhanced Message Field | 71 | 29 | 1 | 600 | | | Text Domain Mismatch |
| #6299 | Advanced Custom Fields: Price Field | 71 | 12 | 7 | 400 | | | Output is not escaped |
| #6300 | ACF Tooltip | 71 | 16 | 3 | 1k+ | | | Output is not escaped |