| #6301 | Add Any Extension to Pages | 71 | 3 | 10 | 2k+ | | | Input is not sanitized |
| #6302 | Change Administrator Email Address | 71 | 12 | 9 | 700 | | | Output is not escaped |
| #6303 | Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder | 71 | 21 | 207 | 700 | | | Non-prefixed global variable |
| #6304 | Another Mailchimp Widget | 71 | 28 | 17 | 4k+ | | | Missing Translators Comment |
| #6305 | Bold Timeline Lite | 71 | 220 | 561 | 10k+ | | | Non-prefixed global variable |
| #6306 | Bootstrap Shortcodes | 71 | 21 | 11 | 5k+ | | | Missing direct file access protection |
| #6307 | BuddyPress Default Data | 71 | 8 | 21 | 400 | | | Interpolated SQL is not prepared |
| #6308 | Social Chat Widget (⚡ by Callbell) | 71 | 11 | 6 | 600 | | | Output is not escaped |
| #6309 | Comfortable Reading | 71 | 16 | 8 | 1k+ | | | Output is not escaped |
| #6310 | commonWP | 71 | 18 | 33 | 400 | | | Non-prefixed hook name |
| #6311 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | | | Text Domain Mismatch |
| #6312 | Cresta Social Messenger | 71 | 9 | 10 | 1k+ | | | Non-prefixed function |
| #6313 | Easy Sticky Buttons | 71 | 21 | 16 | 600 | | | Short PHP open tag found |
| #6314 | Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event | 71 | 24 | 49 | 700 | | | Non-prefixed global variable |
| #6315 | GPX Viewer | 71 | 10 | 26 | 900 | | | Missing Version |
| #6316 | Link Checker Pro | 71 | 6 | 25 | 4k+ | | | Non-prefixed function |
| #6317 | Meks Time Ago | 71 | 22 | 1 | 10k+ | | | Output is not escaped |
| #6318 | Nginx Helper | 71 | 47 | 60 | 200k+ | | | Non-prefixed global variable |
| #6319 | Print Bangla News | 71 | 29 | 17 | 2k+ | | | Output is not escaped |
| #6320 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #6321 | Quick and Easy FAQs | 71 | 92 | 9 | 10k+ | | | Non Singular String Literal Domain |
| #6322 | Really Simple Click To Call Bar | 71 | 23 | 3 | 8k+ | | | Output is not escaped |
| #6323 | Repeater Fields for WPForms | 71 | 173 | 18 | 500 | | | wp function not compatible with requires wp |
| #6324 | SmartSMTP | 71 | 8 | 42 | 2k+ | | | Nonce verification recommended |
| #6325 | Social Fabric Analytics From Collective Bias | 71 | 17 | 0 | 1k+ | | | Output is not escaped |
| #6326 | Tax Switch for WooCommerce | 71 | 3 | 20 | 900 | | | Non-prefixed hook name |
| #6327 | Visual Bible Verse of the Day Widget | 71 | 27 | 1 | 900 | | | Output is not escaped |
| #6328 | Webhook for Discord | 71 | 119 | 20 | 400 | | | Text Domain Mismatch |
| #6329 | WindPress – Tailwind CSS integration for WordPress | 71 | 16 | 106 | 3k+ | | | Non-prefixed hook name |
| #6330 | Discount Rules for WooCommerce | 71 | 10 | 454 | 100k+ | | | Non-prefixed global variable |
| #6331 | WooCommerce Shipping | 71 | | 48 | 70k+ | | | Direct Query |
| #6332 | Woorise – Landing Pages, Forms & Surveys | 71 | 8 | 14 | 1k+ | | | Input is not sanitized |
| #6333 | WP 4 Me Title Remover | 71 | 17 | 13 | 1k+ | | | Missing direct file access protection |
| #6334 | WP IE Buster | 71 | 13 | 3 | 800 | | | Output is not escaped |
| #6335 | Multi-Step Checkout for WooCommerce | 71 | 38 | 104 | 8k+ | | | Non-prefixed global variable |
| #6336 | WP No Base Permalink | 71 | 8 | 10 | 10k+ | | | Unsafe printing function |
| #6337 | WP Widget in Navigation | 71 | 37 | 15 | 3k+ | | | Non Singular String Literal Domain |
| #6338 | WPGraphQL Smart Cache | 71 | 87 | 9 | 7k+ | | | Text Domain Mismatch |
| #6339 | WPS Notice Center | 71 | 12 | 7 | 3k+ | | | Unsafe printing function |
| #6340 | Zapier for WordPress | 71 | 11 | 21 | 50k+ | | | Input is not sanitized |
| #6341 | Web Accessibility by accessiBe | 72 | 1 | 25 | 10k+ | | | Input is not sanitized |
| #6342 | Advanced WordPress Backgrounds | 72 | 21 | 7 | 30k+ | | | Output is not escaped |
| #6343 | Amazing Affiliates – Toolkit for Amazon Associates with Amazon Product Blocks and Amazon PAAPI5 / Creators API integration | 72 | 3 | 650 | 600 | | | Non-prefixed global variable |
| #6344 | Archiiv | 72 | 6 | 30 | 400 | | | Non-prefixed global variable |
| #6345 | Auto Featured Image from Title | 72 | 24 | 4 | 1k+ | | | Setting is missing a sanitization callback |
| #6346 | BB Delete cache | 72 | 3 | 15 | 1k+ | | | Input is not sanitized |
| #6347 | Block Archive.org via WordPress robots.txt | 72 | 9 | 8 | 400 | | | Output is not escaped |
| #6348 | Bulk Term Editor | 72 | 19 | 9 | 400 | | | Output is not escaped |
| #6349 | Call Now and Chat Buttons | 72 | 13 | 2 | 5k+ | | | Setting is missing a sanitization callback |
| #6350 | Chap Secure Password Login | 72 | 13 | 7 | 600 | | | Input is not validated |