| #6401 | ShinyStat Widget | 72 | 14 | 2 | 800 | | | Output is not escaped |
| #6402 | Advanced Custom Fields – Widget Relationship Field add-on | 73 | 18 | 7 | 500 | | | Output is not escaped |
| #6403 | AffiliateWP – Allowed Products | 73 | 47 | 19 | 1k+ | | | Text Domain Mismatch |
| #6404 | Albacross for WordPress | 73 | 18 | 5 | 1k+ | | | Text Domain Mismatch |
| #6405 | ANAC XML Viewer | 73 | 21 | 1 | 1k+ | | | Output is not escaped |
| #6406 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | | | Non-prefixed function |
| #6407 | Bestfreebie Elementor Icons | 73 | 27 | 13 | 400 | | | Text Domain Mismatch |
| #6408 | Block Plugin Update | 73 | 9 | 10 | 6k+ | | | Missing direct file access protection |
| #6409 | BuddyPress Activity Shortcode | 73 | 9 | 14 | 2k+ | | | Non-prefixed hook name |
| #6410 | Clone Woo Orders – Free by WP Masters | 73 | 13 | 8 | 900 | | | Output is not escaped |
| #6411 | Conditionally display featured image on singular posts and pages | 73 | 17 | 6 | 30k+ | | | Output is not escaped |
| #6412 | Connect Polylang for Elementor | 73 | 1 | 21 | 100k+ | | | Nonce verification recommended |
| #6413 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | | | Text Domain Mismatch |
| #6414 | Contact Form7: Autocomplete | 73 | 27 | 8 | 500 | | | Text Domain Mismatch |
| #6415 | Continue Shopping for WooCommerce | 73 | 9 | 20 | 5k+ | | | Input is not sanitized |
| #6416 | Custom Datepicker NMR | 73 | 4 | 12 | 1k+ | | | Missing Version |
| #6417 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | | | Non-prefixed hook name |
| #6418 | Dash Notifier | 73 | 12 | 6 | 20k+ | | | Heredoc Output Not Escaped |
| #6419 | Email Test – Check if your emails are being delivered | 73 | 8 | 7 | 1k+ | | | Exception output is not escaped |
| #6420 | Emergency password reset | 73 | 56 | 14 | 800 | | | wp function not compatible with requires wp |
| #6421 | EU Withdrawal Button for WooCommerce | 73 | | 27 | 400 | | | Missing nonce verification |
| #6422 | EXMAGE – WordPress Image Links | 73 | 14 | 34 | 6k+ | | | Missing Arg Domain |
| #6423 | Export Media Library | 73 | 5 | 5 | 30k+ | | | Output is not escaped |
| #6424 | Export Plugin Details | 73 | 13 | 6 | 2k+ | | | Output is not escaped |
| #6425 | Force Password Change | 73 | 4 | 10 | 400 | | | Missing nonce verification |
| #6426 | Freetobook Responsive Widget | 73 | 5 | 14 | 500 | | | Input is not sanitized |
| #6427 | Genesis Widget Column Classes | 73 | 41 | 4 | 5k+ | | | Non Singular String Literal Domain |
| #6428 | Gravity Fieldset for Gravity Forms | 73 | 14 | 1 | 900 | | | Output is not escaped |
| #6429 | Hide WP Toolbar | 73 | 4 | 13 | 1k+ | | | trademarked term |
| #6430 | Infinite Notification – Sales Notification Plugin | 73 | 13 | 5 | 500 | | | Setting is missing a sanitization callback |
| #6431 | International Phone Number Format | 73 | 51 | 20 | 400 | | | Text Domain Mismatch |
| #6432 | jQuery Lightbox For Native Galleries | 73 | 26 | 7 | 4k+ | | | Text Domain Mismatch |
| #6433 | Meks Easy Ads Widget | 73 | 21 | 9 | 10k+ | | | Output is not escaped |
| #6434 | Meta Description | 73 | 5 | 9 | 400 | | | Input is not validated |
| #6435 | Mortgage Calculators WP | 73 | 18 | 123 | 3k+ | | | Non-prefixed global variable |
| #6436 | Multifile Upload Field for Contact Form 7 | 73 | 41 | 7 | 5k+ | | | Text Domain Mismatch |
| #6437 | My Simple Space | 73 | 21 | 3 | 8k+ | | | Output is not escaped |
| #6438 | NETOPIA Payments Payment Gateway | 73 | 3 | 31 | 10k+ | | | Missing nonce verification |
| #6439 | Weight zone shipping for WooCommerce | 73 | 25 | 13 | 1k+ | | | Missing Translators Comment |
| #6440 | Osom Modal Login | 73 | 40 | 12 | 400 | | | Text Domain Mismatch |
| #6441 | PDF viewer for Elementor & Gutenberg | 73 | 14 | 12 | 10k+ | | | Nonce verification recommended |
| #6442 | Permalinks Moved Permanently | 73 | 7 | 7 | 700 | | | Database parameter is not escaped |
| #6443 | Website Optimization – Plerdy | 73 | 48 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #6444 | Plugin Groups | 73 | 16 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #6445 | POKY – Product Importer | 73 | 6 | 12 | 700 | | | Input is not validated |
| #6446 | Popup for Contact Form 7 | 73 | 13 | 7 | 800 | | | Setting is missing a sanitization callback |
| #6447 | Product Bundles – Bulk Discounts | 73 | 31 | 7 | 600 | | | Text Domain Mismatch |
| #6448 | Product Category Dropdowns | 73 | 19 | 3 | 900 | | | Output is not escaped |
| #6449 | Remove Taxonomy URL | 73 | 17 | 16 | 1k+ | | | Output is not escaped |
| #6450 | Restaurant Food Menu by WP Darko – Drag & Drop Restaurant Menu Builder for WordPress | 73 | 1 | 68 | 400 | | | Non-prefixed global variable |