| #7301 | Form Input Masks For Elementor Forms | 35 | 3 | 1 | 10k+ | | | Hidden files included |
| #7302 | Friendly Captcha for WordPress | 35 | 192 | 62 | 9k+ | | | Output is not escaped |
| #7303 | FrontBlocks for Gutenberg/GeneratePress | 35 | 10 | 7 | 500 | | | Offloaded Content |
| #7304 | Frontend Reset Password | 35 | 83 | 128 | 10k+ | | | Text Domain Mismatch |
| #7305 | Full Width Banner Slider Wp | 35 | 239 | 140 | 2k+ | | | Output is not escaped |
| #7306 | g-FFL Cockpit | 35 | 18 | 224 | 500 | | | Direct Query |
| #7307 | GA4WP – Analytics Dashboard for the Website | 35 | 434 | 157 | 2k+ | | | Text Domain Mismatch |
| #7308 | Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery | 35 | 50 | 199 | 10k+ | | | Non-prefixed global variable |
| #7309 | GD bbPress Attachments | 35 | 2 | 10 | 6k+ | | | wp redirect wp redirect |
| #7310 | GDPR Compliance & Cookie Consent | 35 | 251 | 61 | 4k+ | | | Output is not escaped |
| #7311 | Genesis Simple Sidebars | 35 | 9 | 51 | 10k+ | | | Nonce verification recommended |
| #7312 | GeoTargeting Lite – WordPress Geolocation | 35 | 66 | 79 | 1k+ | | | Output is not escaped |
| #7313 | Get a Newsletter | 35 | 138 | 144 | 400 | | | Output is not escaped |
| #7314 | Give – Cloudflare Turnstile | 35 | 3 | 2 | 600 | | | Hidden files included |
| #7315 | Give – Divi Donation Modules | 35 | 286 | 12 | 600 | | | Text Domain Mismatch |
| #7316 | Glossary | 35 | 169 | 93 | 2k+ | | | Non Singular String Literal Domain |
| #7317 | GLS Shipping for WooCommerce | 35 | 2 | 0 | 2k+ | | | Hidden files included |
| #7318 | GNU Terry Pratchett | 35 | 2 | 1 | 1k+ | | | Hidden files included |
| #7319 | Google Analytics Opt-Out | 35 | 34 | 7 | 5k+ | | | Output is not escaped |
| #7320 | Reviews Block for Google | 35 | 244 | 35 | 1k+ | | | Missing Arg Domain |
| #7321 | Gravitec.net – Web Push Notifications | 35 | 47 | 52 | 1k+ | | | wp function not compatible with requires wp |
| #7322 | Gravity Forms: Multiple Form Instances | 35 | 6 | 6 | 700 | | | Hidden files included |
| #7323 | Groups | 35 | 1 | 1 | 10k+ | | | Hidden files included |
| #7324 | Gum Addon for Elementor | 35 | 660 | 72 | 50k+ | | | Text Domain Mismatch |
| #7325 | Gumlet – Image optimization with Resize, Compression, Lazy load, Caching & CDN delivery | 35 | 53 | 45 | 500 | | | parse url parse url |
| #7326 | Health Check & Troubleshooting | 35 | 264 | 238 | 300k+ | | | Missing Arg Domain |
| #7327 | Heartbeat Control | 35 | 27 | 18 | 80k+ | | | Missing Arg Domain |
| #7328 | Social Comments by Heateor | 35 | 285 | 35 | 700 | | | Unsafe printing function |
| #7329 | Help Scout | 35 | 11 | 13 | 400 | | | Missing direct file access protection |
| #7330 | Highlighting Code Block | 35 | 6 | 2 | 10k+ | | | Hidden files included |
| #7331 | Hippoo Mobile App for WooCommerce | 35 | 5 | 92 | 1k+ | | | Direct Query |
| #7332 | HivePress – Business Directory, Listings & Classified Ads Plugin | 35 | 38 | 180 | 10k+ | | | Direct Query |
| #7333 | HookMeUp for WooCommerce | 35 | 59 | 29 | 10k+ | | | Output is not escaped |
| #7334 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | | | Output is not escaped |
| #7335 | HTTP Authentication | 35 | 23 | 6 | 600 | | | Output is not escaped |
| #7336 | Hyve Lite – AI Chatbot, ChatGPT-Powered Conversational Support | 35 | 1 | 40 | 7k+ | | | Direct Query |
| #7337 | Iframely – WP media embeds, cards and blocks | 35 | 136 | 43 | 2k+ | | | Unsafe printing function |
| #7338 | PDF Compressor & Watermark – iLovePDF | 35 | 216 | 5 | 600 | | | Text Domain Mismatch |
| #7339 | Image Slider | 35 | 192 | 95 | 4k+ | | | Output is not escaped |
| #7340 | Image Watermark | 35 | 85 | 181 | 40k+ | | | Missing nonce verification |
| #7341 | Image Widget | 35 | 165 | 31 | 100k+ | | | Output is not escaped |
| #7342 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | | Unsafe printing function |
| #7343 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #7344 | Imsanity | 35 | 32 | 29 | 200k+ | | | Direct Query |
| #7345 | IndieWeb | 35 | 5 | 9 | 600 | | | Non-prefixed hook name |
| #7346 | InPost PL | 35 | 2 | 938 | 10k+ | | | Non-prefixed global variable |
| #7347 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #7348 | Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor | 35 | 6 | 200 | 10k+ | | | Non-prefixed global variable |
| #7349 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | | | Text Domain Mismatch |
| #7350 | Instant CSS | 35 | 25 | 25 | 3k+ | | | Output is not escaped |