| #7451 | Pearl – Header Builder | 35 | 7 | 283 | 5k+ | | | Non-prefixed global variable |
| #7452 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | | | SQL query is not prepared |
| #7453 | Permissions Editor for Ninja Forms | 35 | 29 | 6 | 1k+ | | | Output is not escaped |
| #7454 | Phone Orders for WooCommerce | 35 | 1 | 229 | 1k+ | | | Non-prefixed hook name |
| #7455 | Pie Calendar – Events Calendar Made Simple | 35 | 83 | 53 | 1k+ | | | Text Domain Mismatch |
| #7456 | Piwik PRO | 35 | 22 | 3 | 3k+ | | | Output is not escaped |
| #7457 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | | | Unsafe printing function |
| #7458 | Planyo online reservation system | 35 | 64 | 90 | 400 | | | Output is not escaped |
| #7459 | Plausible Analytics | 35 | 244 | 61 | 10k+ | | | Exception output is not escaped |
| #7460 | Accept Cryptocurrencies with Plisio | 35 | 37 | 47 | 1k+ | | | Text Domain Mismatch |
| #7461 | Pochipp | 35 | 27 | 102 | 20k+ | | | Non-prefixed global variable |
| #7462 | Pods Alternative Cache | 35 | 1 | 0 | 5k+ | | | Hidden files included |
| #7463 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #7464 | Popular Posts | 35 | 166 | 71 | 900 | | | Unsafe printing function |
| #7465 | Popup with fancybox | 35 | 196 | 168 | 900 | | | Unsafe printing function |
| #7466 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | | | Output is not escaped |
| #7467 | Post Draft Preview | 35 | 49 | 69 | 700 | | | Text Domain Mismatch |
| #7468 | Post List Featured Image | 35 | 112 | 100 | 900 | | | Output is not escaped |
| #7469 | Post Meta Data Manager | 35 | 30 | 112 | 1k+ | | | Non-prefixed global variable |
| #7470 | Post Password Token | 35 | 132 | 38 | 600 | | | Text Domain Mismatch |
| #7471 | Posts Table with Search & Sort | 35 | 143 | 33 | 3k+ | | | Text Domain Mismatch |
| #7472 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | | | Post Not In exclude |
| #7473 | Powerful Posts Per Page (PPPP) | 35 | 4 | 1 | 1k+ | | | Hidden files included |
| #7474 | Pre-Publish Checklist | 35 | 7 | 2 | 1k+ | | | Missing direct file access protection |
| #7475 | Presto Player | 35 | 37 | 78 | 100k+ | | | Missing Arg Domain |
| #7476 | PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | 35 | 1 | 4 | 200k+ | | | Database parameter is not escaped |
| #7477 | Product Prices by User Roles for WooCommerce | 35 | 12 | 19 | 1k+ | | | Non-prefixed hook name |
| #7478 | Print, PDF & Email by PrintFriendly | 35 | 1 | 5 | 20k+ | | | Not In Footer |
| #7479 | Product Blocks for WooCommerce | 35 | 4 | 3 | 4k+ | | | slow db query tax query |
| #7480 | Product Delivery Date for WooCommerce – Lite | 35 | 171 | 27 | 1k+ | | | Text Domain Mismatch |
| #7481 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | | | Non-prefixed function |
| #7482 | Min Max Step Quantity Limits Manager for WooCommerce | 35 | 67 | 158 | 3k+ | | | Non-prefixed global variable |
| #7483 | Ninjalytics: Sales Reports & Order Export for WooCommerce and EDD | 35 | 6 | 32 | 6k+ | | | Non-prefixed global variable |
| #7484 | Pronamic Client | 35 | 111 | 48 | 700 | | | Output is not escaped |
| #7485 | Protect the Children! | 35 | 2 | 34 | 1k+ | | | Missing nonce verification |
| #7486 | Publitio | 35 | 47 | 26 | 400 | | | curl curl setopt |
| #7487 | Push Notifications by LaraPush | 35 | 32 | 76 | 5k+ | | | Non-prefixed global variable |
| #7488 | Push7 | 35 | 45 | 17 | 700 | | | Short PHP open tag found |
| #7489 | QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly | 35 | 225 | 110 | 8k+ | | | Non Singular String Literal Domain |
| #7490 | Quran multilanguage Text & Audio | 35 | 177 | 166 | 500 | | | Output is not escaped |
| #7491 | Random Post on Refresh | 35 | 3 | 8 | 500 | | | Non-prefixed hook name |
| #7492 | Flutterwave WooCommerce | 35 | 7 | 20 | 2k+ | | | Non-prefixed class |
| #7493 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | | | Request data is not unslashed |
| #7494 | Real Time Validation for Gravity Forms | 35 | 185 | 30 | 2k+ | | | Output is not escaped |
| #7495 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | | | Text Domain Mismatch |
| #7496 | Related Posts by Taxonomy | 35 | 131 | 97 | 10k+ | | | Output is not escaped |
| #7497 | Related Posts for WordPress | 35 | 207 | 180 | 10k+ | | | Output is not escaped |
| #7498 | Remove Admin Toolbar | 35 | 13 | 7 | 600 | | | Missing direct file access protection |
| #7499 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | | | wp function not compatible with requires wp |
| #7500 | ReOrder Posts within Categories | 35 | 39 | 207 | 7k+ | | | Non-prefixed global variable |