| #8001 | Easy Timer | 33 | 78 | 450 | 1k+ | | | Non-prefixed global variable |
| #8002 | Easy Upload Files During Checkout | 33 | 218 | 199 | 500 | | | Unsafe printing function |
| #8003 | EchBay Phonering Alo | 33 | 74 | 47 | 1k+ | | | Output is not escaped |
| #8004 | Echelon Widgets for SiteOrigin | 33 | 667 | 5 | 800 | | | Output is not escaped |
| #8005 | Human Presence – Stop Form Spam Without ReCaptcha | 33 | 54 | 65 | 1k+ | | | Request data is not unslashed |
| #8006 | Fastly | 33 | 221 | 66 | 1k+ | | | Text Domain Mismatch |
| #8007 | FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN | 33 | 51 | 333 | 4k+ | | | Request data is not unslashed |
| #8008 | Gallery Custom Links | 33 | 64 | 62 | 30k+ | | | Non Singular String Literal Domain |
| #8009 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #8010 | GetResponse Forms by Optin Cat | 33 | 68 | 138 | 1k+ | | | Missing direct file access protection |
| #8011 | WP GIF Uploader | 33 | 117 | 44 | 1k+ | | | Text Domain Mismatch |
| #8012 | Five Star Restaurant Reviews | 33 | 242 | 142 | 400 | | | Output is not escaped |
| #8013 | Comments – GraphComment | AI-Moderated Comment System | 33 | 191 | 177 | 400 | | | Unsafe printing function |
| #8014 | Gravity Forms Eway | 33 | 519 | 45 | 500 | | | Missing Translators Comment |
| #8015 | GSheetConnector for Forminator Forms | 33 | 128 | 201 | 1k+ | | | Non-prefixed global variable |
| #8016 | Ultimate Addons for Elementor | 33 | 81 | 291 | 2m+ | | | Non-prefixed class |
| #8017 | Mentions légales [FR] | 33 | 238 | 48 | 2k+ | | | Text Domain Mismatch |
| #8018 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 33 | 377 | 139 | 20k+ | | | Unsafe printing function |
| #8019 | Flipbox – Awesomes Flip Boxes Image Overlay | 33 | 400 | 7,279 | 10k+ | | | Input is not validated |
| #8020 | Image Source Control Lite – Show Image Credits and Captions | 33 | 140 | 221 | 3k+ | | | Non-prefixed hook name |
| #8021 | ImageLinks – Interactive Image Builder with Hotspots | 33 | 517 | 90 | 1k+ | | | Text Domain Mismatch |
| #8022 | Inactive User Deleter | 33 | 453 | 170 | 800 | | | Output is not escaped |
| #8023 | InPost Gallery | 33 | 105 | 245 | 700 | | | Non-prefixed global variable |
| #8024 | WPZOOM Social Feed Widget & Block | 33 | 310 | 278 | 60k+ | | | Unsafe printing function |
| #8025 | Intagrate Lite | 33 | 94 | 152 | 4k+ | | | date date |
| #8026 | IP2Location Redirection | 33 | 198 | 122 | 7k+ | | | Output is not escaped |
| #8027 | IssueM | 33 | 56 | 173 | 600 | | | Request data is not unslashed |
| #8028 | ITRO Popup Plugin | 33 | 591 | 135 | 6k+ | | | Output is not escaped |
| #8029 | Janolaw AGB Hosting | 33 | 198 | 11 | 1k+ | | | Short PHP open tag found |
| #8030 | JetWidgets for Elementor and WooCommerce | 33 | 187 | 146 | 7k+ | | | Text Domain Mismatch |
| #8031 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | | | Output is not escaped |
| #8032 | Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid | 33 | 274 | 106 | 3k+ | | | Text Domain Mismatch |
| #8033 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #8034 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #8035 | MailUp for WordPress – Email and Newsletter Subscription Form | 33 | 251 | 100 | 2k+ | | | Text Domain Mismatch |
| #8036 | MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics | 33 | 26 | 279 | 7k+ | | | Non-prefixed global variable |
| #8037 | MAS Companies For WP Job Manager | 33 | 62 | 308 | 1k+ | | | Non-prefixed hook name |
| #8038 | MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | 33 | 2 | 503 | 700 | | | Non-prefixed function |
| #8039 | Membership For WooCommerce | 33 | 40 | 659 | 800 | | | Non-prefixed global variable |
| #8040 | Merge + Minify + Refresh | 33 | 78 | 26 | 4k+ | | | date date |
| #8041 | Mollie Payments for WooCommerce | 33 | 70 | 123 | 100k+ | | | Dynamic hook name |
| #8042 | Molongui Post Contributors: Multi-Role Contributor Attribution | 33 | 240 | 162 | 500 | | | Output is not escaped |
| #8043 | More Types | 33 | 227 | 198 | 800 | | | Non-prefixed global variable |
| #8044 | Newebpay Payment | 33 | 146 | 115 | 600 | | | Text Domain Mismatch |
| #8045 | News Announcement Scroll | 33 | 237 | 259 | 2k+ | | | Non-prefixed global variable |
| #8046 | GDPR CCPA Compliance & Cookie Consent Banner | 33 | 622 | 87 | 1k+ | | | Non Singular String Literal Domain |
| #8047 | Nomad World Map | 33 | 424 | 191 | 700 | | | Text Domain Mismatch |
| #8048 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #8049 | Offen | 33 | 313 | 115 | 500 | | | Output is not escaped |
| #8050 | Pastacode | 33 | 77 | 66 | 400 | | | Non-prefixed global variable |