| #8951 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #8952 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,433 | 1,383 | 100k+ | | | Unsafe printing function |
| #8953 | Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | 25 | 876 | 1,798 | 100k+ | | | Non-prefixed global variable |
| #8954 | Payment Plugins for Stripe WooCommerce | 25 | 349 | 779 | 100k+ | | | Non-prefixed global variable |
| #8955 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #8956 | FiboSearch – Ajax Search for WooCommerce | 25 | 603 | 302 | 100k+ | | | Output is not escaped |
| #8957 | reSmush.it : The original free image compressor and optimizer plugin | 25 | 155 | 69 | 100k+ | | | Output is not escaped |
| #8958 | Admin Columns | 25 | 613 | 995 | 100k+ | | | Non-prefixed namespace |
| #8959 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 610 | 1,365 | 100k+ | | | Non-prefixed global variable |
| #8960 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | | Non-prefixed global variable |
| #8961 | WP 2FA – Two-factor authentication for WordPress | 25 | 283 | 716 | 100k+ | | | Non-prefixed global variable |
| #8962 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |
| #8963 | Media Cleaner: Clean your WordPress! | 25 | 261 | 546 | 90k+ | | | Direct Query |
| #8964 | OttoKit: All-in-One Automation Platform | 25 | 1,558 | 1,825 | 90k+ | | | Missing direct file access protection |
| #8965 | HUSKY – Products Filter Professional for WooCommerce | 25 | | 1,895 | 90k+ | | | Non-prefixed global variable |
| #8966 | Nested Pages | 25 | 674 | 560 | 90k+ | | | Non-prefixed global variable |
| #8967 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,512 | 553 | 90k+ | | | Exception output is not escaped |
| #8968 | Wp Social Login and Register Social Counter | 25 | 80 | 738 | 80k+ | | | Non-prefixed global variable |
| #8969 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | | | Exception output is not escaped |
| #8970 | MaxButtons – Create buttons | 25 | 626 | 404 | 70k+ | | | Output is not escaped |
| #8971 | kk Star Ratings – Rate Post & Collect User Feedbacks | 25 | 772 | 1,388 | 70k+ | | | Non-prefixed global variable |
| #8972 | Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF | 25 | 158 | 118 | 60k+ | | | Non-prefixed global variable |
| #8973 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 958 | 738 | 60k+ | | | Text Domain Mismatch |
| #8974 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,088 | 888 | 60k+ | | | SQL query is not prepared |
| #8975 | Advanced Shipment Tracking for WooCommerce | 25 | 499 | 704 | 60k+ | | | Non-prefixed global variable |
| #8976 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 143 | 357 | 60k+ | | | Input is not sanitized |
| #8977 | Wordfence Login Security | 25 | 248 | 418 | 60k+ | | | Output is not escaped |
| #8978 | WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, PRO Security | 25 | 875 | 1,764 | 50k+ | | | Non-prefixed global variable |
| #8979 | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 25 | 691 | 1,581 | 50k+ | | | Non-prefixed global variable |
| #8980 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #8981 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #8982 | WP-Polls | 25 | 618 | 639 | 40k+ | | | Unsafe printing function |
| #8983 | SimpLy Gallery | 25 | 532 | 1,422 | 40k+ | | | Non-prefixed global variable |
| #8984 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements | 25 | 352 | 597 | 40k+ | | | Non-prefixed global variable |
| #8985 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #8986 | Simply Static – The Static Site Generator | 25 | 188 | 530 | 30k+ | | | Non-prefixed hook name |
| #8987 | WP Google Review Slider | 25 | 1,366 | 2,584 | 30k+ | | | Non-prefixed global variable |
| #8988 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #8989 | Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | 25 | 789 | 313 | 30k+ | | | Text Domain Mismatch |
| #8990 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | | | Output is not escaped |
| #8991 | AdRotate Banner Manager | 25 | 1,363 | 846 | 20k+ | | | Unsafe printing function |
| #8992 | Quiz Maker by AYS | 25 | 505 | 3,030 | 20k+ | | | Non-prefixed global variable |
| #8993 | My Calendar – Accessible Event Manager | 25 | 10 | 2,205 | 20k+ | | | Non-prefixed function |
| #8994 | Secure Copy Content Protection and Content Locking | 25 | 965 | 803 | 20k+ | | | Output is not escaped |
| #8995 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | | | Text Domain Mismatch |
| #8996 | Advanced WordPress Reset – Debug, Recover & Reset WP | 25 | 475 | 464 | 20k+ | | | Output is not escaped |
| #8997 | Post Snippets – Custom WordPress Code Snippets Customizer | 25 | 808 | 1,654 | 20k+ | | | Non-prefixed global variable |
| #8998 | Pz-LinkCard | 25 | 948 | 1,616 | 20k+ | | | Non-prefixed global variable |
| #8999 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #9000 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |