| #9001 | Pz-LinkCard | 25 | 948 | 1,616 | 20k+ | | | Non-prefixed global variable |
| #9002 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #9003 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #9004 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 334 | 471 | 10k+ | | | Non-prefixed global variable |
| #9005 | Appointment Hour Booking – Booking Calendar | 25 | 262 | 1,253 | 10k+ | | | Non-prefixed global variable |
| #9006 | WP Photo Album Plus | 25 | 4 | 1,809 | 10k+ | | | Direct Query |
| #9007 | Social Share Icons & Social Share Buttons | 25 | 2,365 | 1,357 | 10k+ | | | Output is not escaped |
| #9008 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | | | Input is not sanitized |
| #9009 | Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management | 25 | 367 | 923 | 10k+ | | | SQL query is not prepared |
| #9010 | QuadMenu – Mega Menu | 25 | 2,128 | 455 | 10k+ | | | Output is not escaped |
| #9011 | Booking Package | 25 | 1,697 | 3,976 | 10k+ | | | Missing nonce verification |
| #9012 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,611 | 1,296 | 10k+ | | | Non Singular String Literal Domain |
| #9013 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #9014 | Sensei LMS – Online Courses, Quizzes, & Learning | 25 | 56 | 928 | 10k+ | | | Nonce verification recommended |
| #9015 | ShopMagic – email automation | 25 | 228 | 145 | 10k+ | | | Exception output is not escaped |
| #9016 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | | Non Singular String Literal Domain |
| #9017 | TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder | 25 | 705 | 1,587 | 10k+ | | | Non-prefixed global variable |
| #9018 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | | | Non-prefixed class |
| #9019 | SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent | 25 | 432 | 1,357 | 10k+ | | | Direct Query |
| #9020 | Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins | 25 | 907 | 1,418 | 10k+ | | | Non-prefixed global variable |
| #9021 | AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing | 25 | 665 | 1,486 | 10k+ | | | Non-prefixed global variable |
| #9022 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #9023 | Affiliate Program Suite — SliceWP Affiliates | 25 | 1,291 | 2,089 | 10k+ | | | Output is not escaped |
| #9024 | WPCargo Track & Trace | 25 | 239 | 557 | 10k+ | | | Non-prefixed global variable |
| #9025 | Bulk Edit Products for WooCommerce – WP Sheet Editor | 25 | 957 | 968 | 10k+ | | | Text Domain Mismatch |
| #9026 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | | | Text Domain Mismatch |
| #9027 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | | | Non-prefixed hook name |
| #9028 | Seo Optimized Images | 25 | 526 | 1,316 | 10k+ | | | Non-prefixed global variable |
| #9029 | WPvivid Backup for MainWP | 25 | 818 | 1,794 | 10k+ | | | Missing nonce verification |
| #9030 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 160 | 597 | 10k+ | | | Non-prefixed global variable |
| #9031 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #9032 | IP Location Block | 25 | 521 | 624 | 10k+ | | | Output is not escaped |
| #9033 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #9034 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |
| #9035 | PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin | 25 | 1,084 | 1,296 | 9k+ | | | Non-prefixed global variable |
| #9036 | Timeline Express | 25 | 531 | 147 | 9k+ | | | Text Domain Mismatch |
| #9037 | Product Customer List for WooCommerce | 25 | 610 | 1,334 | 9k+ | | | Non-prefixed global variable |
| #9038 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #9039 | WP TripAdvisor Review Slider | 25 | 1,063 | 2,582 | 8k+ | | | Non-prefixed global variable |
| #9040 | HashBar – Announcement, Notification Bar & Popup Campaign | 25 | 2,718 | 610 | 8k+ | | | Text Domain Mismatch |
| #9041 | Bulk Edit Posts and Products in Spreadsheet | 25 | 934 | 944 | 8k+ | | | Text Domain Mismatch |
| #9042 | VikBooking Hotel Booking Engine & PMS | 25 | 13,251 | 8,316 | 8k+ | | | Output is not escaped |
| #9043 | Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | 25 | 489 | 1,413 | 7k+ | | | Non-prefixed global variable |
| #9044 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #9045 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #9046 | Smart Image Resize for WooCommerce | 25 | 582 | 404 | 7k+ | | | Text Domain Mismatch |
| #9047 | Product Attachment for WooCommerce | 25 | 1,241 | 1,781 | 7k+ | | | Non-prefixed global variable |
| #9048 | Advanced Floating Content Lite | 25 | 643 | 1,348 | 7k+ | | | Non-prefixed global variable |
| #9049 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 321 | 455 | 7k+ | | | Non-prefixed global variable |
| #9050 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |