| #9951 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #9952 | MAS Videos | 20 | 519 | 1,693 | 1k+ | | | Non-prefixed global variable |
| #9953 | Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | 20 | 1,292 | 2,683 | 9k+ | | | Output is not escaped |
| #9954 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | | | Non-prefixed global variable |
| #9955 | Nimble Page Builder | 20 | 1,591 | 1,684 | 30k+ | | | Missing Arg Domain |
| #9956 | Shipping for Nova Poshta | 20 | 598 | 923 | 500 | | | Output is not escaped |
| #9957 | پلاگین پرداخت دلخواه | 20 | 584 | 446 | 900 | | | Text Domain Mismatch |
| #9958 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 20 | 440 | 750 | 400 | | | Missing direct file access protection |
| #9959 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | | | Exception output is not escaped |
| #9960 | Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score | 20 | 147 | 231 | 3k+ | | | Exception output is not escaped |
| #9961 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 20 | 401 | 368 | 3k+ | | | Text Domain Mismatch |
| #9962 | Razorpay Payment Button Elementor Plugin | 20 | 479 | 62 | 1k+ | | | Exception output is not escaped |
| #9963 | Remove Add to Cart WooCommerce | 20 | 616 | 1,378 | 4k+ | | | Non-prefixed global variable |
| #9964 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 557 | 541 | 100k+ | | | Output is not escaped |
| #9965 | SpeakOut! Email Petitions | 20 | 850 | 994 | 3k+ | | | Missing nonce verification |
| #9966 | Events Manager – OpenStreetMaps | 20 | 559 | 444 | 700 | | | Output is not escaped |
| #9967 | Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts | 20 | 866 | 338 | 1k+ | | | wp function not compatible with requires wp |
| #9968 | Web Directory Free | 20 | 808 | 174 | 400 | | | Missing direct file access protection |
| #9969 | Razorpay for WooCommerce | 20 | 974 | 855 | 100k+ | | | Non-prefixed function |
| #9970 | WP Minify Fix | 20 | 306 | 380 | 800 | | | Output is not escaped |
| #9971 | WPJAM Basic | 20 | 328 | 356 | 4k+ | | | Output is not escaped |
| #9972 | School Management System – WPSchoolPress | 20 | 353 | 5,275 | 1k+ | | | Non-prefixed global variable |
| #9973 | Element Pack – Widgets, Templates & Addons for Elementor | 19 | 9,448 | 517 | 100k+ | | | Text Domain Mismatch |
| #9974 | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 19 | 555 | 1,291 | 3k+ | | | Non-prefixed global variable |
| #9975 | Download Monitor | 19 | 425 | 1,364 | 80k+ | | | Non-prefixed hook name |
| #9976 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 19 | 1,218 | 901 | 100k+ | | | Exception output is not escaped |
| #9977 | Go Fetch Jobs (for WP Job Manager) | 19 | 1,410 | 1,741 | 700 | | | Non-prefixed global variable |
| #9978 | AI Infographic Maker | 19 | 1,517 | 599 | 600 | | | Output is not escaped |
| #9979 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 10k+ | | | Output is not escaped |
| #9980 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,911 | 877 | 100k+ | | | Exception output is not escaped |
| #9981 | Netgsm | 19 | 334 | 308 | 1k+ | | | Setting is missing a sanitization callback |
| #9982 | Verified Reviews (Avis Vérifiés) | 19 | 671 | 1,136 | 700 | | | Non-prefixed global variable |
| #9983 | Razorpay Payment Button Plugin | 19 | 486 | 98 | 2k+ | | | Exception output is not escaped |
| #9984 | Realtyna Organic IDX plugin + WPL Real Estate | 19 | 947 | 3,653 | 2k+ | | | Non-prefixed global variable |
| #9985 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 541 | 385 | 3m+ | | | Missing Translators Comment |
| #9986 | Membership Plugin – Kadence Memberships | 19 | 5,082 | 2,982 | 9k+ | | | Text Domain Mismatch |
| #9987 | Scrollsequence – Cinematic Scroll Image Animation Plugin | 19 | 878 | 1,528 | 4k+ | | | Non-prefixed global variable |
| #9988 | SendPress Newsletters | 19 | 2,293 | 1,422 | 2k+ | | | Output is not escaped |
| #9989 | SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | 19 | 526 | 1,119 | 90k+ | | | Non-prefixed global variable |
| #9990 | WordLift – AI powered SEO – Schema | 19 | 393 | 955 | 400 | | | Non-prefixed hook name |
| #9991 | WP Email Template | 19 | 342 | 350 | 2k+ | | | Exception output is not escaped |
| #9992 | WP Import Export Lite | 19 | 737 | 979 | 40k+ | | | Non-prefixed global variable |
| #9993 | WPOSS阿里云对象存储 | 19 | 269 | 315 | 1k+ | | | Non-prefixed namespace |
| #9994 | WPQiNiu七牛云对象存储 | 19 | 138 | 612 | 400 | | | Non-prefixed global variable |
| #9995 | Prime Slider Addons for Elementor | 18 | 3,500 | 229 | 100k+ | | | Text Domain Mismatch |
| #9996 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 90k+ | | | Text Domain Mismatch |
| #9997 | Pagopar – WooCommerce Gateway | 18 | 530 | 1,215 | 400 | | | Non-prefixed global variable |
| #9998 | Podlove Podcast Publisher | 18 | 2,326 | 1,429 | 3k+ | | | Output is not escaped |
| #9999 | Property Hive | 18 | 1,957 | 6,027 | 3k+ | | | Missing nonce verification |
| #10000 | RestroPress – Online Food Ordering System | 18 | 521 | 3,083 | 1k+ | | | Non-prefixed global variable |