| #8201 | Responsive Slick Slider WordPress | 88 | 3 | 131 | 500 | | | Non-prefixed global variable |
| #8202 | Enhanced Custom Permalinks | 40 | 51 | 82 | 1k+ | | | Nonce verification recommended |
| #8203 | Karma Music Player by Kadar | 56 | 47 | 9 | 700 | | | Output is not escaped |
| #8204 | Dam Spam | 100 | | 1 | 2k+ | | | unexpected markdown file |
| #8205 | Shortcodes in Sidebar | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #8206 | Repeater Fields for Gravity Forms | 46 | 134 | 41 | 1k+ | | | wp function not compatible with requires wp |
| #8207 | Map Block Leaflet | 67 | 52 | 7 | 700 | | | Short PHP open tag found |
| #8208 | If Widget – Visibility control for Widgets | 40 | 99 | 25 | 1k+ | | | Unsafe printing function |
| #8209 | GamiPress – Leaderboards Include/Exclude Users | 85 | 11 | 3 | 400 | | | Output is not escaped |
| #8210 | Force Plugin Updates Check | 92 | 5 | 5 | 500 | | | trademarked term |
| #8211 | Fast Chat Button | 41 | 24 | 188 | 1k+ | | | Non-prefixed global variable |
| #8212 | Lawwwing | Textos legales web y Banner de cookies | 90 | 31 | 13 | 700 | | | Text Domain Mismatch |
| #8213 | Dashboard Notes | 42 | 27 | 34 | 600 | | | Missing Arg Domain |
| #8214 | MB ImageChimp RSS Feed Enhancer | 92 | 6 | 0 | 700 | | | wp function not compatible with requires wp |
| #8215 | PWD WP Favicon | 95 | 3 | 8 | 800 | | | trademarked term |
| #8216 | Testimonial Block | 82 | 13 | 12 | 500 | | | wp function not compatible with requires wp |
| #8217 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #8218 | Pulsating Chat Button | 95 | 29 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #8219 | Theme Inspector | 73 | 23 | 7 | 400 | | | Output is not escaped |
| #8220 | GoCardless for WooCommerce | 80 | | 60 | 1k+ | | | Non-prefixed class |
| #8221 | GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites | 26 | 286 | 216 | 500 | | | badly named files |
| #8222 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 44 | 5 | 70 | 1k+ | | | Interpolated SQL is not prepared |
| #8223 | Developer Tools Blocker | 40 | 35 | 47 | 400 | | | strip tags strip tags |
| #8224 | SurveyJS: Drag & Drop Form Builder | 36 | 12 | 134 | 500 | | | Missing Version |
| #8225 | Drip for Gravity Forms | 39 | 41 | 21 | 500 | | | Unsafe printing function |
| #8226 | FAQ Block | 97 | 4 | 2 | 500 | | | Discouraged text-domain loading |
| #8227 | Responsive Block Control – Hide blocks based on display width | 99 | 1 | 1 | 1k+ | | | mismatched plugin name |
| #8228 | Address Geocoder | 51 | 12 | 18 | 500 | | | Output is not escaped |
| #8229 | Remove RSS Feed | 92 | 5 | 0 | 1k+ | | | Missing Arg Domain |
| #8230 | Easy Quotes | 55 | 11 | 31 | 700 | | | Direct Query |
| #8231 | Custom Spinner for Contact Form 7 | 42 | 36 | 11 | 1k+ | | | Output is not escaped |
| #8232 | Store file uploads for Contact Form 7 | 76 | 5 | 6 | 1k+ | | | Output is not escaped |
| #8233 | Indicate External Links | 97 | 3 | 0 | 700 | | | license mismatch |
| #8234 | Post Type Select Field for Advanced Custom Fields | 59 | 48 | 1 | 900 | | | Text Domain Mismatch |
| #8235 | WP-Yomigana | 35 | 17 | 15 | 2k+ | | | Output is not escaped |
| #8236 | FCM Push Notification from WP | 42 | 43 | 16 | 500 | | | Non Singular String Literal Domain |
| #8237 | Joli FAQ SEO – WordPress FAQ Plugin | 23 | 1,083 | 1,526 | 700 | | | Non-prefixed global variable |
| #8238 | Plugin Toggle | 80 | 2 | 12 | 500 | | | Nonce verification recommended |
| #8239 | Product Price History for WooCommerce | 42 | | 101 | 800 | | | Nonce verification recommended |
| #8240 | Flying Fonts: Remove Google Fonts & Use System Fonts for Faster Performance | 35 | 3 | 1 | 700 | | | Hidden files included |
| #8241 | Unagi | 35 | 9 | 2 | 900 | | | Missing direct file access protection |
| #8242 | Visibility Control for LearnDash | 40 | 55 | 23 | 1k+ | | | Missing Arg Domain |
| #8243 | HTTP Requests Manager | 36 | 98 | 90 | 1k+ | | | Output is not escaped |
| #8244 | jAlbum Bridge | 99 | 1 | 6 | 500 | | | Not In Footer |
| #8245 | HFD ePost Integration | 31 | 186 | 110 | 1k+ | | | Text Domain Mismatch |
| #8246 | HAL | 58 | 106 | 24 | 500 | | | Text Domain Mismatch |
| #8247 | Replain | 57 | 21 | 9 | 700 | | | Output is not escaped |
| #8248 | Last Updated Shortcode | 97 | 3 | 4 | 800 | | | Non-prefixed global variable |
| #8249 | Display Posts As List, Grid, Thumbs | 33 | 442 | 241 | 900 | | | Output is not escaped |
| #8250 | Antideo Email Validator | 35 | 38 | 98 | 800 | | | Missing nonce verification |