| #9001 | Add post thumbnail to wp-admin list view | 86 | 5 | 5 | 400 | | | Nonce verification recommended |
| #9002 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | | | Non-prefixed constant |
| #9003 | Taxonomy List | 97 | 2 | 6 | 500 | | | Missing Version |
| #9004 | CRUDLab Disable Comments | 38 | 20 | 54 | 700 | | | Missing nonce verification |
| #9005 | Show Page URL | 90 | 6 | 3 | 1k+ | | | Missing direct file access protection |
| #9006 | Which Elementor Addon | 35 | 26 | 3 | 500 | | | Text Domain Mismatch |
| #9007 | Contextual Adminbar Color | 56 | 18 | 16 | 500 | | | Output is not escaped |
| #9008 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | | | Non-prefixed function |
| #9009 | getLaw WP API Client | 91 | 11 | 4 | 600 | | | curl curl setopt |
| #9010 | Replace Google Fonts with Bunny Fonts | 91 | 6 | 1 | 900 | | | wp function not compatible with requires wp |
| #9011 | Outrank | 90 | 1 | 4 | 1k+ | | | Database parameter is not escaped |
| #9012 | All Embed – Multi-Source Embed Widgets for Elementor | 24 | 729 | 1,310 | 600 | | | Non-prefixed global variable |
| #9013 | Antispam for Elementor Forms | 91 | 3 | 3 | 1k+ | | | Missing Translators Comment |
| #9014 | WPML Shortcodes | 84 | 7 | 12 | 900 | | | Non-prefixed function |
| #9015 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #9016 | Remove Taxonomy Slug | 77 | 23 | 2 | 400 | | | Output is not escaped |
| #9017 | Accordion – Responsive Horizontal & Vertical Accordion Block | 98 | 1 | 10 | 600 | | | Non-prefixed constant |
| #9018 | Integrate Razorpay for Contact Form 7 | 26 | 152 | 97 | 500 | | | curl curl setopt |
| #9019 | Easy PHP Settings | 66 | 34 | 48 | 1k+ | | | Missing Translators Comment |
| #9020 | Universal Honey Pot | 40 | 23 | 94 | 1k+ | | | Missing nonce verification |
| #9021 | Custom post type templates for Elementor | 38 | 289 | 33 | 700 | | | Text Domain Mismatch |
| #9022 | .htaccess Site Access Control | 37 | 54 | 67 | 800 | | | Input is not sanitized |
| #9023 | QODE Variation Swatches for WooCommerce | 96 | 1 | 87 | 1k+ | | | Non-prefixed global variable |
| #9024 | Checkout & Store Toolkit for WooCommerce | 75 | | 21 | 900 | | | Nonce verification recommended |
| #9025 | REST API Featured Image | 53 | 34 | 16 | 700 | | | Output is not escaped |
| #9026 | Gravity Forms Data Persistence Add-On Reloaded | 40 | 14 | 38 | 700 | | | Input is not sanitized |
| #9027 | WP Restaurant Price List | 30 | 295 | 95 | 500 | | | Text Domain Mismatch |
| #9028 | SHOPVOTE | 35 | 64 | 58 | 400 | | | curl curl setopt |
| #9029 | iFrame Block | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #9030 | Simple Scroll To Top WP | 74 | 24 | 5 | 1k+ | | | Output is not escaped |
| #9031 | Simple HTTPS | 67 | 17 | 13 | 400 | | | Output is not escaped |
| #9032 | SMTP for Contact Form 7 | 99 | 5 | 0 | 1k+ | | | Missing direct file access protection |
| #9033 | Print Bangla News | 71 | 29 | 17 | 2k+ | | | Output is not escaped |
| #9034 | Mintpay | 51 | 14 | 35 | 600 | | | Nonce verification recommended |
| #9035 | N360 | Splash Screen | 46 | 32 | 13 | 500 | | | Output is not escaped |
| #9036 | Export/Import Media – CSV Media Library Import & Export | 98 | 7 | 4 | 1k+ | | | Missing Translators Comment |
| #9037 | Product Notices for WooCommerce | 97 | 130 | 2 | 800 | | | Text Domain Mismatch |
| #9038 | Power Boost for Gravity Forms | 97 | 7 | 10 | 500 | | | wp function not compatible with requires wp |
| #9039 | Property Hive Mortgage Calculator | 97 | 12 | 2 | 800 | | | Text Domain Mismatch |
| #9040 | Meteo | 50 | 58 | 9 | 800 | | | Output is not escaped |
| #9041 | Filter for Elementor | 98 | 3 | 0 | 700 | | | Missing direct file access protection |
| #9042 | WP fail2ban Add-on for Contact Form 7 | 85 | 10 | 18 | 800 | | | Non-prefixed constant |
| #9043 | Delete Post with Attachments | 96 | 2 | 15 | 1k+ | | | Direct Query |
| #9044 | First Order Coupon Manager for WooCommerce | 95 | 10 | 3 | 900 | | | Text Domain Mismatch |
| #9045 | Product Variation Swatches for WooCommerce – Smart Swatches | 98 | | 16 | 800 | | | Non-prefixed hook name |
| #9046 | Powerful Posts Per Page (PPPP) | 35 | 4 | 1 | 1k+ | | | Hidden files included |
| #9047 | Greenshift Smart Code AI | 86 | 9 | 9 | 1k+ | | | Request data is not unslashed |
| #9048 | Ailo – AI Slug Translator | 80 | 8 | 14 | 1k+ | | | wp function not compatible with requires wp |
| #9049 | Non-Purchasable WooCommerce Products | 72 | 14 | 13 | 1k+ | | | Input is not validated |
| #9050 | UTM Event Tracker and Analytics, UTM Grabber | 76 | 2 | 19 | 900 | | | Interpolated SQL is not prepared |