| #9251 | Showcase Payment Options (icons) | 93 | 2 | 3 | 1k+ | | | trademarked term |
| #9252 | Add HTML to Page | 97 | 5 | 0 | 400 | | | Missing direct file access protection |
| #9253 | REST API Meta Support | 96 | 9 | 1 | 7k+ | | | wp function not compatible with requires wp |
| #9254 | Grid & Styler For Contact Form 7 And Divi | 23 | 548 | 1,341 | 500 | | | Non-prefixed global variable |
| #9255 | Developer Loggers for Simple History | 41 | 46 | 28 | 400 | | | Text Domain Mismatch |
| #9256 | DSGVO/GDPR Cookies, DSE, Impressum & Google Fonts Proxy | 37 | 391 | 25 | 700 | | | Text Domain Mismatch |
| #9257 | Floating Side Tab | 34 | 94 | 153 | 600 | | | Non-prefixed global variable |
| #9258 | Message Popup For Contact Form 7 | 42 | 30 | 81 | 1k+ | | | Missing nonce verification |
| #9259 | Popupsmart | 79 | 28 | 2 | 600 | | | Output is not escaped |
| #9260 | PE Panels | 43 | 181 | 4 | 500 | | | Output is not escaped |
| #9261 | Admin Bookmarks | 76 | 30 | 4 | 500 | | | Text Domain Mismatch |
| #9262 | Tada: Instant Webpage Loading, Fast Website Browsing | 94 | 8 | 1 | 500 | | | Missing direct file access protection |
| #9263 | Dolyame Payment gateway | 51 | 122 | 10 | 700 | | | Text Domain Mismatch |
| #9264 | Manage Enrollment for LearnDash | 39 | 48 | 79 | 400 | | | Unsafe printing function |
| #9265 | Quickcreator – AI Blog Writer | 58 | 14 | 18 | 500 | | | Exception output is not escaped |
| #9266 | 2C2P Redirect API for WooCommerce | 36 | 136 | 62 | 900 | | | wp function not compatible with requires wp |
| #9267 | Sendy | 78 | 11 | 2 | 500 | | | Output is not escaped |
| #9268 | BabyLoveGrowth Integration | 35 | 2 | 10 | 1k+ | | | Direct Query |
| #9269 | FrontBlocks for Gutenberg/GeneratePress | 35 | 10 | 7 | 500 | | | Offloaded Content |
| #9270 | Simple Matomo Tracking Code | 44 | 23 | 6 | 1k+ | | | Unsafe printing function |
| #9271 | Keep Emoticons as Text | 98 | 3 | 1 | 700 | | | Missing direct file access protection |
| #9272 | Empik for Woocommerce | 98 | 2 | 0 | 400 | | | readme description non official language |
| #9273 | myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards | 22 | 2,344 | 1,320 | 400 | | | Output is not escaped |
| #9274 | Confetti Fall Animation | 92 | 2 | 5 | 500 | | | Non-prefixed class |
| #9275 | Disable Yoast's Structured Data | 97 | 4 | 3 | 900 | | | trademarked term |
| #9276 | Deployer for Git | 24 | 541 | 1,336 | 500 | | | Non-prefixed global variable |
| #9277 | Gutena Team – Team Slider and Grid | 97 | 6 | 2 | 800 | | | Missing Arg Domain |
| #9278 | Fluent Connect – Connect ThriveCart with your WordPress and FluentCRM | 56 | 37 | 54 | 600 | | | curl curl setopt |
| #9279 | BMI Adult & Kid Calculator | 43 | 33 | 138 | 700 | | | Request data is not unslashed |
| #9280 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | | | Text Domain Mismatch |
| #9281 | FEWC – Extra Checkout Fields For WooCommerce | 84 | 7 | 41 | 700 | | | Non-prefixed global variable |
| #9282 | Helio Pay (Accept 1-click crypto payments #USDC #SOL #BTC #ETH) | 91 | 8 | 11 | 500 | | | Missing direct file access protection |
| #9283 | WP GIF Player – Play & Pause | 81 | 6 | 4 | 400 | | | Output is not escaped |
| #9284 | CHEQ Essentials | 56 | 14 | 49 | 700 | | | Request data is not unslashed |
| #9285 | Disable Media Permalink by Hardweb.it | 99 | 1 | 0 | 900 | | | outdated tested upto header |
| #9286 | Simple SMTP by Maileroo | 75 | 40 | 8 | 700 | | | Text Domain Mismatch |
| #9287 | Smoothscroller | 85 | 9 | 2 | 500 | | | Output is not escaped |
| #9288 | Hotlink File Prevention | 91 | 6 | 1 | 600 | | | file system operations is writable |
| #9289 | Stancer for WooCommerce | 64 | 2 | 108 | 400 | | | Non-prefixed global variable |
| #9290 | JSM Show Order Metadata for WooCommerce HPOS | 40 | 17 | 64 | 700 | | | Nonce verification recommended |
| #9291 | Outdooractive Embed | 45 | 70 | 18 | 400 | | | Text Domain Mismatch |
| #9292 | WP-NoIndex | 97 | 4 | 2 | 400 | | | trademarked term |
| #9293 | Address correction autocomplete for Woo | 67 | 19 | 9 | 1k+ | | | Text Domain Mismatch |
| #9294 | Disable Right Click Images | 98 | 2 | 1 | 1k+ | | | Not In Footer |
| #9295 | Image Comparison Block | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #9296 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #9297 | Accesibilidad Web con el Widget de AccedeMe | 60 | 22 | 23 | 1k+ | | | Text Domain Mismatch |
| #9298 | CSV Importer Plus for ACF | 99 | 6 | 2 | 400 | | | Text Domain Mismatch |
| #9299 | Theme Duplicator | 41 | 14 | 31 | 400 | | | Nonce verification recommended |
| #9300 | Nav Menu Item Duplicator | 90 | 16 | 4 | 500 | | | wp function not compatible with requires wp |