| #5401 | MailerLite – Signup forms (official) | 36 | 430 | 158 | 100k+ | | | Output is not escaped |
| #5402 | Sendle Shipping Plugin | 37 | 91 | 64 | 800 | | | wp function not compatible with requires wp |
| #5403 | StatCounter – Free Real Time Visitor Stats | 95 | 41 | 10 | 70k+ | | | wp function not compatible with requires wp |
| #5404 | Offload Media – Cloud Storage | 29 | 126 | 80 | 1k+ | | | unlink unlink |
| #5405 | OG — Better Share on Social Media | 81 | 14 | 51 | 30k+ | | | Non-prefixed hook name |
| #5406 | OG Tags | 42 | 131 | 34 | 2k+ | | | Non Singular String Literal Domain |
| #5407 | Open Graph Pro | 39 | 52 | 13 | 1k+ | | | Output is not escaped |
| #5408 | Ogp Plus | 99 | 1 | 6 | 600 | | | Non-prefixed global variable |
| #5409 | SOGO Add Script to Individual Pages Header Footer | 39 | 74 | 40 | 20k+ | | | Output is not escaped |
| #5410 | oik | 22 | 489 | 180 | 2k+ | | | Non Singular String Literal Domain |
| #5411 | oik-privacy-policy | 83 | 14 | 42 | 700 | | | No Html Wrapped Strings |
| #5412 | Weight zone shipping for WooCommerce | 73 | 25 | 13 | 1k+ | | | Missing Translators Comment |
| #5413 | Weight/Country Shipping for WooCommerce | 79 | 10 | 2 | 900 | | | Unsafe printing function |
| #5414 | Olark Live Chat | 97 | 3 | 16 | 1k+ | | | Non-prefixed global variable |
| #5415 | Oliver POS – WooCommerce POS for iPhone, iPad & Android | 37 | 15 | 242 | 800 | | | Interpolated SQL is not prepared |
| #5416 | Ollie Menu Designer | 91 | | 45 | 4k+ | | | Non-prefixed global variable |
| #5417 | Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts | 35 | 41 | 8 | 200k+ | | | Missing direct file access protection |
| #5418 | Omise Payments | 26 | 358 | 256 | 2k+ | | | Output is not escaped |
| #5419 | Omnibus — show the lowest price | 41 | 35 | 37 | 10k+ | | | Output is not escaped |
| #5420 | Omnipress | 24 | 169 | 245 | 800 | | | Non-prefixed global variable |
| #5421 | Newsletters, Email Marketing, SMS and Popups by Omnisend | 35 | 4 | 2 | 100k+ | | | Hidden files included |
| #5422 | Email Marketing for WooCommerce by Omnisend | 35 | 12 | 21 | 40k+ | | | Non-prefixed function |
| #5423 | OnSale Page for WooCommerce | 51 | 30 | 44 | 2k+ | | | Text Domain Mismatch |
| #5424 | One Click Close Comments | 99 | 1 | 2 | 4k+ | | | unexpected markdown file |
| #5425 | One Click Demo Import | 38 | 22 | 84 | 1m+ | | | Non-prefixed global variable |
| #5426 | One Click Order Re-Order | 38 | 139 | 63 | 1k+ | | | Non Singular String Literal Domain |
| #5427 | One Click SSL | 40 | 136 | 62 | 10k+ | | | Unsafe printing function |
| #5428 | One Page Express Companion | 35 | 132 | 65 | 10k+ | | | Output is not escaped |
| #5429 | One Stop Shop for WooCommerce | 68 | 23 | 83 | 10k+ | | | Input is not sanitized |
| #5430 | One Tap Google Sign in | 63 | 6 | 30 | 900 | | | Request data is not unslashed |
| #5431 | One Time Login | 78 | 7 | 8 | 40k+ | | | Nonce verification recommended |
| #5432 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | | | Non-prefixed global variable |
| #5433 | OneClick Chat to Order | 49 | 677 | 41 | 40k+ | | | Text Domain Mismatch |
| #5434 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | | | wp function not compatible with requires wp |
| #5435 | onepay Payment Gateway For WooCommerce | 70 | 49 | 13 | 900 | | | Text Domain Mismatch |
| #5436 | OneSignal – Web Push Notifications | 38 | 53 | 64 | 70k+ | | | Output is not escaped |
| #5437 | OneSignal Sender | 39 | 112 | 50 | 400 | | | Output is not escaped |
| #5438 | ONet Regenerate Thumbnails | 35 | 190 | 64 | 1k+ | | | Text Domain Mismatch |
| #5439 | Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce | 35 | 117 | 144 | 2k+ | | | Output is not escaped |
| #5440 | WP Online Active Users | 58 | 26 | 45 | 2k+ | | | Non-prefixed global variable |
| #5441 | Online Contact Widget-多合一在线客服插件 | 26 | 708 | 80 | 800 | | | Non Singular String Literal Domain |
| #5442 | Online Lesson Booking | 27 | 978 | 281 | 500 | | | Non Singular String Literal Domain |
| #5443 | onOffice for WP-Websites | 67 | 5 | 507 | 1k+ | | | Non-prefixed global variable |
| #5444 | OnPay.io for WooCommerce | 42 | 238 | 37 | 1k+ | | | Text Domain Mismatch |
| #5445 | ONTRApages | 53 | 16 | 27 | 1k+ | | | Output is not escaped |
| #5446 | Live Chat & AI Chatbot – onWebChat | 41 | 31 | 91 | 700 | | | error log error log |
| #5447 | Oomph Hidden Tags | 80 | 13 | 2 | 400 | | | Missing Arg Domain |
| #5448 | OoohBoi Steroids for Elementor | 30 | 2,059 | 100 | 40k+ | | | Text Domain Mismatch |
| #5449 | OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 26 | 272 | 599 | 6k+ | | | Request data is not unslashed |
| #5450 | Out of the Block: OpenStreetMap | 35 | 9 | 4 | 700 | | | Missing direct file access protection |