| #5501 | Organic Profile Block | 88 | 3 | 6 | 1k+ | | | Input is not validated |
| #5502 | Organic Widget Area Block | 94 | 5 | 4 | 800 | | | Text Domain Mismatch |
| #5503 | Organization chart | 32 | 187 | 334 | 5k+ | | | SQL query is not prepared |
| #5504 | Organize Media Folder | 97 | 3 | 35 | 2k+ | | | Direct Query |
| #5505 | Issues and Series for Newspapers, Magazines, Publishers, Writers | 23 | 346 | 710 | 2k+ | | | Nonce verification recommended |
| #5506 | OSM – OpenStreetMap | 37 | 130 | 64 | 10k+ | | | Output is not escaped |
| #5507 | OSM Map Widget for Elementor | 35 | 183 | 14 | 9k+ | | | Text Domain Mismatch |
| #5508 | Osom Modal Login | 73 | 40 | 12 | 400 | | | Text Domain Mismatch |
| #5509 | OSS Aliyun | 41 | 19 | 40 | 4k+ | | | Request data is not unslashed |
| #5510 | OT Flatsome Vertical Menu | 35 | 126 | 26 | 10k+ | | | Text Domain Mismatch |
| #5511 | OTF Regenerate Thumbnails | 98 | 3 | 1 | 4k+ | | | Missing direct file access protection |
| #5512 | OtFm Gutenberg Spoiler – (or FAQ) collapse block | 35 | 6 | 9 | 600 | | | trademarked term |
| #5513 | Team Members Profile – Employee Directory & Staff Showcase | 34 | 339 | 90 | 600 | | | Output is not escaped |
| #5514 | Outdated Plugin Notifier | 94 | 1 | 6 | 400 | | | trademarked term |
| #5515 | Outdooractive Embed | 45 | 70 | 18 | 400 | | | Text Domain Mismatch |
| #5516 | Outfunnel: Web Visitor Tracking & CRM Integration | 74 | 34 | 9 | 600 | | | Short PHP open tag found |
| #5517 | Outrank | 90 | 1 | 4 | 1k+ | | | Database parameter is not escaped |
| #5518 | Ovation Elements | 36 | 23 | 399 | 10k+ | | | Non-prefixed global variable |
| #5519 | Overlay Image Divi Module | 24 | 576 | 1,301 | 2k+ | | | Non-prefixed global variable |
| #5520 | Overwrite Uploads | 97 | 3 | 4 | 1k+ | | | Missing direct file access protection |
| #5521 | Owl Carousel WP | 40 | 62 | 19 | 1k+ | | | Output is not escaped |
| #5522 | OwnerRez | 34 | 79 | 56 | 700 | | | Unsafe printing function |
| #5523 | OXY Re-Login Window | 75 | 5 | 7 | 500 | | | Missing Version |
| #5524 | Oxyplug Preload | 79 | 7 | 9 | 500 | | | Output is not escaped |
| #5525 | Ozh' Admin Drop Down Menu | 36 | 125 | 43 | 3k+ | | | Output is not escaped |
| #5526 | Ozh' Better Feed | 38 | 45 | 35 | 600 | | | Heredoc Output Not Escaped |
| #5527 | Packeta | 22 | 801 | 333 | 8k+ | | | Exception output is not escaped |
| #5528 | Pagar.me para WooCommerce | 24 | 549 | 116 | 5k+ | | | Text Domain Mismatch |
| #5529 | PagBank / PagSeguro Connect para WooCommerce | 22 | 505 | 757 | 4k+ | | | Non-prefixed global variable |
| #5530 | PagBank for WooCommerce | 68 | 8 | 36 | 3k+ | | | Input is not sanitized |
| #5531 | Page and Post Restriction | 90 | 14 | 3 | 2k+ | | | wp function not compatible with requires wp |
| #5532 | Page Animations And Transitions | 55 | 89 | 67 | 1k+ | | | Non Singular String Literal Domain |
| #5533 | Page As Subdomain Lite | 40 | 61 | 25 | 500 | | | Output is not escaped |
| #5534 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,120 | 2,913 | 9k+ | | | Non-prefixed global variable |
| #5535 | Page Comments Off Please | 40 | 17 | 29 | 1k+ | | | Nonce verification recommended |
| #5536 | Page Excerpt | 81 | 11 | 1 | 3k+ | | | Missing Arg Domain |
| #5537 | Bulk Page Generator and Mass Page Builder – Page Generator | 87 | 26 | 87 | 4k+ | | | Non-prefixed global variable |
| #5538 | Page in Widget | 64 | 26 | 0 | 2k+ | | | Output is not escaped |
| #5539 | Page Links To | 38 | 31 | 40 | 100k+ | | | Unsafe printing function |
| #5540 | Page-list | 97 | 5 | 23 | 30k+ | | | Post Not In exclude |
| #5541 | Page List Widget | 39 | 150 | 6 | 400 | | | Output is not escaped |
| #5542 | Page Loader | 76 | 9 | 4 | 3k+ | | | Missing Version |
| #5543 | Page Loading Effects | 41 | 68 | 24 | 2k+ | | | Output is not escaped |
| #5544 | Page Management Dropdown | 97 | 3 | 3 | 600 | | | Direct Query |
| #5545 | PageMenu | 42 | 16 | 29 | 1k+ | | | Missing nonce verification |
| #5546 | Page Optimize | 35 | 70 | 41 | 200k+ | | | Non Singular String Literal Domain |
| #5547 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | | | Direct Query |
| #5548 | Page & Post Notes | 41 | 12 | 77 | 1k+ | | | Non-prefixed global variable |
| #5549 | Page Restrict for WooCommerce | 29 | 579 | 374 | 700 | | | Text Domain Mismatch |
| #5550 | Page scroll to id | 37 | 38 | 120 | 100k+ | | | Missing nonce verification |