| #5551 | Page Sidebar for Twenty Seventeen | 89 | 110 | 14 | 1k+ | | | Text Domain Mismatch |
| #5552 | Page Specific Menu Items | 41 | 78 | 19 | 2k+ | | | Output is not escaped |
| #5553 | Page Tag Cloud | 64 | 21 | 3 | 500 | | | Output is not escaped |
| #5554 | Page Tagger | 55 | 30 | 10 | 2k+ | | | Output is not escaped |
| #5555 | Page Title Splitter | 66 | 29 | 8 | 1k+ | | | wp function not compatible with requires wp |
| #5556 | Page Transition | 43 | 39 | 30 | 700 | | | Output is not escaped |
| #5557 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #5558 | Page Visits Counter – Lite | 35 | 28 | 35 | 5k+ | | | Output is not escaped |
| #5559 | Pagebar2 | 81 | 19 | 37 | 900 | | | Non-prefixed global variable |
| #5560 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #5561 | PageLoader Lite – Loading Screen | 58 | 29 | 17 | 700 | | | Output is not escaped |
| #5562 | Page Meta | 66 | 26 | 14 | 700 | | | Missing Arg Domain |
| #5563 | Pages In Widgets | 41 | 131 | 6 | 3k+ | | | Output is not escaped |
| #5564 | Pages with category and tag | 100 | | 0 | 60k+ | | | No open findings |
| #5565 | PageView | 86 | 17 | 2 | 1k+ | | | wp function not compatible with requires wp |
| #5566 | Pageviews | 64 | 15 | 12 | 1k+ | | | Missing Translators Comment |
| #5567 | Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin | 32 | 446 | 173 | 5k+ | | | Text Domain Mismatch |
| #5568 | Pago por Redsys | 50 | 44 | 59 | 700 | | | Text Domain Mismatch |
| #5569 | Pagopar – WooCommerce Gateway | 18 | 530 | 1,215 | 400 | | | Non-prefixed global variable |
| #5570 | YAPE A1 Tiendas | 38 | 24 | 43 | 900 | | | Missing nonce verification |
| #5571 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,934 | 5,248 | 10k+ | | | Non-prefixed hook name |
| #5572 | DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | 32 | 166 | 119 | 5k+ | | | Output is not escaped |
| #5573 | Panda Pods Repeater Field | 37 | 9 | 260 | 600 | | | Non-prefixed global variable |
| #5574 | Panda Video | 80 | 29 | 17 | 3k+ | | | Non-prefixed global variable |
| #5575 | PanoPress | 31 | 111 | 234 | 2k+ | | | Output is not escaped |
| #5576 | Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More | 100 | | 2 | 2k+ | | | Non-prefixed class |
| #5577 | Panorama Block – Display 360-Degree Panoramic Views | 100 | | 0 | 700 | | | No open findings |
| #5578 | Pantheon Advanced Page Cache | 91 | 10 | 6 | 10k+ | | | Request data is not unslashed |
| #5579 | Pantheon HUD | 90 | 4 | 6 | 1k+ | | | Input is not sanitized |
| #5580 | Parallax Image | 80 | 6 | 1 | 2k+ | | | Missing direct file access protection |
| #5581 | Parallax Section Block – Add Parallax Scrolling Effects to Sections. | 87 | 3 | 22 | 3k+ | | | Non-prefixed global variable |
| #5582 | Parallax Slider Block | 82 | 15 | 12 | 900 | | | file system operations mkdir |
| #5583 | ParcelWILL (Formerly ParcelPanel) – Shipment Tracking, Tracking & Order Tracking for WooCommerce | 87 | 6 | 81 | 7k+ | | | Non-prefixed global variable |
| #5584 | پلاگین پرداخت دلخواه | 20 | 584 | 446 | 900 | | | Text Domain Mismatch |
| #5585 | Account Engagement | 32 | 115 | 74 | 2k+ | | | Output is not escaped |
| #5586 | Parent Category Toggler | 91 | 6 | 0 | 10k+ | | | Missing direct file access protection |
| #5587 | MW Font Changer | 34 | 463 | 75 | 7k+ | | | Text Domain Mismatch |
| #5588 | Participants Database | 24 | 951 | 894 | 7k+ | | | SQL query is not prepared |
| #5589 | Password bcrypt | 97 | 4 | 1 | 2k+ | | | Direct Query |
| #5590 | PHP Native Password Hash | 90 | 7 | 6 | 2k+ | | | Non-prefixed global variable |
| #5591 | Password Passthrough | 94 | 2 | 3 | 500 | | | Nonce verification recommended |
| #5592 | PPWP – Password Protect Pages | 98 | | 29 | 30k+ | | | Non-prefixed class |
| #5593 | Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content | 25 | 681 | 1,513 | 300k+ | | | Non-prefixed global variable |
| #5594 | Password Strength for WooCommerce | 98 | 3 | 0 | 1k+ | | | Missing direct file access protection |
| #5595 | Passwordless Login | 41 | 40 | 24 | 1k+ | | | Output is not escaped |
| #5596 | Passwords Evolved | 45 | 26 | 17 | 1k+ | | | Output is not escaped |
| #5597 | Pastacode | 33 | 77 | 66 | 400 | | | Non-prefixed global variable |
| #5598 | Paste as Plain Text | 98 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #5599 | Paste As Plain Text By Default | 92 | 2 | 5 | 2k+ | | | Nonce verification recommended |
| #5600 | Patchstack – WordPress & Plugins Security | 23 | 107 | 489 | 50k+ | | | Missing nonce verification |