| #5801 | Podigee WordPress Quick Publish – now with Gutenberg support! | 34 | 108 | 95 | 700 | | | Text Domain Mismatch |
| #5802 | Podium | 52 | 21 | 23 | 5k+ | | | Missing direct file access protection |
| #5803 | Podlove Podcast Publisher | 18 | 2,333 | 1,435 | 3k+ | | | Output is not escaped |
| #5804 | Podlove Subscribe button | 38 | 148 | 45 | 2k+ | | | Output is not escaped |
| #5805 | Podlove Web Player | 97 | 8 | 4 | 4k+ | | | Missing direct file access protection |
| #5806 | Pods – Custom Content Types and Fields | 41 | 5 | 233 | 100k+ | | | Direct Query |
| #5807 | Pods Alternative Cache | 35 | 1 | 0 | 5k+ | | | Hidden files included |
| #5808 | Pods Beaver Themer Add-On | 100 | | 0 | 8k+ | | | No open findings |
| #5809 | Pods Gravity Forms Add-On | 43 | | 79 | 1k+ | | | Missing nonce verification |
| #5810 | POEditor | 37 | 78 | 140 | 500 | | | Output is not escaped |
| #5811 | Pofily – WooCommerce Product Filters | 86 | 1 | 322 | 600 | | | Non-prefixed global variable |
| #5812 | Points and Rewards for WooCommerce | 100 | 1 | 0 | 7k+ | | | invalid tested upto minor |
| #5813 | Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget | 41 | 47 | 38 | 500k+ | | | Output is not escaped |
| #5814 | POKY – Product Importer | 73 | 6 | 12 | 700 | | | Input is not validated |
| #5815 | Polaroid Gallery | 38 | 105 | 20 | 1k+ | | | Unsafe printing function |
| #5816 | POLi Payments for WooCommerce | 51 | 62 | 26 | 500 | | | Text Domain Mismatch |
| #5817 | Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | 25 | 489 | 1,413 | 7k+ | | | Non-prefixed global variable |
| #5818 | TS Poll – Survey, Versus Poll, Image Poll, Video Poll | 32 | 570 | 171 | 4k+ | | | Text Domain Mismatch |
| #5819 | Crowdsignal Dashboard – Polls, Surveys & more | 26 | 486 | 489 | 200k+ | | | Unsafe printing function |
| #5820 | Polylang | 26 | 36 | 564 | 800k+ | | | Non-prefixed hook name |
| #5821 | Polylang Theme Strings | 42 | 119 | 30 | 6k+ | | | Output is not escaped |
| #5822 | PO/MO Editor | 39 | 106 | 45 | 1k+ | | | Unsafe printing function |
| #5823 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #5824 | PopCash Code Integration Tool | 38 | 77 | 109 | 400 | | | Nonce verification recommended |
| #5825 | Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales | 37 | 59 | 64 | 2k+ | | | SQL query is not prepared |
| #5826 | Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups | 35 | 168 | 29 | 20k+ | | | Output is not escaped |
| #5827 | Popular Posts by Webline | 38 | 256 | 8 | 1k+ | | | Output is not escaped |
| #5828 | Popular Posts | 35 | 166 | 71 | 900 | | | Unsafe printing function |
| #5829 | Popular Widget | 38 | 61 | 30 | 700 | | | Unsafe printing function |
| #5830 | Popularis Extra | 30 | 237 | 141 | 7k+ | | | Output is not escaped |
| #5831 | Popup addon for Ninja Forms | 40 | 121 | 25 | 1k+ | | | Output is not escaped |
| #5832 | Popup Block | 98 | 6 | 2 | 700 | | | Missing direct file access protection |
| #5833 | Popup Box – Easily Create WordPress Popups | 45 | 7 | 151 | 7k+ | | | Non-prefixed global variable |
| #5834 | Popup Builder – Create highly converting, mobile friendly marketing popups. | 30 | 26 | 722 | 200k+ | | | Non-prefixed global variable |
| #5835 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | | Non Singular String Literal Domain |
| #5836 | Popup for Contact Form 7 | 73 | 13 | 7 | 800 | | | Setting is missing a sanitization callback |
| #5837 | Popup for Elementor | 100 | | 2 | 700 | | | Non-prefixed function |
| #5838 | Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More | 55 | 44 | 64 | 7k+ | | | Text Domain Mismatch |
| #5839 | AI Popup | 23 | 1,224 | 636 | 400 | | | Text Domain Mismatch |
| #5840 | Popup Message Notifier for Contact Form 7 | 85 | 17 | 2 | 1k+ | | | Short PHP open tag found |
| #5841 | Popup Trigger URL for Elementor Pro | 86 | 2 | 4 | 10k+ | | | Nonce verification recommended |
| #5842 | Popup with fancybox | 35 | 196 | 168 | 900 | | | Unsafe printing function |
| #5843 | PopupAlly | 75 | 40 | 10 | 2k+ | | | Missing direct file access protection |
| #5844 | Popups for Divi | 89 | 99 | 57 | 100k+ | | | Text Domain Mismatch |
| #5845 | Popupsmart | 79 | 28 | 2 | 600 | | | Output is not escaped |
| #5846 | Porn Videos Embed | 96 | 17 | 2 | 2k+ | | | Missing direct file access protection |
| #5847 | Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | 26 | 525 | 240 | 600 | | | Text Domain Mismatch |
| #5848 | Portfolio Block – The Ultimate Project & Portfolio Builder | 81 | 6 | 5 | 800 | | | Offloaded Content |
| #5849 | PowerFolio – Portfolio & Image Gallery for Elementor | 97 | 10 | 12 | 10k+ | | | Non-prefixed hook name |
| #5850 | Portfolio Filter Gallery – Photo Gallery | 99 | 3 | 2 | 20k+ | | | Offloaded Content |