| #8451 | White Label CMS | 33 | 412 | 202 | 200k+ | | | Unsafe printing function |
| #8452 | Whitelist IP For Limit Login Attempts | 48 | 18 | 12 | 500 | | | Output is not escaped |
| #8453 | WHMCS Bridge | 23 | 247 | 472 | 4k+ | | | Nonce verification recommended |
| #8454 | Who Stole the Text Justify Button ?! | 98 | 1 | 3 | 7k+ | | | Non-prefixed function |
| #8455 | WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | 38 | 33 | 181 | 2k+ | | | Non-prefixed global variable |
| #8456 | Whols – Wholesale Prices and B2B Store Solution for WooCommerce | 27 | 228 | 235 | 2k+ | | | Output is not escaped |
| #8457 | Hide Posts | 59 | 9 | 70 | 20k+ | | | Direct Query |
| #8458 | Wicked Block Conditions | 82 | 6 | 6 | 600 | | | Nonce verification recommended |
| #8459 | Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types | 39 | 89 | 117 | 20k+ | | | Unsafe printing function |
| #8460 | Wider Admin Menu | 40 | 76 | 17 | 2k+ | | | Output is not escaped |
| #8461 | Wider Gravity Forms Stop Entries | 87 | 22 | 0 | 600 | | | Text Domain Mismatch |
| #8462 | Widget Areas for LearnDash | 98 | 4 | 1 | 600 | | | Missing direct file access protection |
| #8463 | Widget Box Lite | 37 | 318 | 17 | 900 | | | Output is not escaped |
| #8464 | Widget Builder | 40 | 40 | 52 | 500 | | | Non-prefixed global variable |
| #8465 | Widget Classes | 77 | 5 | 7 | 1k+ | | | Missing nonce verification |
| #8466 | Widget Contact Form 7 | 67 | 22 | 2 | 1k+ | | | Output is not escaped |
| #8467 | Widget Contact Now | 42 | 69 | 6 | 500 | | | Output is not escaped |
| #8468 | Widget Context | 53 | 14 | 20 | 40k+ | | | Non-prefixed hook name |
| #8469 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #8470 | Widget CSS Classes | 85 | 47 | 8 | 80k+ | | | Non Singular String Literal Domain |
| #8471 | Widget Detector for Elementor | 24 | 1,057 | 1,567 | 1k+ | | | Non-prefixed global variable |
| #8472 | Display Eventbrite Events | 96 | | 31 | 3k+ | | | error log print r |
| #8473 | Rich Showcase for Google Reviews | 33 | 212 | 278 | 100k+ | | | Output is not escaped |
| #8474 | Widget Icon | 53 | 53 | 10 | 700 | | | Output is not escaped |
| #8475 | Widget Importer & Exporter | 98 | 9 | 1 | 200k+ | | | wp function not compatible with requires wp |
| #8476 | Widget Indicadores Económicos (Chile) | 36 | 53 | 20 | 500 | | | Output is not escaped |
| #8477 | Widget Instance | 94 | 7 | 11 | 500 | | | Non-prefixed global variable |
| #8478 | Widget Manager Light | 30 | 233 | 83 | 600 | | | Text Domain Mismatch |
| #8479 | Widget Menuizer | 40 | 44 | 26 | 600 | | | Missing Arg Domain |
| #8480 | Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 31 | 837 | 295 | 100k+ | | | Unsafe printing function |
| #8481 | Widget Post Slider | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #8482 | Widget Visibility Time Scheduler | 42 | 70 | 34 | 1k+ | | | Output is not escaped |
| #8483 | Widget Visibility Without Jetpack | 40 | 74 | 47 | 5k+ | | | Text Domain Mismatch |
| #8484 | Widget for Yelp Reviews | 29 | 147 | 158 | 2k+ | | | Output is not escaped |
| #8485 | Widgetize Pages Light | 30 | 145 | 104 | 3k+ | | | Output is not escaped |
| #8486 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | | | Non-prefixed global variable |
| #8487 | Widgets Control | 40 | 92 | 47 | 800 | | | Output is not escaped |
| #8488 | Widgets for Ebay Reviews | 96 | | 346 | 500 | | | Non-prefixed global variable |
| #8489 | Widgets for Google Reviews and Ratings | 84 | 2 | 10 | 3k+ | | | Missing nonce verification |
| #8490 | Widgets for Social Post Feed | 91 | 1 | 146 | 400 | | | Non-prefixed global variable |
| #8491 | Widgets for Thumbtack Reviews | 96 | | 349 | 900 | | | Non-prefixed global variable |
| #8492 | Widgets in Menu for WordPress | 74 | 16 | 12 | 8k+ | | | Text Domain Mismatch |
| #8493 | Widgets on Pages | 23 | 809 | 1,306 | 20k+ | | | Non-prefixed global variable |
| #8494 | Widgets Reloaded | 53 | 62 | 20 | 1k+ | | | Output is not escaped |
| #8495 | Widget Click to Chat | 61 | 22 | 4 | 500 | | | Setting is missing a sanitization callback |
| #8496 | Wikipedia Preview | 96 | 8 | 15 | 1k+ | | | Non-prefixed function |
| #8497 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #8498 | Wincher Rank Tracker | 80 | 8 | 6 | 3k+ | | | Output is not escaped |
| #8499 | Microsoft Azure Storage for WordPress | 86 | 25 | 26 | 2k+ | | | Missing Translators Comment |
| #8500 | WindPress – Tailwind CSS integration for WordPress | 71 | 16 | 106 | 3k+ | | | Non-prefixed hook name |