| #8851 | AI ChatBot for WooCommerce – WoowBot | 24 | 144 | 524 | 900 | | | Request data is not unslashed |
| #8852 | WoowGallery | 60 | 15 | 178 | 1k+ | | | Non-prefixed global variable |
| #8853 | Word Balloon | 40 | 20 | 125 | 10k+ | | | Request data is not unslashed |
| #8854 | Wordable – Export Google Docs to WordPress | 37 | 47 | 63 | 2k+ | | | Output is not escaped |
| #8855 | WordClever – AI Content Writer | 86 | 4 | 2 | 3k+ | | | Missing direct file access protection |
| #8856 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | | | Output is not escaped |
| #8857 | Wordfence Login Security | 25 | 248 | 418 | 60k+ | | | Output is not escaped |
| #8858 | WP 2-step verification | 32 | 154 | 65 | 1k+ | | | Output is not escaped |
| #8859 | WordPress Beta Tester | 97 | 1 | 15 | 2k+ | | | Non-prefixed hook name |
| #8860 | Database Reset | 98 | 14 | 3 | 10k+ | | | Missing direct file access protection |
| #8861 | Easy Accept Payments via PayPal | 35 | 322 | 128 | 7k+ | | | Text Domain Mismatch |
| #8862 | SFN Easy FAQ Manager | 92 | 127 | 14 | 2k+ | | | Text Domain Mismatch |
| #8863 | WP Hebrew Date | 38 | 102 | 13 | 600 | | | Output is not escaped |
| #8864 | WordPress Importer | 25 | 238 | 110 | 2m+ | | | Output is not escaped |
| #8865 | WP Simple Adsense Insertion | 66 | 3 | 29 | 3k+ | | | Input is not validated |
| #8866 | WP Popular Posts | 29 | 77 | 300 | 100k+ | | | Non-prefixed global variable |
| #8867 | Hustle – Email Marketing, Lead Generation, Optins, Popups | 37 | 4,894 | 5,942 | 90k+ | | | Non-prefixed global variable |
| #8868 | WP Database Reset | 98 | 1 | 10 | 5k+ | | | Direct Query |
| #8869 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 159 | 386 | 10m+ | | | Non-prefixed global variable |
| #8870 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #8871 | Tooltips for WordPress | 31 | 312 | 252 | 5k+ | | | Output is not escaped |
| #8872 | Worldline Global Online Pay for WooCommerce | 31 | 160 | 86 | 500 | | | Missing direct file access protection |
| #8873 | iControlWP | 47 | 45 | 59 | 1k+ | | | Missing direct file access protection |
| #8874 | Worth The Read | 23 | 873 | 138 | 3k+ | | | Text Domain Mismatch |
| #8875 | Divi Carousel Free (Divi5 Support) | 88 | 268 | 26 | 30k+ | | | Text Domain Mismatch |
| #8876 | Fix Media Library | 37 | 53 | 71 | 1k+ | | | Output is not escaped |
| #8877 | WOW Slider | 33 | 176 | 101 | 3k+ | | | Output is not escaped |
| #8878 | WP 4 Me Title Remover | 71 | 17 | 13 | 1k+ | | | Missing direct file access protection |
| #8879 | WP 404 Auto Redirect to Similar Post | 38 | 166 | 48 | 30k+ | | | Text Domain Mismatch |
| #8880 | HTTP 410 (Gone) responses | 100 | | 2 | 4k+ | | | Non-prefixed constant |
| #8881 | WP About Author | 98 | 3 | 3 | 500 | | | trademarked term |
| #8882 | Access Areas for WordPress | 35 | 17 | 95 | 400 | | | Direct Query |
| #8883 | WP Accessibility | 39 | 200 | 104 | 60k+ | | | Unsafe printing function |
| #8884 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #8885 | Action Network | 76 | 19 | 17 | 400 | | | error log error log |
| #8886 | WP ADA Compliance Check Basic | 28 | 785 | 177 | 3k+ | | | Text Domain Mismatch |
| #8887 | WP Add Custom CSS | 39 | 45 | 23 | 60k+ | | | Output is not escaped |
| #8888 | Add MIME Types | 100 | | 1 | 50k+ | | | trademarked term |
| #8889 | WP Admin Audit | 24 | 1,051 | 781 | 1k+ | | | error log print r |
| #8890 | WP Admin Basic Auth | 87 | 5 | 6 | 2k+ | | | Input is not sanitized |
| #8891 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #8892 | WP Admin UI Customize | 30 | 629 | 390 | 30k+ | | | Non-prefixed global variable |
| #8893 | استایل مدیریت وردپرس | 88 | 5 | 4 | 2k+ | | | Not In Footer |
| #8894 | WP Adsterra Dashboard | 57 | 22 | 21 | 400 | | | wp function not compatible with requires wp |
| #8895 | WP Affiliate Disclosure | 22 | 1,358 | 1,504 | 1k+ | | | Non-prefixed global variable |
| #8896 | After Login Redirect | 98 | 1 | 21 | 1k+ | | | Non-prefixed global variable |
| #8897 | WP Airbnb Review Slider | 25 | 325 | 646 | 1k+ | | | Non-prefixed global variable |
| #8898 | Mihdan: Ajax Edit Comments | 27 | 1,300 | 523 | 400 | | | Text Domain Mismatch |
| #8899 | WP Ajax Load More Pagination and Infinite Scroll | 40 | 63 | 15 | 400 | | | Output is not escaped |
| #8900 | Ajaxify Comments – Ajax and Lazy Loading Comments | 65 | 20 | 38 | 3k+ | | | Non-prefixed hook name |