| #9001 | WP Cron Cleaner | 42 | 51 | 38 | 500 | | | Unsafe printing function |
| #9002 | WP-Cron Control | 37 | 54 | 22 | 1k+ | | | Output is not escaped |
| #9003 | WP Cron HTTP Auth | 74 | 12 | 7 | 1k+ | | | Output is not escaped |
| #9004 | WP Crontrol | 41 | 20 | 91 | 300k+ | | | Nonce verification recommended |
| #9005 | WP Crowdfunding | 23 | 199 | 1,629 | 2k+ | | | Non-prefixed global variable |
| #9006 | WP Custom Admin Interface | 34 | 263 | 118 | 30k+ | | | Unsafe printing function |
| #9007 | WP Custom Author URL | 47 | 16 | 38 | 5k+ | | | Non-prefixed global variable |
| #9008 | WP Custom Avatar | 98 | 2 | 5 | 500 | | | trademarked term |
| #9009 | Custom Body Class | 35 | 39 | 101 | 10k+ | | | Non-prefixed global variable |
| #9010 | Custom CSS/JS | 40 | 58 | 34 | 700 | | | Text Domain Mismatch |
| #9011 | WP Custom Cursors | WordPress Cursor Plugin | 36 | 691 | 390 | 9k+ | | | Text Domain Mismatch |
| #9012 | WP Customer Reviews | 98 | | 11 | 20k+ | | | slow db query meta query |
| #9013 | WP-Cycle | 39 | 53 | 17 | 3k+ | | | Output is not escaped |
| #9014 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | | | Non-prefixed global variable |
| #9015 | WP Dashboard Messages | 87 | 9 | 11 | 400 | | | Text Domain Mismatch |
| #9016 | WP Dashboard Notes | 41 | 24 | 29 | 20k+ | | | Unsafe printing function |
| #9017 | WP Database Backup – Unlimited Database & Files Backup by Backup for WP | 89 | 855 | 11 | 30k+ | | | Text Domain Mismatch |
| #9018 | WP DataTable | 97 | 1 | 11 | 600 | | | Missing Version |
| #9019 | WP Date and Time Shortcode | 40 | 90 | 12 | 10k+ | | | Output is not escaped |
| #9020 | WP Datepicker | 35 | 225 | 181 | 7k+ | | | Output is not escaped |
| #9021 | Database Backup for WordPress | 35 | 128 | 88 | 70k+ | | | Output is not escaped |
| #9022 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #9023 | WP Debugging | 99 | 1 | 5 | 10k+ | | | trademarked term |
| #9024 | Wp Default Sender Email by IT Pixelz | 34 | 682 | 25 | 500 | | | Output is not escaped |
| #9025 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | | | Output is not escaped |
| #9026 | WP Delete User Accounts | 80 | 10 | 7 | 800 | | | Missing direct file access protection |
| #9027 | Featherweight | 99 | | 3 | 10k+ | | | Non-prefixed class |
| #9028 | WP Disable Automatic Updates | 69 | 14 | 8 | 2k+ | | | Output is not escaped |
| #9029 | WP Disable Site Health | 93 | 4 | 4 | 1k+ | | | trademarked term |
| #9030 | WP Disables Updates | 75 | 19 | 7 | 700 | | | Text Domain Mismatch |
| #9031 | WP Discord Invite | 40 | 73 | 42 | 400 | | | Unsafe printing function |
| #9032 | WP Discord Post Plus – Supports Unlimited Channels | 38 | 116 | 34 | 700 | | | Text Domain Mismatch |
| #9033 | WP Discourse | 24 | 103 | 114 | 1k+ | | | Nonce verification recommended |
| #9034 | Discussion Board – WordPress Forum Plugin | 31 | 105 | 153 | 2k+ | | | Request data is not unslashed |
| #9035 | WP Display Header | 98 | 15 | 3 | 7k+ | | | Text Domain Mismatch |
| #9036 | Dobby | 97 | 3 | 2 | 900 | | | Dynamic hook name |
| #9037 | WP Docs | 30 | 268 | 271 | 1k+ | | | Output is not escaped |
| #9038 | WP Document Revisions | 98 | 7 | 7 | 2k+ | | | wp function not compatible with requires wp |
| #9039 | WP Downgrade | Specific Core Version | 78 | 12 | 6 | 100k+ | | | Unsafe printing function |
| #9040 | WP Downloader | 62 | 11 | 15 | 2k+ | | | Output is not escaped |
| #9041 | WP-DownloadManager | 25 | 607 | 508 | 3k+ | | | Unsafe printing function |
| #9042 | WP DPE-GES | 92 | 84 | 59 | 600 | | | Text Domain Mismatch |
| #9043 | WP-DraftsForFriends | 38 | 141 | 71 | 1k+ | | | Output is not escaped |
| #9044 | WP Dummy Content Generator | 34 | 93 | 130 | 6k+ | | | Output is not escaped |
| #9045 | WP Duplicate Page | 35 | 44 | 50 | 60k+ | | | Text Domain Mismatch |
| #9046 | WP Dynamic Keywords Injector | 34 | 44 | 205 | 1k+ | | | Nonce verification recommended |
| #9047 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 910 | 1,835 | 1k+ | | | Non-prefixed global variable |
| #9048 | WP Easy Uploader | 31 | 202 | 113 | 500 | | | Non Singular String Literal Domain |
| #9049 | Shopping Cart & eCommerce Store | 18 | 5,541 | 17,397 | 3k+ | | | Non-prefixed global variable |
| #9050 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |