| #9051 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |
| #9052 | WP Edit | 33 | 337 | 137 | 40k+ | | | Unsafe printing function |
| #9053 | WPEPP – Essential Security, Password Protect & Login Page Customizer | 39 | 34 | 29 | 3k+ | | | Unsupported Identifier Placeholder |
| #9054 | WP Edit Username | 98 | 1 | 14 | 2k+ | | | Non-prefixed hook name |
| #9055 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #9056 | EditorFontsize | 96 | 5 | 2 | 500 | | | Missing direct file access protection |
| #9057 | WP Editor Widget | 77 | 9 | 6 | 9k+ | | | Unsafe printing function |
| #9058 | WP-EMail | 36 | 340 | 95 | 1k+ | | | Unsafe printing function |
| #9059 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #9060 | WP Email Template | 19 | 344 | 345 | 2k+ | | | Exception output is not escaped |
| #9061 | WP Emmet | 37 | 154 | 8 | 3k+ | | | Output is not escaped |
| #9062 | WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 30 | 113 | 419 | 1k+ | | | Non-prefixed global variable |
| #9063 | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | 90 | | 20 | 20k+ | | | Non-prefixed function |
| #9064 | WP Eventbrite Embedded Checkout | 52 | 49 | 7 | 700 | | | Text Domain Mismatch |
| #9065 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #9066 | WP Events Manager WooCommerce | 81 | 20 | 10 | 1k+ | | | Text Domain Mismatch |
| #9067 | Ever Accounting – Accounting & Invoicing Solution for Small Businesses | 68 | 69 | 661 | 1k+ | | | Non-prefixed hook name |
| #9068 | Custom Product Tabs for WooCommerce & WordPress Tabs Builder – Smart Tabs | 91 | | 412 | 10k+ | | | Non-prefixed global variable |
| #9069 | WP Export Categories & Taxonomies | 37 | 169 | 35 | 500 | | | Output is not escaped |
| #9070 | Export WordPress Menus | 69 | 94 | 22 | 1k+ | | | wp function not compatible with requires wp |
| #9071 | Custom Post Exporter | 99 | 7 | 1 | 3k+ | | | Text Domain Mismatch |
| #9072 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #9073 | WP Extended Search | 41 | 159 | 37 | 20k+ | | | Output is not escaped |
| #9074 | External Links – nofollow, noopener & new window | 93 | 24 | 67 | 90k+ | | | Non-prefixed global variable |
| #9075 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | | Missing Arg Domain |
| #9076 | WP Extra File Types | 43 | 11 | 26 | 40k+ | | | Request data is not unslashed |
| #9077 | remarketable | 30 | 281 | 93 | 600 | | | Output is not escaped |
| #9078 | WP Review Slider | 25 | 1,186 | 2,279 | 6k+ | | | Non-prefixed global variable |
| #9079 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | | Dynamic hook name |
| #9080 | WP fail2ban Add-on for Contact Form 7 | 85 | 10 | 18 | 800 | | | Non-prefixed constant |
| #9081 | WP fail2ban Add-on for Gravity Forms | 85 | 10 | 18 | 600 | | | Non-prefixed constant |
| #9082 | WP Fail2Ban Redux | 82 | 1 | 10 | 7k+ | | | trademarked term |
| #9083 | WP fancybox | 86 | 7 | 8 | 1k+ | | | Output is not escaped |
| #9084 | WP-Farsi | 65 | 26 | 36 | 600 | | | Non-prefixed function |
| #9085 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #9086 | WP Favicon | 68 | 25 | 9 | 500 | | | Non Singular String Literal Domain |
| #9087 | WP Favicon Remover | 97 | 3 | 4 | 10k+ | | | trademarked term |
| #9088 | WP Social AutoConnect | 33 | 290 | 144 | 400 | | | Output is not escaped |
| #9089 | WP Featherlight Disabled | 89 | 5 | 11 | 2k+ | | | trademarked term |
| #9090 | Feed Post Thumbnail | 78 | 9 | 3 | 2k+ | | | Unsafe printing function |
| #9091 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #9092 | Iptanus File Upload | 24 | 509 | 1,325 | 10k+ | | | Non-prefixed function |
| #9093 | WP Fingerprint | 42 | 34 | 47 | 9k+ | | | Direct Query |
| #9094 | WP First Letter Avatar | 48 | 40 | 7 | 2k+ | | | Output is not escaped |
| #9095 | WP Flashy Marketing Automation | 26 | 432 | 186 | 2k+ | | | Text Domain Mismatch |
| #9096 | Flexible Map | 85 | 10 | 7 | 7k+ | | | Non-prefixed class |
| #9097 | WP Flexslider | 35 | 15 | 7 | 600 | | | Unsafe printing function |
| #9098 | Album Photostream Flickr Gallery | 77 | 30 | 31 | 1k+ | | | Text Domain Mismatch |
| #9099 | WP Flipclock | 96 | 7 | 8 | 600 | | | Missing direct file access protection |
| #9100 | WP Fluid Images | 97 | 4 | 3 | 400 | | | trademarked term |