| #9251 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #9252 | WP Multisite Content Copier/Updater | 40 | 19 | 144 | 800 | | | Interpolated SQL is not prepared |
| #9253 | WP Multisite User Sync/Unsync | 66 | 15 | 31 | 700 | | | Missing Arg Domain |
| #9254 | WP Instant Feeds | 35 | 19 | 12 | 6k+ | | | Output is not escaped |
| #9255 | WP MyLinks | 33 | 354 | 206 | 1k+ | | | Text Domain Mismatch |
| #9256 | Native PHP Sessions | 38 | 30 | 92 | 10k+ | | | Direct Query |
| #9257 | WP Nav Plus | 40 | 95 | 13 | 1k+ | | | Output is not escaped |
| #9258 | Nested Pages | 25 | 674 | 560 | 90k+ | | | Non-prefixed global variable |
| #9259 | New Relic Reporting for WordPress | 79 | 4 | 16 | 600 | | | Nonce verification recommended |
| #9260 | WP Night Mode | 77 | 8 | 11 | 700 | | | Non-prefixed function |
| #9261 | Pledged Plugins PCI Gateway for NMI and WooCommerce | 41 | 160 | 42 | 2k+ | | | Text Domain Mismatch |
| #9262 | WP No Base Permalink | 71 | 8 | 10 | 10k+ | | | Unsafe printing function |
| #9263 | WP-NoIndex | 97 | 4 | 2 | 400 | | | trademarked term |
| #9264 | Disable Bulk Smush Limit of Smush Image Optimization | 35 | 3 | 2 | 3k+ | | | Hidden files included |
| #9265 | WP Notes Widget | 34 | 217 | 36 | 700 | | | Output is not escaped |
| #9266 | WP Notification Bars | 67 | 13 | 32 | 10k+ | | | Request data is not unslashed |
| #9267 | WP Notification Bell | 24 | 736 | 1,591 | 700 | | | Non-prefixed global variable |
| #9268 | WP Notification Center | 84 | 7 | 8 | 1k+ | | | Exception output is not escaped |
| #9269 | WP Old Post Date Remover | 57 | 25 | 7 | 2k+ | | | Unsafe printing function |
| #9270 | WP Open Street Map | 35 | 59 | 111 | 3k+ | | | Input is not validated |
| #9271 | WP OpenAPI | 45 | 26 | 22 | 400 | | | Output is not escaped |
| #9272 | WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance | 56 | 5 | 774 | 1m+ | | | Non-prefixed global variable |
| #9273 | WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce | 61 | 22 | 74 | 1k+ | | | Non-prefixed global variable |
| #9274 | WP Original Media Path | 69 | 35 | 3 | 6k+ | | | Non Singular String Literal Domain |
| #9275 | Override String Translations | 84 | 8 | 6 | 1k+ | | | Nonce verification recommended |
| #9276 | WP Page Loading | 79 | 14 | 9 | 800 | | | Text Domain Mismatch |
| #9277 | WP-PageNavi | 35 | 84 | 95 | 500k+ | | | Non Singular String Literal Domain |
| #9278 | WP PageNavi Style | 37 | 109 | 11 | 8k+ | | | Unsafe printing function |
| #9279 | WP-Paginate | 35 | 37 | 55 | 20k+ | | | Input is not validated |
| #9280 | WP Paint – WordPress Image Editor | 40 | 30 | 29 | 6k+ | | | Missing Arg Domain |
| #9281 | Parse.ly | 35 | 15 | 44 | 1k+ | | | Non-prefixed hook name |
| #9282 | Payhip Integration for WP | 99 | | 4 | 400 | | | trademarked term |
| #9283 | Payment Button for PayPal | 36 | 155 | 86 | 4k+ | | | Unsafe printing function |
| #9284 | WP PDF Generator | 84 | 21 | 22 | 1k+ | | | Request data is not unslashed |
| #9285 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | | | Unsafe printing function |
| #9286 | WP Permalink Translator | 41 | 34 | 21 | 2k+ | | | Unsafe printing function |
| #9287 | WP Permastructure | 79 | 14 | 6 | 400 | | | Missing Arg Domain |
| #9288 | WP-Persian | 35 | 144 | 37 | 7k+ | | | Unsafe printing function |
| #9289 | Persistent Login | 37 | 338 | 108 | 6k+ | | | Unsafe printing function |
| #9290 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | | | Output is not escaped |
| #9291 | WP Photo Album Plus | 25 | 4 | 1,807 | 10k+ | | | Direct Query |
| #9292 | WP PHP Console | 47 | 18 | 24 | 500 | | | Output is not escaped |
| #9293 | WP PHP Version Display | 90 | 6 | 4 | 3k+ | | | trademarked term |
| #9294 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | | Missing Arg Domain |
| #9295 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | | | Missing Translators Comment |
| #9296 | WP Plugin Info Card | 37 | 53 | 376 | 500 | | | Nonce verification recommended |
| #9297 | WP Plugin Manager – Deactivate plugins per page | 94 | 18 | 11 | 3k+ | | | Missing direct file access protection |
| #9298 | WP-Polls | 25 | 618 | 639 | 40k+ | | | Unsafe printing function |
| #9299 | WP Popup | 32 | 539 | 65 | 1k+ | | | Text Domain Mismatch |
| #9300 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |