| #9451 | WP Subscription Forms – Subscription Form Plugin for WordPress | 34 | 131 | 220 | 400 | | | Non-prefixed global variable |
| #9452 | WP Subtitle | 81 | 7 | 33 | 10k+ | | | Non-prefixed hook name |
| #9453 | WP Super Cache | 25 | 800 | 989 | 1m+ | | | Output is not escaped |
| #9454 | Clear All Cache for WP Super Cache | 97 | 3 | 5 | 6k+ | | | trademarked term |
| #9455 | WP Super Edit | 36 | 35 | 185 | 2k+ | | | Nonce verification recommended |
| #9456 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | | | Non-prefixed constant |
| #9457 | WP SVG Images | 50 | 58 | 12 | 30k+ | | | Text Domain Mismatch |
| #9458 | WP-Sweep | 74 | 1 | 201 | 100k+ | | | Direct Query |
| #9459 | WP-SWFObject | 60 | 14 | 24 | 1k+ | | | Deprecated parameter: add_option parameter 3 |
| #9460 | WP Swiper | 49 | 67 | 28 | 5k+ | | | Text Domain Mismatch |
| #9461 | WP Sync for Notion – Notion to WordPress | 94 | 14 | 47 | 1k+ | | | Non-prefixed hook name |
| #9462 | WP System Information | 35 | 237 | 30 | 700 | | | Text Domain Mismatch |
| #9463 | WP Tab Widget | 40 | 128 | 32 | 10k+ | | | Output is not escaped |
| #9464 | WP Table Builder – Drag & Drop Table Builder | 57 | 63 | 39 | 50k+ | | | Not Allowed |
| #9465 | Track, Analyze & Optimize by WP Tao | 23 | 895 | 756 | 600 | | | Output is not escaped |
| #9466 | WP Taxonomy Order | 99 | | 6 | 1k+ | | | trademarked term |
| #9467 | WP Term Colors | 74 | 3 | 13 | 700 | | | Nonce verification recommended |
| #9468 | WP Term Images | 66 | 4 | 18 | 2k+ | | | Nonce verification recommended |
| #9469 | WP Term Order | 64 | 2 | 26 | 6k+ | | | Nonce verification recommended |
| #9470 | WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups | 38 | 299 | 58 | 3k+ | | | Non Singular String Literal Domain |
| #9471 | WP Test Email | 41 | 32 | 28 | 20k+ | | | Unsafe printing function |
| #9472 | WP Theme Changelogs | 68 | 13 | 18 | 900 | | | Nonce verification recommended |
| #9473 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #9474 | Wp Theme plugin Download | 62 | 11 | 16 | 2k+ | | | Output is not escaped |
| #9475 | WP Theme Test | 40 | 21 | 39 | 7k+ | | | Input is not sanitized |
| #9476 | WPThumb | 70 | 30 | 9 | 800 | | | Output is not escaped |
| #9477 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #9478 | QuadLayers TikTok Feed | 47 | 78 | 52 | 7k+ | | | Text Domain Mismatch |
| #9479 | WP Time Slots Booking Form | 25 | 439 | 1,137 | 1k+ | | | Non-prefixed global variable |
| #9480 | WP TinyMCE Tables | 98 | 3 | 3 | 400 | | | trademarked term |
| #9481 | Social Media Auto Poster – Schedule & Publish to Buffer | 58 | 23 | 211 | 7k+ | | | Dynamic hook name |
| #9482 | WP To Top | 35 | 30 | 29 | 1k+ | | | Non-prefixed global variable |
| #9483 | XPoster – Share to Bluesky and Mastodon | 62 | 26 | 36 | 10k+ | | | Missing nonce verification |
| #9484 | Divi Gravity Forms (WP Tools) | 23 | 579 | 1,311 | 2k+ | | | Non-prefixed global variable |
| #9485 | TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More | 37 | 878 | 59 | 800 | | | Output is not escaped |
| #9486 | Wp Tracking Codes | 81 | 7 | 12 | 900 | | | Nonce verification recommended |
| #9487 | WP Travel – Ultimate Travel Booking System, Tour Management Engine | 24 | 227 | 1,954 | 4k+ | | | Non-prefixed hook name |
| #9488 | WP Travel Gutenberg Blocks | 28 | 485 | 157 | 900 | | | Output is not escaped |
| #9489 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,012 | 5,689 | 20k+ | | | Non-prefixed global variable |
| #9490 | WP TripAdvisor Review Slider | 25 | 1,053 | 2,577 | 8k+ | | | Non-prefixed global variable |
| #9491 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | | Non-prefixed global variable |
| #9492 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 600 | | | Output is not escaped |
| #9493 | WP Twitter Feeds | 34 | 202 | 82 | 2k+ | | | Output is not escaped |
| #9494 | wp-Typography | 67 | 91 | 33 | 20k+ | | | Missing direct file access protection |
| #9495 | WP ULike – Like & Dislike Buttons for Engagement and Feedback | 31 | 269 | 358 | 60k+ | | | Output is not escaped |
| #9496 | WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | 23 | 1,158 | 3,642 | 20k+ | | | Interpolated SQL is not prepared |
| #9497 | Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | 24 | 363 | 1,130 | 6k+ | | | Direct Query |
| #9498 | WP Ultimate Post Grid | 34 | 114 | 74 | 4k+ | | | Missing direct file access protection |
| #9499 | WP Ultimate Review | 55 | 23 | 381 | 70k+ | | | Non-prefixed global variable |
| #9500 | WP Updates Notifier | 35 | 23 | 4 | 30k+ | | | Missing Translators Comment |