| #9601 | WPComplete | 29 | 383 | 333 | 1k+ | | | Output is not escaped |
| #9602 | WPCopyRights网站防复制插件 | 93 | 1 | 33 | 500 | | | Non-prefixed global variable |
| #9603 | WPCore Plugin Manager | 35 | 118 | 38 | 9k+ | | | Text Domain Mismatch |
| #9604 | WPD Beaver Builder Additions | 35 | 406 | 35 | 600 | | | Non Singular String Literal Domain |
| #9605 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,811 | 1,432 | 70k+ | | | Output is not escaped |
| #9606 | wpDataTables integration for Forminator Forms | 45 | 62 | 38 | 1k+ | | | Text Domain Mismatch |
| #9607 | Translation with DeepL API | 99 | 1 | 1 | 4k+ | | | outdated tested upto header |
| #9608 | Responsive Vertical Icon Menu | 38 | 188 | 85 | 700 | | | Output is not escaped |
| #9609 | WPDevDesign – Oxygen – Essentials | 98 | 3 | 3 | 600 | | | trademarked term |
| #9610 | WPDevDesign – Oxygen – Navigator | 98 | 8 | 4 | 1k+ | | | Missing Arg Domain |
| #9611 | WPDevDesign – Oxygen – Rank Math Integration | 98 | 3 | 3 | 1k+ | | | trademarked term |
| #9612 | wpDirAuth | 32 | 250 | 135 | 500 | | | wp function not compatible with requires wp |
| #9613 | Comments – wpDiscuz | 23 | 620 | 1,180 | 70k+ | | | Non-prefixed global variable |
| #9614 | Download Manager Addons for Elementor | 70 | 272 | 13 | 6k+ | | | Non Singular String Literal Domain |
| #9615 | Editor Blocks by Download Manager | 33 | 174 | 102 | 5k+ | | | Output is not escaped |
| #9616 | Premium Packages – Sell Digital Products Securely | 20 | 2,032 | 2,232 | 2k+ | | | Non-prefixed global variable |
| #9617 | WP Views Counter | 35 | 81 | 42 | 2k+ | | | Output is not escaped |
| #9618 | WPElemento Importer | 35 | 126 | 123 | 9k+ | | | Text Domain Mismatch |
| #9619 | WPeMatico RSS Feed Fetcher | 24 | 1,378 | 587 | 10k+ | | | Output is not escaped |
| #9620 | WP Extended – The Ultimate WordPress Toolkit | 21 | 1,253 | 398 | 600 | | | Non Singular String Literal Domain |
| #9621 | WP fail2ban Blocklist | 36 | 61 | 63 | 3k+ | | | SQL query is not prepared |
| #9622 | Wp Favs – Plugin Manager | 34 | 238 | 153 | 3k+ | | | Text Domain Mismatch |
| #9623 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #9624 | wpForo Forum | 17 | 4,054 | 3,033 | 20k+ | | | Unsafe printing function |
| #9625 | WPFrank Companion | 26 | 2,356 | 865 | 1k+ | | | Text Domain Mismatch |
| #9626 | WPFrom Email | 51 | 44 | 12 | 600 | | | Output is not escaped |
| #9627 | WPFront Notification Bar | 40 | 222 | 44 | 50k+ | | | Output is not escaped |
| #9628 | WPFront Scroll Top | 100 | | 4 | 200k+ | | | trademarked term |
| #9629 | WPFront User Role Editor | 35 | 333 | 578 | 30k+ | | | Output is not escaped |
| #9630 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 6,002 | 2,790 | 5k+ | | | Text Domain Mismatch |
| #9631 | WPGet API – Connect to any external REST API | 89 | 15 | 19 | 10k+ | | | Missing direct file access protection |
| #9632 | WPGlobus | 95 | 3 | 83 | 9k+ | | | Non-prefixed global variable |
| #9633 | WPGlobus for WPBakery Visual Composer | 95 | 4 | 7 | 2k+ | | | trademarked term |
| #9634 | WPGraphQL for ACF | 35 | 6 | 18 | 10k+ | | | Output is not escaped |
| #9635 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | | | Text Domain Mismatch |
| #9636 | WPGSI: Spreadsheet Integration | 24 | 784 | 1,587 | 2k+ | | | Non-prefixed global variable |
| #9637 | One to one user Chat by WPGuppy | 31 | 74 | 187 | 700 | | | Non-prefixed global variable |
| #9638 | WPHindi – Type in Hindi in WordPress | 95 | 7 | 9 | 1k+ | | | Not In Footer |
| #9639 | WPIDE – File Manager & Code Editor | 24 | 612 | 1,399 | 40k+ | | | Non-prefixed global variable |
| #9640 | WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce | 28 | 177 | 226 | 5k+ | | | Output is not escaped |
| #9641 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | | | Non-prefixed global variable |
| #9642 | WPInterface Add-ons | 100 | | 3 | 1k+ | | | trademarked term |
| #9643 | WPJAM Basic | 19 | 320 | 347 | 4k+ | | | Output is not escaped |
| #9644 | WPJM Extra Fields | 88 | 5 | 5 | 2k+ | | | trademarked term |
| #9645 | WPLANG Lite | 84 | 8 | 5 | 400 | | | trademarked term |
| #9646 | Privacy Policy Generator – WPLP Legal Pages | 32 | 26 | 409 | 10k+ | | | Non-prefixed global variable |
| #9647 | wpLingua – Automatic translation – Translate and make website multilingual | 35 | 79 | 167 | 2k+ | | | Nonce verification recommended |
| #9648 | WPLMS CoAuthors Plus | 92 | 3 | 4 | 1k+ | | | trademarked term |
| #9649 | WPLMS H5P | 36 | 111 | 106 | 1k+ | | | Text Domain Mismatch |
| #9650 | WPLMS MyCred AddOn | 34 | 383 | 73 | 800 | | | Text Domain Mismatch |