| #9751 | xili-language | 24 | 1,501 | 523 | 600 | | | Output is not escaped |
| #9752 | xili-tidy-tags | 35 | 224 | 157 | 1k+ | | | Output is not escaped |
| #9753 | XLTab – Accordions and Tabs for Elementor Page Builder | 40 | 317 | 65 | 1k+ | | | Text Domain Mismatch |
| #9754 | XML Feed for Skroutz & BestPrice for WooCommerce | 57 | 12 | 50 | 600 | | | Input is not sanitized |
| #9755 | XML for Google Merchant Center | 29 | 52 | 312 | 3k+ | | | Non-prefixed global variable |
| #9756 | XML Sitemap & Google News | 47 | 270 | 224 | 100k+ | | | Non-prefixed global variable |
| #9757 | Xml Sitemap Generator | 34 | 72 | 47 | 400 | | | SQL query is not prepared |
| #9758 | XML Sitemaps | 33 | 65 | 62 | 2k+ | | | Output is not escaped |
| #9759 | XO Featured Image Tools | 98 | 4 | 3 | 30k+ | | | wp function not compatible with requires wp |
| #9760 | XO Post Background | 98 | 2 | 2 | 1k+ | | | Discouraged text-domain loading |
| #9761 | XO Security | 94 | 5 | 3 | 30k+ | | | wp function not compatible with requires wp |
| #9762 | Xpro Addons For Beaver Builder – Lite | 23 | 3,454 | 640 | 700 | | | Text Domain Mismatch |
| #9763 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #9764 | XPS Ship Integration | 91 | 58 | 20 | 1k+ | | | Text Domain Mismatch |
| #9765 | XServer Migrator | 35 | 39 | 53 | 10k+ | | | Interpolated SQL is not prepared |
| #9766 | TypeSquare Webfonts for エックスサーバー | 35 | 183 | 98 | 100k+ | | | Missing Arg Domain |
| #9767 | XT Event Widget for Social Events | 35 | 3 | 55 | 800 | | | Non-prefixed global variable |
| #9768 | XT Visitor Counter | 37 | 177 | 52 | 7k+ | | | Output is not escaped |
| #9769 | XT Ajax Add To Cart for WooCommerce | 23 | 1,003 | 1,690 | 1k+ | | | Non-prefixed global variable |
| #9770 | XT Quick View for WooCommerce | 23 | 1,079 | 1,829 | 400 | | | Non-prefixed global variable |
| #9771 | XT Variation Swatches for WooCommerce | 23 | 1,051 | 1,834 | 500 | | | Non-prefixed global variable |
| #9772 | Yaad Sarig Payment Gateway For WC | 30 | 158 | 271 | 2k+ | | | Nonce verification recommended |
| #9773 | Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts | 35 | 48 | 114 | 5k+ | | | Non-prefixed hook name |
| #9774 | Yada Wiki | 37 | 207 | 45 | 2k+ | | | Text Domain Mismatch |
| #9775 | YAHMAN Add-ons | 31 | 468 | 141 | 1k+ | | | Output is not escaped |
| #9776 | YaMaps for WordPress Plugin | 64 | 21 | 30 | 10k+ | | | Non-prefixed global variable |
| #9777 | Yampi Checkout | 70 | 6 | 10 | 900 | | | Nonce verification recommended |
| #9778 | Yandex Mail | 79 | 16 | 4 | 400 | | | Non Singular String Literal Domain |
| #9779 | Yandex Metrica | 39 | 92 | 46 | 20k+ | | | Output is not escaped |
| #9780 | Яндекс Метрика | 79 | 10 | 4 | 10k+ | | | Unsafe printing function |
| #9781 | Yandex Pay and Split | 97 | 2 | 16 | 400 | | | Non-prefixed global variable |
| #9782 | Яндекс.ПДС Пингер / Yandex Site search pinger | 64 | 21 | 5 | 800 | | | Output is not escaped |
| #9783 | Яндекс Поделиться | 86 | 9 | 4 | 900 | | | Unsafe printing function |
| #9784 | Yandex.Metrika | 42 | 15 | 20 | 900 | | | Unsafe printing function |
| #9785 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,226 | 3,997 | 600 | | | Non-prefixed global variable |
| #9786 | YayCurrency – WooCommerce Multi-Currency Switcher | 24 | 373 | 623 | 8k+ | | | Text Domain Mismatch |
| #9787 | YayExtra – WooCommerce Extra Product Options | 36 | 11 | 472 | 1k+ | | | Non-prefixed global variable |
| #9788 | YayMail – WooCommerce Email Customizer | 51 | 163 | 788 | 50k+ | | | Non-prefixed global variable |
| #9789 | YayPricing – WooCommerce Dynamic Pricing & Discounts | 30 | 174 | 186 | 3k+ | | | Non-prefixed global variable |
| #9790 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #9791 | YaySwatches – Variation Swatches for WooCommerce | 68 | 281 | 14 | 1k+ | | | Text Domain Mismatch |
| #9792 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #9793 | Yektanet Ecommerce | 40 | 45 | 103 | 1k+ | | | Request data is not unslashed |
| #9794 | Visual CSS Style Editor | 36 | 283 | 233 | 40k+ | | | Output is not escaped |
| #9795 | Yeloni Exit Popup | (Free) GDPR Compliance | 54 | 41 | 12 | 700 | | | Output is not escaped |
| #9796 | Yes/No Chart | 35 | 136 | 139 | 2k+ | | | Unsafe printing function |
| #9797 | YARPP – Yet Another Related Posts Plugin | 27 | 191 | 331 | 100k+ | | | Non-prefixed global variable |
| #9798 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #9799 | Yext Plugin | 55 | 16 | 23 | 700 | | | Non-prefixed function |
| #9800 | Custom Product Tabs for WooCommerce | 36 | 87 | 81 | 80k+ | | | Output is not escaped |