| #9801 | YITH Request a Quote for WooCommerce | 31 | 408 | 1,481 | 10k+ | | | Non-prefixed global variable |
| #9802 | YITH WooCommerce Subscription | 24 | 439 | 1,538 | 7k+ | | | Non-prefixed global variable |
| #9803 | YITH WooCommerce Tab Manager | 31 | 395 | 1,429 | 4k+ | | | Non-prefixed global variable |
| #9804 | YITH WooCommerce Waitlist | 24 | 420 | 1,500 | 3k+ | | | Non-prefixed global variable |
| #9805 | YITH WooCommerce Wishlist | 24 | 448 | 1,486 | 400k+ | | | Non-prefixed global variable |
| #9806 | YITH WooCommerce Product Gallery & Image Zoom | 24 | 418 | 1,490 | 20k+ | | | Non-prefixed global variable |
| #9807 | Yivic Easy Live Chat | 91 | 22 | 8 | 1k+ | | | Non Singular String Literal Domain |
| #9808 | YLabs Connector for WPWriter | 94 | 5 | 8 | 800 | | | Forbidden PHP function found |
| #9809 | YMC Filter | 24 | 12 | 1,729 | 4k+ | | | Non-prefixed global variable |
| #9810 | YML for Yandex Market | 31 | 37 | 293 | 10k+ | | | Non-prefixed global variable |
| #9811 | Year Make Model Search for WooCommerce | 35 | 188 | 162 | 1k+ | | | Output is not escaped |
| #9812 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | | | Text Domain Mismatch |
| #9813 | WP All Import – Import SEO Settings for Yoast SEO | 46 | 19 | 26 | 20k+ | | | Nonce verification recommended |
| #9814 | Yoast Test Helper | 95 | 2 | 43 | 60k+ | | | Direct Query |
| #9815 | Yoco Payments | 35 | 2 | 32 | 10k+ | | | Nonce verification recommended |
| #9816 | Yoo Slider – Image Slider & Video Slider | 32 | 744 | 209 | 600 | | | Output is not escaped |
| #9817 | ЮKassa для WooCommerce | 22 | 590 | 168 | 9k+ | | | Short PHP open tag found |
| #9818 | YOP Poll | 100 | | 0 | 10k+ | | | No open findings |
| #9819 | Yotpo: Product & Photo Reviews for WooCommerce | 35 | 24 | 189 | 2k+ | | | Non-prefixed function |
| #9820 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #9821 | You can quote me on that | 39 | 57 | 37 | 500 | | | Output is not escaped |
| #9822 | YourChannel: Everything you want in a YouTube plugin. | 34 | 262 | 115 | 10k+ | | | Text Domain Mismatch |
| #9823 | YOURLS Link Creator | 37 | 196 | 39 | 500 | | | Text Domain Mismatch |
| #9824 | My YouTube Channel | 40 | 54 | 38 | 5k+ | | | Output is not escaped |
| #9825 | Embeds for YouTube | 35 | 255 | 307 | 10k+ | | | Non-prefixed global variable |
| #9826 | Embed Plus for YouTube Gallery, Livestream and Lazy Loading with Facades | 34 | 571 | 195 | 100k+ | | | Output is not escaped |
| #9827 | Playlist Player for YouTube | 99 | 3 | 1 | 2k+ | | | Missing direct file access protection |
| #9828 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,066 | 2k+ | | | Non-prefixed hook name |
| #9829 | YouTube widget | 38 | 39 | 25 | 400 | | | Output is not escaped |
| #9830 | Widget Responsive for Youtube | 37 | 240 | 7 | 7k+ | | | Output is not escaped |
| #9831 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | | | Output is not escaped |
| #9832 | Yoycol Integration for WooCommerce | 97 | 4 | 4 | 400 | | | Missing Version |
| #9833 | YT Player – Embed and Customize Video Players | 25 | 3,163 | 261 | 1k+ | | | Output is not escaped |
| #9834 | Yuma Companion | 85 | 10 | 7 | 400 | | | Missing direct file access protection |
| #9835 | Yumpu E-Paper publishing | 98 | 2 | 2 | 1k+ | | | Missing direct file access protection |
| #9836 | Simple Accessibility Button | 41 | 33 | 171 | 900 | | | Non-prefixed global variable |
| #9837 | Z-Credit Checkout – WooCommerce Payment Gateway | 41 | 151 | 22 | 1k+ | | | Text Domain Mismatch |
| #9838 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | | Non-prefixed global variable |
| #9839 | Zakeke Interactive Product Designer for WooCommerce | 37 | 186 | 178 | 2k+ | | | Nonce verification recommended |
| #9840 | Zalomení | 99 | 1 | 2 | 7k+ | | | Non-prefixed hook name |
| #9841 | Zalomení řádků v češtině a slovenčine | 97 | 3 | 0 | 600 | | | outdated tested upto header |
| #9842 | Zapier for WordPress | 71 | 11 | 21 | 50k+ | | | Input is not sanitized |
| #9843 | Zapper Payments | 69 | 11 | 11 | 600 | | | Output is not escaped |
| #9844 | Zarinpal Gateway | 36 | 151 | 55 | 50k+ | | | Non Singular String Literal Domain |
| #9845 | Zeffy Donate Button | 90 | 3 | 0 | 900 | | | Output is not escaped |
| #9846 | Zen Addons for SiteOrigin Page Builder | 90 | 1,452 | 129 | 1k+ | | | Text Domain Mismatch |
| #9847 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | | Output is not escaped |
| #9848 | Zenchef widget integration | 98 | 18 | 0 | 1k+ | | | Missing direct file access protection |
| #9849 | Zendesk Support for WordPress | 31 | 195 | 88 | 2k+ | | | Output is not escaped |
| #9850 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 500 | | | Text Domain Mismatch |