| #9901 | Zalomení | 99 | 1 | 2 | 7k+ | | | Non-prefixed hook name |
| #9902 | Zalomení řádků v češtině a slovenčine | 97 | 3 | 0 | 600 | | | outdated tested upto header |
| #9903 | Zapier for WordPress | 71 | 11 | 21 | 50k+ | | | Input is not sanitized |
| #9904 | Zapper Payments | 69 | 11 | 11 | 700 | | | Output is not escaped |
| #9905 | Zarinpal Gateway | 36 | 151 | 55 | 50k+ | | | Non Singular String Literal Domain |
| #9906 | Zeffy Donate Button | 90 | 3 | 0 | 900 | | | Output is not escaped |
| #9907 | Zen Addons for SiteOrigin Page Builder | 90 | 1,297 | 125 | 1k+ | | | Text Domain Mismatch |
| #9908 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | | Output is not escaped |
| #9909 | Zenchef widget integration | 98 | 18 | 0 | 1k+ | | | Missing direct file access protection |
| #9910 | Zendesk Support for WordPress | 31 | 195 | 88 | 2k+ | | | Output is not escaped |
| #9911 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 500 | | | Text Domain Mismatch |
| #9912 | Zeno Font Resizer | 78 | 13 | 2 | 5k+ | | | Output is not escaped |
| #9913 | Zephyr Project Manager | 23 | 667 | 2,454 | 1k+ | | | Non-prefixed global variable |
| #9914 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | | | Non-prefixed global variable |
| #9915 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #9916 | ZeroBounce Email Verification & Validation | 38 | 299 | 162 | 1k+ | | | Text Domain Mismatch |
| #9917 | PayPal Zettle POS for WooCommerce | 31 | 302 | 44 | 4k+ | | | Exception output is not escaped |
| #9918 | Zhanzhangb Indexing Submission for Baidu | 83 | 14 | 4 | 2k+ | | | Output is not escaped |
| #9919 | ZI Hide Featured Image | 35 | 8 | 3 | 700 | | | Hidden files included |
| #9920 | ZI Hide price and add to cart for WooCommerce | 87 | 15 | 7 | 1k+ | | | wp function not compatible with requires wp |
| #9921 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #9922 | Gateway zibal for Woocommerce | 44 | 70 | 24 | 6k+ | | | Text Domain Mismatch |
| #9923 | Ziina | 35 | 8 | 19 | 2k+ | | | wp redirect wp redirect |
| #9924 | Zilla Portfolio | 41 | 139 | 15 | 400 | | | Text Domain Mismatch |
| #9925 | Zion Builder – Website Builder for Speed & Creativity | 74 | 4 | 29 | 1k+ | | | Non-prefixed hook name |
| #9926 | ZIP from Media | 97 | 4 | 16 | 400 | | | Non-prefixed global variable |
| #9927 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | | Non-prefixed global variable |
| #9928 | zipMoney(Zip Co) Payments Plugin for WooCommerce | 34 | 147 | 70 | 2k+ | | | Text Domain Mismatch |
| #9929 | Zippy | 40 | 43 | 31 | 9k+ | | | Output is not escaped |
| #9930 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | | | Text Domain Mismatch |
| #9931 | Zoho Campaigns | 38 | 3 | 129 | 3k+ | | | Non-prefixed global variable |
| #9932 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #9933 | Zoho Flow – No-Code Workflow Automation | 98 | 11 | 8 | 5k+ | | | wp function not compatible with requires wp |
| #9934 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |
| #9935 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | | Request data is not unslashed |
| #9936 | Zoho Marketing Automation | 37 | 24 | 194 | 1k+ | | | Non-prefixed global variable |
| #9937 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | | Input is not validated |
| #9938 | Zoho Billing – Embed Payment Form | 57 | 22 | 10 | 500 | | | Output is not escaped |
| #9939 | ZoloBlocks – Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit | 99 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #9940 | Zone Manager (Zoninator) | 97 | 5 | 2 | 2k+ | | | Missing direct file access protection |
| #9941 | Z | 39 | 84 | 69 | 500 | | | Output is not escaped |
| #9942 | Zendesk Chat | 37 | 44 | 67 | 10k+ | | | Output is not escaped |
| #9943 | Zotabox – 20+ Promotional Sales tools to boost your subscribers and sales | 94 | 12 | 8 | 500 | | | wp function not compatible with requires wp |
| #9944 | Zotpress | 39 | 80 | 403 | 2k+ | | | Non-prefixed global variable |
| #9945 | htaccess protect | 39 | 28 | 33 | 800 | | | Input is not validated |
| #9946 | LocoAI – Auto Translate for Loco Translate | 87 | 10 | 41 | 70k+ | | | Non-prefixed global variable |
| #9947 | Cooked – Recipe Management | 32 | 462 | 275 | 3k+ | | | Output is not escaped |
| #9948 | Custom Field Template | 29 | 568 | 530 | 30k+ | | | wp function not compatible with requires wp |
| #9949 | Database Cleaner | 28 | 137 | 297 | 10k+ | | | Direct Query |
| #9950 | EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder | 23 | 356 | 1,515 | 2k+ | | | Non-prefixed global variable |