| #3451 | Floating Ads Bottom | 78 | 9 | 1 | 2k+ | | | Setting is missing a sanitization callback |
| #3452 | Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element | 43 | 66 | 109 | 800 | | | Missing direct file access protection |
| #3453 | Floating Button – Easily Create Sticky, Fixed & Floating Buttons | 84 | 6 | 184 | 4k+ | | | Non-prefixed global variable |
| #3454 | Floating Contact Button | 77 | 6 | 3 | 1k+ | | | Output is not escaped |
| #3455 | Floating Contact Button for MAX and Telegram | 100 | | 0 | 1k+ | | | No open findings |
| #3456 | Floating Chat Buttons – Click to Call or Chat, Email | 94 | 1 | 1 | 1k+ | | | Output is not escaped |
| #3457 | Floating Publish Button | 84 | 5 | 4 | 1k+ | | | Unsafe printing function |
| #3458 | Floating Side Tab | 34 | 94 | 153 | 600 | | | Non-prefixed global variable |
| #3459 | Flockler – Social Media Embeds for WordPress | 97 | 3 | 6 | 500 | | | Missing Version |
| #3460 | Flodesk for Elementor Pro | 90 | 3 | 0 | 800 | | | Exception output is not escaped |
| #3461 | Flow-Flow Social Streams | 99 | | 17 | 8k+ | | | Non-prefixed constant |
| #3462 | FlowForms – Conversational Form Builder | 75 | | 17 | 400 | | | Nonce verification recommended |
| #3463 | AI Builder | 83 | 3 | 5 | 400 | | | Output is not escaped |
| #3464 | Flowplayer Video Player | 86 | 8 | 7 | 900 | | | Output is not escaped |
| #3465 | FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | 66 | 26 | 30 | 6k+ | | | Missing direct file access protection |
| #3466 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | 42 | 111 | 17 | 20k+ | | | Exception output is not escaped |
| #3467 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 319 | 454 | 7k+ | | | Non-prefixed global variable |
| #3468 | FluentComments – Spam protection, AntiSpam, Ajax Enhanced Comments | 40 | 50 | 47 | 700 | | | Non-prefixed global variable |
| #3469 | Fluent Connect – Connect ThriveCart with your WordPress and FluentCRM | 56 | 37 | 54 | 600 | | | curl curl setopt |
| #3470 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | | | Direct Query |
| #3471 | Fluent Forms Connector for MailPoet | 98 | 28 | 7 | 1k+ | | | Text Domain Mismatch |
| #3472 | FluentPlayer – Video Player With Forms & Lead Capture | 75 | 10 | 40 | 1k+ | | | Database parameter is not escaped |
| #3473 | FluentAuth – The Ultimate Authorization & Security Plugin for WordPress | 34 | 44 | 229 | 10k+ | | | Nonce verification recommended |
| #3474 | FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider | 29 | 74 | 78 | 600k+ | | | Missing Translators Comment |
| #3475 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #3476 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | 22 | 407 | 236 | 700k+ | | | Text Domain Mismatch |
| #3477 | Fluent Forms Block | 92 | 4 | 18 | 2k+ | | | Non-prefixed global variable |
| #3478 | Fluent PDF Generator | 80 | 102 | 6 | 20k+ | | | Text Domain Mismatch |
| #3479 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #3480 | Fluid Player | 95 | 7 | 2 | 400 | | | Missing direct file access protection |
| #3481 | WP OPcache | 88 | 6 | 25 | 10k+ | | | Non-prefixed global variable |
| #3482 | Flying Analytics: Self-Host Google Analytics v4 with Speed Optimization | 35 | 17 | 13 | 4k+ | | | Missing direct file access protection |
| #3483 | Flying Fonts: Remove Google Fonts & Use System Fonts for Faster Performance | 35 | 3 | 1 | 700 | | | Hidden files included |
| #3484 | Flying Pages: Preload Pages for Faster Navigation & Improved User Experience | 47 | 21 | 21 | 20k+ | | | Missing direct file access protection |
| #3485 | Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | 40 | 23 | 44 | 30k+ | | | Missing direct file access protection |
| #3486 | FlyWP Helper – Page Cache, Page Optimization, Emails for FlyWP Server Control Panel | 40 | 20 | 81 | 4k+ | | | Non-prefixed global variable |
| #3487 | FMTC Affiliate Disclosure | 92 | 5 | 0 | 1k+ | | | Missing Arg Domain |
| #3488 | Focus Videos | 53 | 36 | 9 | 400 | | | Text Domain Mismatch |
| #3489 | Site Lockdown Security | 100 | | 2 | 400 | | | Non-prefixed class |
| #3490 | Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | 26 | 113 | 597 | 90k+ | | | Non-prefixed global variable |
| #3491 | Font Awesome | 89 | 21 | 3 | 400k+ | | | Missing direct file access protection |
| #3492 | Font Size | 66 | 17 | 1 | 600 | | | Unsafe printing function |
| #3493 | FontFlow Custom Icons for Elementor | 85 | 29 | 15 | 700 | | | Text Domain Mismatch |
| #3494 | Fonto – Custom Web Fonts Manager | 91 | | 22 | 2k+ | | | Dynamic hook name |
| #3495 | Fonts | 80 | 8 | 5 | 8k+ | | | Output is not escaped |
| #3496 | Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar | 22 | 1,321 | 1,371 | 3k+ | | | Non-prefixed global variable |
| #3497 | Lightbox & Modal Popup WordPress Plugin – FooBox | 25 | 610 | 1,365 | 100k+ | | | Non-prefixed global variable |
| #3498 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | | | Output is not escaped |
| #3499 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | | | Non-prefixed global variable |
| #3500 | Events Calendar by FooEvents | 35 | 57 | 59 | 4k+ | | | Non-prefixed global variable |