| #4201 | Image Slider | 35 | 192 | 95 | 4k+ | | | Output is not escaped |
| #4202 | Image Source Control Lite – Show Image Credits and Captions | 33 | 140 | 221 | 3k+ | | | Non-prefixed hook name |
| #4203 | Image & Text Widget | 89 | 4 | 4 | 900 | | | Missing Version |
| #4204 | Image Ticker Carousel | by Creavi | 87 | 2 | 17 | 400 | | | Nonce verification recommended |
| #4205 | Image Title Remove | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #4206 | Inline Image Upload for BBPress | 98 | 3 | 1 | 3k+ | | | Missing direct file access protection |
| #4207 | Image Uploader for Welcart | 42 | 27 | 24 | 3k+ | | | Output is not escaped |
| #4208 | Image Watermark WP | 39 | 88 | 82 | 600 | | | Output is not escaped |
| #4209 | Image Widget | 35 | 165 | 31 | 100k+ | | | Output is not escaped |
| #4210 | Image Widget Deluxe | 37 | 190 | 1 | 1k+ | | | Output is not escaped |
| #4211 | Image Widget | 44 | 48 | 5 | 3k+ | | | Output is not escaped |
| #4212 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | | | Non-prefixed global variable |
| #4213 | ImageLinks – Interactive Image Builder with Hotspots | 33 | 517 | 90 | 1k+ | | | Text Domain Mismatch |
| #4214 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | | Unsafe printing function |
| #4215 | ImageMagick Sharpen Resized Images | 54 | 22 | 6 | 1k+ | | | Output is not escaped |
| #4216 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #4217 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #4218 | Images to WebP | 37 | 39 | 50 | 9k+ | | | curl curl setopt |
| #4219 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 21 | 426 | 862 | 1m+ | | | Non-prefixed global variable |
| #4220 | Img Title Removal | 97 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #4221 | ImgSEO – AI Image Alt Text Generator & Image SEO Tools | 31 | 1 | 677 | 400 | | | Direct Query |
| #4222 | IMGspider – 图片采集抓取插件 | 50 | 12 | 49 | 2k+ | | | Missing nonce verification |
| #4223 | imoje | 38 | 62 | 160 | 2k+ | | | Nonce verification recommended |
| #4224 | Import entries for Gravity Forms | 62 | 6 | 26 | 500 | | | Input is not validated |
| #4225 | Import Eventbrite Events | 27 | 156 | 575 | 3k+ | | | Non-prefixed global variable |
| #4226 | Import Export Menu | 92 | | 7 | 2k+ | | | Input is not sanitized |
| #4227 | Import external attachments | 41 | 18 | 26 | 2k+ | | | Output is not escaped |
| #4228 | Import Social Events | 46 | 26 | 355 | 3k+ | | | Non-prefixed global variable |
| #4229 | HTML Import 2 | 34 | 273 | 26 | 5k+ | | | Unsafe printing function |
| #4230 | Import Markdown – Versatile Markdown Importer | 88 | 25 | 9 | 2k+ | | | Missing Arg Domain |
| #4231 | S2W – Import Shopify to WooCommerce | 39 | 8 | 132 | 3k+ | | | Request data is not unslashed |
| #4232 | Import Shopify To WP | 93 | 7 | 5 | 1k+ | | | Missing Translators Comment |
| #4233 | SpreadsheetConverter Calculator | 99 | 24 | 1 | 600 | | | Text Domain Mismatch |
| #4234 | Import to Photo Gallery from NextGen gallery | 38 | 80 | 83 | 400 | | | Direct Query |
| #4235 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #4236 | Import Users from CSV | 47 | 33 | 12 | 10k+ | | | Unsafe printing function |
| #4237 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | | | Unsafe printing function |
| #4238 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #4239 | WP All Import – Import SEO Settings for All In One SEO | 65 | 19 | 11 | 900 | | | Output is not escaped |
| #4240 | Import XML and RSS Feeds | 34 | 260 | 85 | 2k+ | | | Unsafe printing function |
| #4241 | Coding Chicken – JetEngine Importer | 38 | 55 | 29 | 400 | | | Missing direct file access protection |
| #4242 | Impressum | 89 | 50 | 12 | 4k+ | | | Short PHP open tag found |
| #4243 | Improved Save Button | 39 | 44 | 52 | 4k+ | | | Missing Translators Comment |
| #4244 | Improving Search Form Accessibility | 99 | 1 | 0 | 700 | | | outdated tested upto header |
| #4245 | Imsanity | 35 | 32 | 29 | 200k+ | | | Direct Query |
| #4246 | Inactive Logout | 64 | 30 | 71 | 10k+ | | | Non-prefixed global variable |
| #4247 | Inactive User Deleter | 33 | 453 | 170 | 800 | | | Output is not escaped |
| #4248 | Inavii Social Feed – Live Social Proof Gallery | 34 | 532 | 180 | 9k+ | | | Text Domain Mismatch |
| #4249 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |
| #4250 | Include Klaviyo for Elementor pro | 63 | 60 | 10 | 2k+ | | | Missing Arg Domain |