| #4251 | Inactive User Deleter | 33 | 453 | 170 | 800 | | | Output is not escaped |
| #4252 | Inavii Social Feed – Live Social Proof Gallery | 34 | 532 | 180 | 9k+ | | | Text Domain Mismatch |
| #4253 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |
| #4254 | Include Klaviyo for Elementor pro | 63 | 60 | 10 | 2k+ | | | Missing Arg Domain |
| #4255 | LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor | 81 | 162 | 9 | 3k+ | | | Text Domain Mismatch |
| #4256 | Include Mastodon Feed | 90 | 11 | 3 | 800 | | | Non-prefixed global variable |
| #4257 | Include Matomo Tracking, by Jonas Hellmann | 62 | 14 | 4 | 500 | | | Setting is missing a sanitization callback |
| #4258 | Include Me | 88 | 7 | 7 | 4k+ | | | Short PHP open tag found |
| #4259 | Increase Maximum Upload File Size | 95 | 6 | 3 | 500 | | | Missing direct file access protection |
| #4260 | Indent Lists Button | 82 | 10 | 3 | 700 | | | Output is not escaped |
| #4261 | Independent Analytics – WordPress Analytics Plugin | 25 | 1,148 | 2,293 | 100k+ | | | Non-prefixed global variable |
| #4262 | Independent Analytics for MainWP | 82 | 7 | 13 | 700 | | | Nonce verification recommended |
| #4263 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #4264 | Index WP Users For Speed | 77 | 10 | 35 | 1k+ | | | Non-prefixed global variable |
| #4265 | IndexMeNow | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #4266 | Indicate External Links | 97 | 3 | 0 | 700 | | | license mismatch |
| #4267 | IndieAuth | 92 | 31 | 27 | 400 | | | Missing direct file access protection |
| #4268 | IndieWeb | 35 | 5 | 9 | 600 | | | Non-prefixed hook name |
| #4269 | iNext Woo Pincode Checker | 40 | 36 | 82 | 700 | | | Missing nonce verification |
| #4270 | Infinite Ajax Scrolling Lite For Woocommerce | 41 | 33 | 28 | 500 | | | Output is not escaped |
| #4271 | Infinite Notification – Sales Notification Plugin | 73 | 13 | 5 | 500 | | | Setting is missing a sanitization callback |
| #4272 | Infinity TNC Divi Modules | 98 | 2 | 5 | 900 | | | Non-prefixed global variable |
| #4273 | Correios Automático – Rastreio, Frete, Etiqueta, Declaração e Devolução | 40 | 32 | 56 | 4k+ | | | Non-prefixed global variable |
| #4274 | Infobox | 82 | 15 | 12 | 1k+ | | | file system operations mkdir |
| #4275 | AI Infographic Maker | 19 | 1,517 | 599 | 600 | | | Output is not escaped |
| #4276 | Keap Official Opt-in Forms | 24 | 829 | 1,046 | 1k+ | | | Non-prefixed global variable |
| #4277 | Inline Spoilers | 99 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #4278 | InPost PL | 35 | 2 | 938 | 10k+ | | | Non-prefixed global variable |
| #4279 | InPost Gallery | 33 | 105 | 245 | 700 | | | Non-prefixed global variable |
| #4280 | Inpost Paczkomaty | 41 | 35 | 68 | 8k+ | | | Text Domain Mismatch |
| #4281 | Input Masks for Contact Form 7 | 76 | 143 | 12 | 800 | | | wp function not compatible with requires wp |
| #4282 | Input Masks for Elementor Forms | 95 | 84 | 5 | 600 | | | wp function not compatible with requires wp |
| #4283 | Insert Amz Images | 39 | 79 | 44 | 1k+ | | | Output is not escaped |
| #4284 | Insert Blocks Before or After Posts Content | 43 | 42 | 15 | 1k+ | | | Output is not escaped |
| #4285 | Insert Giphy Block | 98 | 3 | 1 | 700 | | | Missing direct file access protection |
| #4286 | Insert Headers and Footers Code – HT Script | 36 | 391 | 34 | 7k+ | | | Text Domain Mismatch |
| #4287 | Insert Html Snippet | 39 | 159 | 205 | 20k+ | | | Output is not escaped |
| #4288 | Insert JavaScript and CSS | 41 | 64 | 19 | 400 | | | Text Domain Mismatch |
| #4289 | Insert or Embed Articulate Content into WordPress | 22 | 659 | 1,437 | 2k+ | | | Non-prefixed global variable |
| #4290 | Insert Pages | 55 | 52 | 30 | 40k+ | | | Output is not escaped |
| #4291 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #4292 | Insert PHP Code Snippet | 38 | 164 | 227 | 90k+ | | | Output is not escaped |
| #4293 | Insert Special Characters | 99 | 3 | 0 | 3k+ | | | Missing direct file access protection |
| #4294 | Inspectlet – AI-Powered Session Replay, Heatmaps & Analytics | 83 | 13 | 2 | 700 | | | Text Domain Mismatch |
| #4295 | Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor | 35 | 6 | 200 | 10k+ | | | Non-prefixed global variable |
| #4296 | RealHomes Memberships | 23 | 516 | 264 | 1k+ | | | Non Singular String Literal Domain |
| #4297 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | | | Text Domain Mismatch |
| #4298 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | 25 | 449 | 1,300 | 1m+ | | | Interpolated SQL is not prepared |
| #4299 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #4300 | WPZOOM Social Feed Widget & Block | 33 | 310 | 278 | 60k+ | | | Unsafe printing function |