| #4351 | Payment forms, Buy now buttons, and Invoicing System | GetPaid | 23 | 389 | 1,266 | 5k+ | | | Non-prefixed global variable |
| #4352 | Quotes Addon for GetPaid | 40 | 191 | 21 | 600 | | | Text Domain Mismatch |
| #4353 | involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups | 39 | 158 | 32 | 400 | | | Text Domain Mismatch |
| #4354 | iOS images fixer | 42 | 22 | 42 | 6k+ | | | Nonce verification recommended |
| #4355 | IP Based Login | 35 | 179 | 146 | 600 | | | Output is not escaped |
| #4356 | IP Geo Block | 23 | 399 | 589 | 8k+ | | | Output is not escaped |
| #4357 | IP Location Block | 25 | 521 | 624 | 10k+ | | | Output is not escaped |
| #4358 | IP Locator | 25 | 482 | 211 | 600 | | | Text Domain Mismatch |
| #4359 | IP2Location Country Blocker | 34 | 295 | 88 | 30k+ | | | Output is not escaped |
| #4360 | IP2Location Redirection | 33 | 198 | 122 | 7k+ | | | Output is not escaped |
| #4361 | iPages – FlipBook Image & PDF Viewer | 35 | 467 | 177 | 2k+ | | | Text Domain Mismatch |
| #4362 | iPanorama 360 – Advanced Virtual Tour Builder | 87 | 726 | 34 | 5k+ | | | Text Domain Mismatch |
| #4363 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #4364 | IranDargah Payment Gateway for Woocommerce | 66 | 66 | 26 | 400 | | | Text Domain Mismatch |
| #4365 | IssueM | 33 | 56 | 173 | 600 | | | Request data is not unslashed |
| #4366 | Issuu PDF Sync | 35 | 159 | 28 | 900 | | | Text Domain Mismatch |
| #4367 | Italy Cookie Choices (for EU Cookie Law & Cookie Notice) | 36 | 115 | 77 | 10k+ | | | Unsafe printing function |
| #4368 | Item Lists for Elementor | 98 | 1 | 49 | 1k+ | | | Non-prefixed global variable |
| #4369 | GIFTiT – Free Gifts for WooCommerce | 81 | 43 | 357 | 2k+ | | | Non-prefixed global variable |
| #4370 | PBULKiT – Bulk Edit Products for WooCommerce | 100 | | 1 | 1k+ | | | Non-prefixed global variable |
| #4371 | REPORTiT – Advanced Reporting for WooCommerce | 81 | 9 | 98 | 700 | | | Non-prefixed global variable |
| #4372 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #4373 | ITRO Popup Plugin | 33 | 591 | 135 | 6k+ | | | Output is not escaped |
| #4374 | iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more | 60 | 405 | 271 | 200k+ | | | Text Domain Mismatch |
| #4375 | The Innovative Form Builder – IvyForms | 22 | 750 | 309 | 600 | | | Exception output is not escaped |
| #4376 | PWA — easy way to Progressive Web App | 54 | 15 | 44 | 2k+ | | | Dynamic hook name |
| #4377 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | | | Exception output is not escaped |
| #4378 | iyzico for WooCommerce | 42 | 34 | 54 | 10k+ | | | Unsafe printing function |
| #4379 | iZooto – Web Push Notifications | 57 | 26 | 25 | 1k+ | | | wp function not compatible with requires wp |
| #4380 | jAlbum Bridge | 99 | 1 | 6 | 500 | | | Not In Footer |
| #4381 | JAMP Notes (Just Another Memo Plugin) | 85 | 170 | 183 | 400 | | | Text Domain Mismatch |
| #4382 | Janolaw AGB Hosting | 33 | 198 | 11 | 1k+ | | | Short PHP open tag found |
| #4383 | Japanese font for WordPress(Previously: Japanese Font for TinyMCE) | 35 | 11 | 37 | 10k+ | | | Non-prefixed global variable |
| #4384 | Japanese Proofreading Preview | 82 | 11 | 5 | 400 | | | Nonce verification recommended |
| #4385 | Jarvis | 35 | 10 | 19 | 500 | | | Input is not validated |
| #4386 | Smart JavaScript Auto Loader | 44 | 83 | 2 | 400 | | | Output is not escaped |
| #4387 | Import WP – Export and Import CSV and XML files to WordPress | 22 | 580 | 330 | 4k+ | | | Exception output is not escaped |
| #4388 | JC Submenu | 38 | 279 | 32 | 4k+ | | | Output is not escaped |
| #4389 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | | | Text Domain Mismatch |
| #4390 | JCH Optimize | 22 | 1,145 | 136 | 4k+ | | | Output is not escaped |
| #4391 | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 23 | 91 | 694 | 300k+ | | | Non-prefixed namespace |
| #4392 | Static Site Exporter | 35 | 54 | 25 | 500 | | | file system operations mkdir |
| #4393 | Jellyfish Counter Widget | 41 | 174 | 5 | 1k+ | | | Output is not escaped |
| #4394 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #4395 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 80k+ | | | Text Domain Mismatch |
| #4396 | JetGridBuilder — Grid Builder for Elementor and Gutenberg | 39 | 414 | 40 | 4k+ | | | Text Domain Mismatch |
| #4397 | JetHost Total Care – Security & Enhancements | 45 | 10 | 85 | 800 | | | Direct Query |
| #4398 | Jetpack – WP Security, Backup, Speed, & Growth | 22 | 2,975 | 1,348 | 3m+ | | | Text Domain Mismatch |
| #4399 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #4400 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |