| #4401 | Jellyfish Counter Widget | 41 | 174 | 5 | 1k+ | | | Output is not escaped |
| #4402 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #4403 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 80k+ | | | Text Domain Mismatch |
| #4404 | JetGridBuilder — Grid Builder for Elementor and Gutenberg | 39 | 414 | 40 | 4k+ | | | Text Domain Mismatch |
| #4405 | JetHost Total Care – Security & Enhancements | 45 | 10 | 85 | 800 | | | Direct Query |
| #4406 | Jetpack – WP Security, Backup, Speed, & Growth | 22 | 2,975 | 1,348 | 3m+ | | | Text Domain Mismatch |
| #4407 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #4408 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |
| #4409 | Jetpack Lite | 91 | 3 | 7 | 600 | | | Non-prefixed function |
| #4410 | Module Control for Jetpack | 88 | 11 | 15 | 1k+ | | | Non-prefixed global variable |
| #4411 | Jetpack Protect | 30 | 657 | 217 | 100k+ | | | Text Domain Mismatch |
| #4412 | Jetpack Search | 45 | 925 | 426 | 5k+ | | | Text Domain Mismatch |
| #4413 | Sharing buttons shortcode for Jetpack | 98 | 3 | 2 | 800 | | | Missing direct file access protection |
| #4414 | Jetpack Social | 48 | 829 | 254 | 30k+ | | | Text Domain Mismatch |
| #4415 | JetSticky For Elementor | 59 | 13 | 38 | 30k+ | | | Nonce verification recommended |
| #4416 | JetWidgets For Elementor | 55 | 99 | 279 | 10k+ | | | Non-prefixed global variable |
| #4417 | JetWidgets for Elementor and WooCommerce | 33 | 187 | 146 | 7k+ | | | Text Domain Mismatch |
| #4418 | Maintenance Redirect | 38 | 244 | 132 | 10k+ | | | Missing Arg Domain |
| #4419 | Jim Soft Swiss QR Invoice | 22 | 263 | 392 | 400 | | | Non-prefixed global variable |
| #4420 | JivoChat Live Chat – WP live chat plugin for WordPress | 81 | 27 | 13 | 20k+ | | | wp function not compatible with requires wp |
| #4421 | JJ NextGen JQuery Carousel | 39 | 122 | 9 | 400 | | | Output is not escaped |
| #4422 | JJ NextGen JQuery Slider | 39 | 221 | 7 | 800 | | | Output is not escaped |
| #4423 | Job Manager & Career – Manage job board listings, and recruitments | 37 | 112 | 205 | 2k+ | | | Missing nonce verification |
| #4424 | Jobber | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #4425 | JobBoardWP – Job Board Listings and Submissions | 94 | 12 | 44 | 1k+ | | | slow db query meta query |
| #4426 | JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin | 25 | 1,541 | 1,578 | 1k+ | | | Non-prefixed global variable |
| #4427 | Joli FAQ SEO – WordPress FAQ Plugin | 23 | 1,083 | 1,526 | 700 | | | Non-prefixed global variable |
| #4428 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | | | Non-prefixed global variable |
| #4429 | Multiple Themes | 41 | 112 | 41 | 10k+ | | | Output is not escaped |
| #4430 | JoomSport – for Sports: Team & League, Football, Hockey & more | 25 | 523 | 1,747 | 1k+ | | | Direct Query |
| #4431 | Feedback Button – Jotform | 97 | 25 | 10 | 600 | | | Missing Arg Domain |
| #4432 | Arvow AI SEO Writer | 95 | 1 | 6 | 1k+ | | | Non-prefixed global variable |
| #4433 | JS Archive List | 34 | 99 | 31 | 3k+ | | | Output is not escaped |
| #4434 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | | | Non Singular String Literal Domain |
| #4435 | jQuery Image Lazy Load WP | 95 | 7 | 4 | 800 | | | Not Allowed |
| #4436 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | | | Output is not escaped |
| #4437 | jQuery Lightbox For Native Galleries | 73 | 26 | 7 | 4k+ | | | Text Domain Mismatch |
| #4438 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | | | Output is not escaped |
| #4439 | jQuery Masonry Image Gallery | 72 | 17 | 6 | 1k+ | | | Unsafe printing function |
| #4440 | jQuery Pin It Button for Images | 38 | 129 | 36 | 10k+ | | | Output is not escaped |
| #4441 | jQuery Smooth Scroll | 99 | 1 | 0 | 10k+ | | | outdated tested upto header |
| #4442 | jQuery UI Widgets | 43 | 131 | 5 | 1k+ | | | Unsafe printing function |
| #4443 | jQuery Updater | 97 | 8 | 4 | 20k+ | | | library core files |
| #4444 | jQuery Vertical Scroller | 41 | 110 | 4 | 400 | | | Output is not escaped |
| #4445 | WPBakery Visual Composer & qTranslate-X | 98 | 2 | 3 | 7k+ | | | trademarked term |
| #4446 | JS Help Desk – AI-Powered Support & Ticketing System | 37 | 17 | 406 | 7k+ | | | Missing nonce verification |
| #4447 | JSM Force HTTP to HTTPS / SSL – No Setup, Fast and Reliable | 83 | | 11 | 7k+ | | | Request data is not unslashed |
| #4448 | JSM Show Order Metadata for WooCommerce HPOS | 40 | 17 | 64 | 700 | | | Nonce verification recommended |
| #4449 | JSM Show Post Metadata | 40 | 15 | 66 | 10k+ | | | Nonce verification recommended |
| #4450 | JSM Show Term Metadata | 40 | 14 | 64 | 900 | | | Nonce verification recommended |