| #4451 | JSON API Auth | 79 | 5 | 11 | 700 | | | Non-prefixed function |
| #4452 | JSON API User | 57 | 17 | 34 | 1k+ | | | Non-prefixed hook name |
| #4453 | JSON-LD Breadcrumbs | 98 | 3 | 1 | 1k+ | | | application detected |
| #4454 | JSON Feed (jsonfeed.org) | 35 | 9 | 29 | 1k+ | | | Non-prefixed global variable |
| #4455 | Juicer.io: Effortlessly embed, curate, and aggregate social media feeds into your website | 51 | 44 | 34 | 9k+ | | | Output is not escaped |
| #4456 | Juiz Lang Attribute | 54 | 26 | 27 | 2k+ | | | Text Domain Mismatch |
| #4457 | Juiz Last Tweet Widget | 32 | 136 | 53 | 500 | | | Output is not escaped |
| #4458 | Nobs • Share Buttons | 35 | 314 | 85 | 3k+ | | | Output is not escaped |
| #4459 | Jupiter X Core | 38 | 71 | 767 | 70k+ | | | Non-prefixed global variable |
| #4460 | Just Responsive Images | 60 | 25 | 7 | 500 | | | Missing direct file access protection |
| #4461 | JustTables – WooCommerce Product Table | 26 | 534 | 652 | 600 | | | Non-prefixed global variable |
| #4462 | Just TinyMCE Custom Styles | 36 | 112 | 28 | 1k+ | | | Missing Arg Domain |
| #4463 | Justified Gallery | 23 | 589 | 1,417 | 8k+ | | | Non-prefixed global variable |
| #4464 | Justify for Paragraph Block | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #4465 | JVM Rich Text Icons | 37 | 87 | 34 | 3k+ | | | Output is not escaped |
| #4466 | Wishlist for WooCommerce | 29 | 610 | 296 | 600 | | | Output is not escaped |
| #4467 | JW Player for WordPress | 48 | 288 | 78 | 1k+ | | | Text Domain Mismatch |
| #4468 | JWT Auth – WordPress JSON Web Token Authentication | 35 | 14 | 18 | 6k+ | | | Output is not escaped |
| #4469 | JWT Authentication for WP REST API | 84 | 27 | 41 | 60k+ | | | wp function not compatible with requires wp |
| #4470 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | | | Non-prefixed global variable |
| #4471 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 200k+ | | | Missing Arg Domain |
| #4472 | Kadence for WooCommerce and Elementor | 35 | 39 | 21 | 3k+ | | | Output is not escaped |
| #4473 | Kadence WooCommerce Email Designer | 34 | 119 | 230 | 100k+ | | | Non-prefixed global variable |
| #4474 | Calendar.online / Kalender.digital – Plugin | 72 | 33 | 7 | 2k+ | | | Output is not escaped |
| #4475 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 4 | 252 | 10k+ | | | Dynamic hook name |
| #4476 | Kama SpamBlock | 64 | 29 | 7 | 5k+ | | | Short PHP open tag found |
| #4477 | Kama Thumbnail | 28 | 80 | 47 | 9k+ | | | Output is not escaped |
| #4478 | Kargo Takip | 35 | 84 | 142 | 3k+ | | | Missing nonce verification |
| #4479 | Karma Music Player by Kadar | 56 | 47 | 9 | 700 | | | Output is not escaped |
| #4480 | KaTeX | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #4481 | Kattene | 95 | 7 | 3 | 1k+ | | | date date |
| #4482 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | | | Non Singular String Literal Domain |
| #4483 | KBoard 위젯 – 워드프레스 게시판 | 35 | 53 | 32 | 3k+ | | | Output is not escaped |
| #4484 | KCSG Kartra Pages | 47 | 30 | 16 | 500 | | | Heredoc Output Not Escaped |
| #4485 | Keep Emoticons as Text | 98 | 3 | 1 | 700 | | | Missing direct file access protection |
| #4486 | Kenta Blocks – Responsive Blocks and block templates library | 24 | 564 | 1,405 | 2k+ | | | Non-prefixed global variable |
| #4487 | Kenta Companion | 23 | 657 | 1,419 | 2k+ | | | Non-prefixed global variable |
| #4488 | Keon Toolset | 74 | 4 | 28 | 30k+ | | | Non-prefixed function |
| #4489 | Ketchup Shortcodes | 96 | 9 | 1 | 400 | | | wp function not compatible with requires wp |
| #4490 | Keyring | 35 | 233 | 203 | 1k+ | | | Output is not escaped |
| #4491 | Keyword Research Tool | 72 | 9 | 11 | 700 | | | Input is not validated |
| #4492 | Khattat – Arabic Fonts | 100 | | 2 | 500 | | | Discouraged text-domain loading |
| #4493 | KIA Subtitle | 51 | 21 | 19 | 7k+ | | | Non-prefixed global variable |
| #4494 | Kindeditor For WordPress | 31 | 63 | 130 | 500 | | | Non-prefixed global variable |
| #4495 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,832 | 3,877 | 10k+ | | | Non-prefixed global variable |
| #4496 | Form data to kintone | 56 | 25 | 22 | 1k+ | | | Output is not escaped |
| #4497 | Kirki – Freeform Page Builder, Website Builder & Customizer | 26 | 191 | 803 | 500k+ | | | Nonce verification recommended |
| #4498 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
| #4499 | Kitgenix CAPTCHA for Cloudflare Turnstile | 100 | | 0 | 600 | | | No open findings |
| #4500 | Kits, Templates and Patterns | 29 | 380 | 91 | 5k+ | | | Text Domain Mismatch |