| #4501 | Kiyoh customer review | 35 | 173 | 68 | 500 | | | Output is not escaped |
| #4502 | kk Star Ratings – Rate Post & Collect User Feedbacks | 25 | 772 | 1,388 | 70k+ | | | Non-prefixed global variable |
| #4503 | KKiapay WooCommerce Plugin | 44 | 20 | 25 | 400 | | | Output is not escaped |
| #4504 | Kustom Checkout for WooCommerce | 35 | 101 | 505 | 10k+ | | | Dynamic hook name |
| #4505 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | | | Non-prefixed hook name |
| #4506 | Klarna for WooCommerce | 26 | 284 | 507 | 30k+ | | | Dynamic hook name |
| #4507 | Klaviyo | 79 | 26 | 86 | 100k+ | | | Non-prefixed function |
| #4508 | Kliken: Ads + Pixel for Meta | 100 | | 2 | 30k+ | | | Discouraged text-domain loading |
| #4509 | AI Powered Marketing | 89 | 8 | 8 | 50k+ | | | Offloaded Content |
| #4510 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #4511 | Ko-fi Button | 41 | 75 | 15 | 5k+ | | | Output is not escaped |
| #4512 | Koala AI | 89 | | 9 | 1k+ | | | Nonce verification recommended |
| #4513 | Koalendar – Easy Appointment Scheduling & Booking Plugin | 97 | 8 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #4514 | Koko Analytics – Privacy-Friendly WordPress Analytics | 24 | 166 | 395 | 60k+ | | | Short PHP open tag found |
| #4515 | KOMOJU Payments | 96 | | 8 | 1k+ | | | Non-prefixed class |
| #4516 | Korea SNS | 39 | 88 | 30 | 4k+ | | | Unsafe printing function |
| #4517 | Free Property Valuation (Lead Generator) / Kostenlose Immobilienbewertung | 66 | 11 | 5 | 600 | | | Unsafe printing function |
| #4518 | KP Zip Downloader | 99 | 2 | 0 | 3k+ | | | file system operations readfile |
| #4519 | Kraken.io Image Optimizer – Compress, Convert to WebP & AVIF, Resize & Bulk Optimize | 67 | 293 | 80 | 9k+ | | | Text Domain Mismatch |
| #4520 | Flexible Invoices for WooCommerce – KSeF Add-on | 35 | 39 | 15 | 600 | | | Non-prefixed global variable |
| #4521 | Central Color Palette | 41 | 73 | 33 | 10k+ | | | Output is not escaped |
| #4522 | Kubio AI Page Builder | 60 | 283 | 77 | 90k+ | | | Missing direct file access protection |
| #4523 | ZZAZZ | 98 | 8 | 2 | 500 | | | Missing direct file access protection |
| #4524 | Kwayy HTML Sitemap | 56 | 13 | 19 | 6k+ | | | Missing nonce verification |
| #4525 | La Sentinelle antispam | 40 | 88 | 46 | 3k+ | | | Output is not escaped |
| #4526 | Lana Downloads Manager | 38 | 146 | 78 | 3k+ | | | Unsafe printing function |
| #4527 | Landing Page Cat – Coming Soon & Maintenance Pages | 26 | 91 | 180 | 600 | | | Non-prefixed class |
| #4528 | Landingi Landing Pages | 55 | 18 | 23 | 2k+ | | | Input is not sanitized |
| #4529 | Language Fallback | 99 | 2 | 1 | 5k+ | | | Missing direct file access protection |
| #4530 | Flag Icons | 40 | 300 | 19 | 3k+ | | | Output is not escaped |
| #4531 | Language Switcher | 37 | 81 | 105 | 1k+ | | | Missing Translators Comment |
| #4532 | Language Switcher – Polylang for Divi | 98 | | 43 | 500 | | | Non-prefixed global variable |
| #4533 | Language Switcher for Elementor & Polylang | 100 | | 0 | 400 | | | No open findings |
| #4534 | Language Switcher for Transposh | 95 | 22 | 68 | 1k+ | | | Non-prefixed global variable |
| #4535 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #4536 | Laposta Signup Embed | 30 | 88 | 19 | 1k+ | | | Exception output is not escaped |
| #4537 | Laposta WooCommerce | 29 | 96 | 115 | 500 | | | Non-prefixed global variable |
| #4538 | Lara's Google Analytics (GA4) | 36 | 303 | 57 | 9k+ | | | Unsafe printing function |
| #4539 | Laravel DD for WordPress | 97 | 3 | 6 | 1k+ | | | Non-prefixed function |
| #4540 | ToneDen Shortcode | 98 | 3 | 0 | 2k+ | | | Missing direct file access protection |
| #4541 | Last Modified Timestamp | 87 | 9 | 3 | 7k+ | | | Output is not escaped |
| #4542 | Last Name First Name | 79 | 9 | 5 | 500 | | | Non-prefixed function |
| #4543 | Last Updated Shortcode | 97 | 3 | 4 | 800 | | | Non-prefixed global variable |
| #4544 | Last Viewed Posts by WPBeginner | 98 | 3 | 4 | 500 | | | Missing direct file access protection |
| #4545 | LA-Studio Element Kit for Elementor | 21 | 8,403 | 1,882 | 10k+ | | | Text Domain Mismatch |
| #4546 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | | | Output is not escaped |
| #4547 | Latest Post Shortcode | 98 | 5 | 6 | 4k+ | | | Non-prefixed constant |
| #4548 | Latest Posts | 63 | 27 | 1 | 5k+ | | | Output is not escaped |
| #4549 | Latest Posts Block – Dynamic Posts Grid, Posts List, Posts Tile with Stunning Layouts for WordPress Blogs & Pages | 86 | 9 | 8 | 7k+ | | | Missing Version |
| #4550 | Latin Now! | 98 | 2 | 1 | 400 | | | outdated tested upto header |