| #4551 | Layouts for Elementor | 78 | | 27 | 1k+ | | | Non-prefixed global variable |
| #4552 | Layouts for WPBakery | 78 | | 28 | 3k+ | | | Non-prefixed global variable |
| #4553 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #4554 | Lazy Social Comments | 42 | 73 | 10 | 1k+ | | | Unsafe printing function |
| #4555 | Lazy Load | 98 | 4 | 0 | 10k+ | | | Missing direct file access protection |
| #4556 | Lazy Load Elementor Background Images | 91 | 5 | 6 | 1k+ | | | Non-prefixed function |
| #4557 | Lazy Load Control For Elementor – Remove the Lazy Load attribute from specific images in Elementor | 98 | 1 | 2 | 3k+ | | | mismatched plugin name |
| #4558 | Lazy Load for Comments | 99 | | 6 | 2k+ | | | Non-prefixed constant |
| #4559 | Lazy Load for Videos | 82 | 6 | 37 | 9k+ | | | Non-prefixed constant |
| #4560 | Lazy Load Optimizer | 41 | 63 | 26 | 3k+ | | | Unsafe printing function |
| #4561 | Lazy Load XT | 41 | 87 | 7 | 600 | | | Non Singular String Literal Domain |
| #4562 | Lazy Loader | 59 | 6 | 24 | 9k+ | | | Nonce verification recommended |
| #4563 | lazysizes | 86 | 12 | 3 | 600 | | | wp function not compatible with requires wp |
| #4564 | Active Directory Integration / LDAP Integration | 100 | | 2 | 4k+ | | | Non-prefixed constant |
| #4565 | Lead Call Buttons | 35 | 113 | 81 | 5k+ | | | Output is not escaped |
| #4566 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #4567 | Lead Generation Form | 35 | 21 | 63 | 600 | | | Non-prefixed global variable |
| #4568 | LeadBack – Callback, Chatbot and Live Chat Widgets for WordPress sites | 66 | 17 | 5 | 600 | | | Unsafe printing function |
| #4569 | LeadBooster Chatbot by Pipedrive | 52 | 38 | 6 | 2k+ | | | Output is not escaped |
| #4570 | LeadConnector | 100 | | 0 | 20k+ | | | No open findings |
| #4571 | HubSpot All-In-One Marketing – Forms, Popups, Live Chat | 98 | 2 | 4 | 200k+ | | | trademarked term |
| #4572 | Leadinfo | 80 | 11 | 8 | 7k+ | | | Missing direct file access protection |
| #4573 | leadlovers for Elementor | 95 | 34 | 5 | 2k+ | | | Text Domain Mismatch |
| #4574 | Leadpages | 66 | 6 | 62 | 10k+ | | | Direct Query |
| #4575 | LeadSnap | 42 | 14 | 84 | 1k+ | | | Input is not validated |
| #4576 | Leadster | 67 | 6 | 10 | 4k+ | | | Non-prefixed function |
| #4577 | Leaflet Map | 39 | 59 | 32 | 30k+ | | | Output is not escaped |
| #4578 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 10k+ | | | Output is not escaped |
| #4579 | League Table – WordPress Table Plugin | 93 | 10 | 9 | 1k+ | | | Missing direct file access protection |
| #4580 | Leaky Paywall | 20 | 320 | 782 | 700 | | | Nonce verification recommended |
| #4581 | Topic Progression Using Storyline/Captivate for LearnDash | 35 | 382 | 25 | 400 | | | Text Domain Mismatch |
| #4582 | Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | 23 | 190 | 2,122 | 5k+ | | | Non-prefixed global variable |
| #4583 | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 22 | 2,369 | 3,349 | 70k+ | | | Non-prefixed global variable |
| #4584 | LearnPress – bbPress Integration | 53 | 19 | 14 | 2k+ | | | Output is not escaped |
| #4585 | LearnPress – BuddyPress Integration | 44 | 27 | 25 | 1k+ | | | Output is not escaped |
| #4586 | LearnPress – Course Review | 37 | 67 | 43 | 20k+ | | | Output is not escaped |
| #4587 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | | | Output is not escaped |
| #4588 | LearnPress – Prerequisites Courses | 84 | 8 | 14 | 6k+ | | | Non-prefixed constant |
| #4589 | LearnPress – Course Wishlist | 56 | 35 | 22 | 20k+ | | | Output is not escaped |
| #4590 | Leartes TRY Exchange Rates | 36 | 250 | 27 | 500 | | | Text Domain Mismatch |
| #4591 | Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator | 47 | 44 | 83 | 10k+ | | | Missing direct file access protection |
| #4592 | Legal Text Connector of the IT-Recht Kanzlei | 36 | 45 | 46 | 10k+ | | | Exception output is not escaped |
| #4593 | LegalBlink for Aruba | 91 | 33 | 29 | 8k+ | | | Missing direct file access protection |
| #4594 | Cron Jobs | 62 | 21 | 33 | 2k+ | | | Nonce verification recommended |
| #4595 | Leira Letter Avatar | 93 | 3 | 8 | 6k+ | | | Non-prefixed hook name |
| #4596 | Roles & Capabilities | 44 | 24 | 79 | 1k+ | | | Nonce verification recommended |
| #4597 | Lemmony Companion | 95 | 13 | 5 | 2k+ | | | block api version too low |
| #4598 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | | | Non-prefixed constant |
| #4599 | Lenix Leads Collector | 34 | 414 | 242 | 10k+ | | | Text Domain Mismatch |
| #4600 | Lenix scss compiler | 35 | 133 | 34 | 800 | | | Exception output is not escaped |