| #5001 | ThemeRuby Multi Authors – Assign Multiple Writers to Posts | 98 | 3 | 4 | 2k+ | | | wp function not compatible with requires wp |
| #5002 | Thumbnail Crop Position | 64 | 43 | 1 | 2k+ | | | Output is not escaped |
| #5003 | Tickera – Sell Tickets & Manage Events | 90 | 5 | 23 | 2k+ | | | Non-prefixed class |
| #5004 | Timeline Module for Beaver Builder | 95 | 217 | 29 | 2k+ | | | Text Domain Mismatch |
| #5005 | Timetics – Appointment Booking Calendar & Scheduling System | 99 | 2 | 3 | 2k+ | | | wp function not compatible with requires wp |
| #5006 | TinyMCE Spellcheck | 39 | 27 | 32 | 2k+ | | | Unsafe printing function |
| #5007 | Tockify Events Calendar | 35 | 35 | 12 | 2k+ | | | Output is not escaped |
| #5008 | Toggles | 98 | 3 | 0 | 2k+ | | | Missing direct file access protection |
| #5009 | Top Level Categories | 96 | 5 | 1 | 2k+ | | | Missing direct file access protection |
| #5010 | TopBar Call To Action | 85 | 40 | 5 | 2k+ | | | Text Domain Mismatch |
| #5011 | Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin | 25 | 119 | 2,704 | 2k+ | | | Non-prefixed global variable |
| #5012 | Tracking Script Manager | 37 | 82 | 57 | 2k+ | | | Non Singular String Literal Domain |
| #5013 | Trinity Audio – Text to Speech AI audio player to convert content into audio | 23 | 119 | 227 | 2k+ | | | Non-prefixed global variable |
| #5014 | Turbo Addons Elementor | 100 | | 2 | 2k+ | | | No PHP code found |
| #5015 | Ultimate Client Dash | 39 | 697 | 12 | 2k+ | | | Text Domain Mismatch |
| #5016 | Ultimate Markdown – Markdown Editor, Importer, & Exporter | 86 | 6 | 15 | 2k+ | | | Database parameter is not escaped |
| #5017 | Ultimate Post List | 35 | 186 | 84 | 2k+ | | | Missing Arg Domain |
| #5018 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | | | Non-prefixed global variable |
| #5019 | Universal Google Adsense and Ads manager | 39 | 70 | 31 | 2k+ | | | Unsafe printing function |
| #5020 | Unveil Lazy Load | 91 | 2 | 6 | 2k+ | | | error log error log |
| #5021 | Updater by BestWebSoft | 46 | 494 | 219 | 2k+ | | | Text Domain Mismatch |
| #5022 | Upload Url and Path Enabler | 83 | 10 | 1 | 2k+ | | | Missing Arg Domain |
| #5023 | URL ShortCodes | 97 | 4 | 1 | 2k+ | | | Missing direct file access protection |
| #5024 | Export Users With Meta | 70 | 13 | 13 | 2k+ | | | Direct Query |
| #5025 | User Posts Limit | 44 | 82 | 22 | 2k+ | | | Output is not escaped |
| #5026 | Userback | 47 | 13 | 20 | 2k+ | | | Output is not escaped |
| #5027 | Users Registration Date | 98 | 3 | 0 | 2k+ | | | Missing direct file access protection |
| #5028 | UsersWP – Social Login | 37 | 299 | 91 | 2k+ | | | Text Domain Mismatch |
| #5029 | Duplicate Variations for WooCommerce | 84 | 6 | 12 | 2k+ | | | Non-prefixed global variable |
| #5030 | VdoCipher: Secure Video Player and Hosting | 38 | 37 | 54 | 2k+ | | | Non-prefixed function |
| #5031 | Video Background Block – Use video as background in section. | 75 | 35 | 90 | 2k+ | | | Non-prefixed global variable |
| #5032 | Video Backgrounds for SiteOrigin Page Builder | 72 | 55 | 5 | 2k+ | | | Text Domain Mismatch |
| #5033 | Embed videos and respect privacy | 35 | 6 | 11 | 2k+ | | | Non-prefixed global variable |
| #5034 | Video Player Block | 100 | | 1 | 2k+ | | | slow db query meta key |
| #5035 | Video Player for WPBakery | 98 | 1 | 5 | 2k+ | | | trademarked term |
| #5036 | Video Thumbnails Reloaded | 36 | 343 | 58 | 2k+ | | | Text Domain Mismatch |
| #5037 | Virusdie | One-click website security | 39 | 149 | 66 | 2k+ | | | Output is not escaped |
| #5038 | Vision – Interactive Image Map with Hotspots Builder | 97 | | 2 | 2k+ | | | Discouraged text-domain loading |
| #5039 | Vitepos – Point of Sale (POS) for WooCommerce | 97 | | 28 | 2k+ | | | slow db query meta query |
| #5040 | VK Ads Pixel plugin | 90 | 6 | 4 | 2k+ | | | Missing direct file access protection |
| #5041 | VK Google Job Posting Manager | 99 | 1 | 3 | 2k+ | | | Non-prefixed class |
| #5042 | Innovs WPBakery Visual Composer WHMCS Elements | 37 | 154 | 24 | 2k+ | | | Text Domain Mismatch |
| #5043 | Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments | 23 | 121 | 1,227 | 2k+ | | | Non-prefixed global variable |
| #5044 | PDF Ink Lite – Free PDF Watermark & Password Protection | 24 | 226 | 561 | 2k+ | | | Non-prefixed global variable |
| #5045 | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | 31 | 295 | 876 | 2k+ | | | Missing nonce verification |
| #5046 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | | | Exception output is not escaped |
| #5047 | Checkout with Cash App on WooCommerce | 30 | 122 | 308 | 2k+ | | | Non-prefixed global variable |
| #5048 | Custom Thank You Page for WooCommerce | 83 | 7 | 6 | 2k+ | | | Output is not escaped |
| #5049 | Dropify | 30 | 132 | 254 | 2k+ | | | Nonce verification recommended |
| #5050 | Invoice Payment Gateway for WooCommerce | 87 | 5 | 4 | 2k+ | | | Output is not escaped |