| #5251 | Admin in English | 83 | 4 | 7 | 1k+ | | | Input is not sanitized |
| #5252 | Admin Page Spider | 96 | 10 | 27 | 1k+ | | | Non-prefixed global variable |
| #5253 | Admin Search | 40 | 31 | 47 | 1k+ | | | Output is not escaped |
| #5254 | Admin Toolbar Menus | 98 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #5255 | Address correction autocomplete for Woo | 67 | 19 | 9 | 1k+ | | | Text Domain Mismatch |
| #5256 | Advanced Ads for WPBakery Page Builder | 98 | 1 | 6 | 1k+ | | | trademarked term |
| #5257 | Easy Google Adsense and Banner Ads Manager – AdsforWP | 98 | 3 | 4 | 1k+ | | | trademarked term |
| #5258 | Advanced GeoIP Redirect | 99 | | 13 | 1k+ | | | Non-prefixed global variable |
| #5259 | Advance Bank Payment Transfer Gateway | 41 | 105 | 62 | 1k+ | | | Text Domain Mismatch |
| #5260 | Advance Canonical URL | 82 | 3 | 10 | 1k+ | | | Input is not validated |
| #5261 | Advanced 301 and 302 Redirect | 38 | 81 | 339 | 1k+ | | | Non-prefixed global variable |
| #5262 | Advanced Category and Custom Taxonomy Image | 100 | | 2 | 1k+ | | | Non-prefixed class |
| #5263 | Advanced Custom Fields – Taxonomy Field add-on | 50 | 57 | 4 | 1k+ | | | Non Singular String Literal Domain |
| #5264 | Advanced Image Comparison for Elementor | 87 | 1 | 5 | 1k+ | | | Nonce verification recommended |
| #5265 | Advanced Image Hover Effect for Elementor | 81 | 251 | 8 | 1k+ | | | Text Domain Mismatch |
| #5266 | Advanced Recent Posts Widget | 39 | 105 | 2 | 1k+ | | | Output is not escaped |
| #5267 | Advanced Sermons | 38 | 833 | 184 | 1k+ | | | Unsafe printing function |
| #5268 | Advanced WPLink | 40 | 67 | 19 | 1k+ | | | Text Domain Mismatch |
| #5269 | AdWords Conversion Tracking Code | 43 | 26 | 25 | 1k+ | | | Non Singular String Literal Domain |
| #5270 | Affiliate Coupons – Coupon Display Manager – Excellent Tool for Affiliate Marketers | 32 | 183 | 61 | 1k+ | | | Output is not escaped |
| #5271 | Affiliates WooCommerce Light | 99 | 1 | 3 | 1k+ | | | trademarked term |
| #5272 | AffiliateWP – Affiliate Info | 79 | 27 | 7 | 1k+ | | | Text Domain Mismatch |
| #5273 | AffiliateWP – Affiliate QR Codes | 78 | 32 | 8 | 1k+ | | | Text Domain Mismatch |
| #5274 | AffiliateWP – Allowed Products | 73 | 47 | 19 | 1k+ | | | Text Domain Mismatch |
| #5275 | AffiliateWP – Leaderboard | 49 | 68 | 13 | 1k+ | | | Output is not escaped |
| #5276 | AffiliateWP – WooCommerce Redirect Affiliates | 79 | 27 | 7 | 1k+ | | | Text Domain Mismatch |
| #5277 | Age Verify | 41 | 29 | 31 | 1k+ | | | Output is not escaped |
| #5278 | AI Alt Text Generator | 32 | 76 | 24 | 1k+ | | | Missing Translators Comment |
| #5279 | WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | 69 | 452 | 25 | 1k+ | | | Text Domain Mismatch |
| #5280 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #5281 | AI Copilot – Content Generator | 31 | 159 | 163 | 1k+ | | | wp function not compatible with requires wp |
| #5282 | Instant AI Image Generator – Create & Import Images | 78 | | 23 | 1k+ | | | Non-prefixed constant |
| #5283 | Smart Related Products – AI-Inspired Recommendations for WooCommerce | 67 | 13 | 15 | 1k+ | | | Output is not escaped |
| #5284 | AI Share & Summarize | 100 | | 0 | 1k+ | | | No open findings |
| #5285 | AinoBlocks – Gutenberg Website Builder Blocks | 97 | 18 | 4 | 1k+ | | | block api version too low |
| #5286 | Folder Excluder for AIO WP Migration | 81 | 8 | 5 | 1k+ | | | Non-prefixed function |
| #5287 | Air WP Sync – Airtable to WordPress | 35 | 37 | 45 | 1k+ | | | Non-prefixed hook name |
| #5288 | Airi Demo Importer | 98 | 1 | 7 | 1k+ | | | Deprecated function: get_page_by_title |
| #5289 | Aitasi Coming Soon | 30 | 516 | 186 | 1k+ | | | Output is not escaped |
| #5290 | Ajax Archive Calendar | 45 | 40 | 18 | 1k+ | | | date date |
| #5291 | Post Grid Master — Post Grids & AJAX Filters | 42 | 44 | 115 | 1k+ | | | Non-prefixed global variable |
| #5292 | Albacross for WordPress | 73 | 18 | 5 | 1k+ | | | Text Domain Mismatch |
| #5293 | All-in-one Like Widget | 42 | 165 | 2 | 1k+ | | | Text Domain Mismatch |
| #5294 | All in One Addons For WPBakery Page Builder (formerly Visual Composer) | 30 | 1,084 | 150 | 1k+ | | | Output is not escaped |
| #5295 | All-in-One Sticky Anything – Click to Call, Fixed Widget, Sticky Header, Menu & Sidebar | 97 | | 3 | 1k+ | | | Discouraged text-domain loading |
| #5296 | Alma – Pay in installments or later for WooCommerce | 41 | 116 | 68 | 1k+ | | | Exception output is not escaped |
| #5297 | Alt Magic: AI Image Alt Text Generator for WP & Image Rename | 39 | 61 | 112 | 1k+ | | | Direct Query |
| #5298 | Always Edit In HTML | 77 | 7 | 5 | 1k+ | | | Output is not escaped |
| #5299 | Affiliate Super Assistent | 23 | 1,280 | 267 | 1k+ | | | Text Domain Mismatch |
| #5300 | Amministrazione Trasparente | 35 | 80 | 46 | 1k+ | | | Output is not escaped |