| #5851 | Floating Contact Button | 77 | 6 | 3 | 1k+ | | | Output is not escaped |
| #5852 | Floating Contact Button for MAX and Telegram | 100 | | 0 | 1k+ | | | No open findings |
| #5853 | Floating Chat Buttons – Click to Call or Chat, Email | 94 | 1 | 1 | 1k+ | | | Output is not escaped |
| #5854 | Floating Publish Button | 84 | 5 | 4 | 1k+ | | | Unsafe printing function |
| #5855 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 41 | 115 | 14 | 1k+ | | | Exception output is not escaped |
| #5856 | Fluent Forms Connector for MailPoet | 98 | 28 | 7 | 1k+ | | | Text Domain Mismatch |
| #5857 | FluentPlayer – Video Player With Forms & Lead Capture | 75 | 10 | 40 | 1k+ | | | Database parameter is not escaped |
| #5858 | FMTC Affiliate Disclosure | 92 | 5 | 0 | 1k+ | | | Missing Arg Domain |
| #5859 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | | | Non-prefixed global variable |
| #5860 | FooGallery Migrate | 35 | 41 | 232 | 1k+ | | | Non-prefixed global variable |
| #5861 | FooTable | 42 | 86 | 7 | 1k+ | | | Output is not escaped |
| #5862 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #5863 | Footer Credits | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #5864 | Force Update Translations | 97 | 8 | 1 | 1k+ | | | Missing direct file access protection |
| #5865 | FormFacade – Embed Google Forms in your website | 83 | 8 | 17 | 1k+ | | | Nonce verification recommended |
| #5866 | FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | 85 | 12 | 327 | 1k+ | | | Non-prefixed global variable |
| #5867 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | | | Non-prefixed global variable |
| #5868 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #5869 | Formstack Online Forms | 52 | 39 | 20 | 1k+ | | | Output is not escaped |
| #5870 | Foyer – Digital Signage for WordPress | 38 | 148 | 191 | 1k+ | | | Non-prefixed global variable |
| #5871 | FraudLabs Pro for WooCommerce | 31 | 169 | 213 | 1k+ | | | Request data is not unslashed |
| #5872 | Freshchat | 60 | 16 | 10 | 1k+ | | | Output is not escaped |
| #5873 | Friendly Functions for Welcart | 36 | 311 | 83 | 1k+ | | | Non Singular String Literal Domain |
| #5874 | Friends | 28 | 164 | 670 | 1k+ | | | Non-prefixed global variable |
| #5875 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | | | Missing direct file access protection |
| #5876 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #5877 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | | | Direct Query |
| #5878 | Functionality | 95 | 6 | 2 | 1k+ | | | date date |
| #5879 | FV Clone Screen Options | 89 | 16 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #5880 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #5881 | f(x) Editor | 77 | 14 | 3 | 1k+ | | | Unsafe printing function |
| #5882 | Gallery Box | 32 | 395 | 43 | 1k+ | | | Text Domain Mismatch |
| #5883 | Gallery Images Ape | 25 | 588 | 341 | 1k+ | | | Output is not escaped |
| #5884 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #5885 | Portfolio Gallery – Responsive Image Gallery | Pending | - | - | 1k+ | | | Pending scan |
| #5886 | Gallery Block by Galleryberg: Lightbox with Tiles, Masonry, Square, & Justified Layouts | 92 | 1 | 41 | 1k+ | | | Non-prefixed global variable |
| #5887 | GazChap's WooCommerce Auto Category Product Thumbnails | 85 | 4 | 8 | 1k+ | | | trademarked term |
| #5888 | GD bbPress Tools | 43 | 15 | 61 | 1k+ | | | Input is not sanitized |
| #5889 | GD Rating System | 25 | 1,511 | 1,043 | 1k+ | | | Output is not escaped |
| #5890 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #5891 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #5892 | Osom Author Pro | 40 | 83 | 22 | 1k+ | | | Output is not escaped |
| #5893 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #5894 | Genesis Footer Builder | 41 | 124 | 3 | 1k+ | | | Output is not escaped |
| #5895 | Geo Blocker – Control Site Access by Region and IP | 42 | 10 | 64 | 1k+ | | | Direct Query |
| #5896 | Geo Mashup | 28 | 775 | 232 | 1k+ | | | Text Domain Mismatch |
| #5897 | Geo Redirect | 97 | 10 | 1 | 1k+ | | | Missing direct file access protection |
| #5898 | GeoTargeting Lite – WordPress Geolocation | 35 | 66 | 79 | 1k+ | | | Output is not escaped |
| #5899 | Ecommerce Fabrick | 49 | 4 | 135 | 1k+ | | | Nonce verification recommended |
| #5900 | Get Custom Field Values | 37 | 40 | 44 | 1k+ | | | Output is not escaped |