| #8951 | Gravity Forms IBAN | 94 | 7 | 21 | 500 | | | Non-prefixed function |
| #8952 | Gravity Forms: Notification Attachments | 59 | 18 | 7 | 500 | | | Output is not escaped |
| #8953 | Gravity Forms Personality Quiz Add-On | 98 | 7 | 3 | 500 | | | Text Domain Mismatch |
| #8954 | Gravity Forms Eway | 33 | 519 | 45 | 500 | | | Missing Translators Comment |
| #8955 | Great Caroussel | 38 | 60 | 131 | 500 | | | SQL query is not prepared |
| #8956 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #8957 | Gumlet – Image optimization with Resize, Compression, Lazy load, Caching & CDN delivery | 35 | 53 | 45 | 500 | | | parse url parse url |
| #8958 | SNORDIAN's H5PxAPIkatchu | 41 | 119 | 88 | 500 | | | SQL query is not prepared |
| #8959 | HAL | 58 | 106 | 24 | 500 | | | Text Domain Mismatch |
| #8960 | Helio Pay (Accept 1-click crypto payments #USDC #SOL #BTC #ETH) | 91 | 8 | 11 | 500 | | | Missing direct file access protection |
| #8961 | Hide Admin Bar For User Roles | 61 | 38 | 10 | 500 | | | Output is not escaped |
| #8962 | Hide Any Page | 85 | 8 | 2 | 500 | | | Output is not escaped |
| #8963 | Hide Author Archive | 91 | 6 | 3 | 500 | | | Missing direct file access protection |
| #8964 | Hide Google reCAPTCHA Logo | 97 | 3 | 2 | 500 | | | Non-prefixed global variable |
| #8965 | Hide WP Admin Login | 41 | 23 | 39 | 500 | | | Nonce verification recommended |
| #8966 | Hizzle CAPTCHA – Protect your forms from spam | 80 | 4 | 27 | 500 | | | Non-prefixed global variable |
| #8967 | Simple Honeypot for Contact Form 7 | 91 | 1 | 6 | 500 | | | Missing nonce verification |
| #8968 | Host Header Injection Fix | 70 | 9 | 8 | 500 | | | Output is not escaped |
| #8969 | Hot Blocks | 98 | 2 | 8 | 500 | | | Missing Version |
| #8970 | WP Team – WordPress Team Member Plugin | 38 | 537 | 36 | 500 | | | Text Domain Mismatch |
| #8971 | I Agree! Popups | 40 | 54 | 46 | 500 | | | Output is not escaped |
| #8972 | Iconic Copy Text Blocks | 99 | 1 | 1 | 500 | | | Non-prefixed class |
| #8973 | iCount Payment Gateway | 41 | 152 | 22 | 500 | | | Text Domain Mismatch |
| #8974 | IFrame Widget | 40 | 87 | 1 | 500 | | | Output is not escaped |
| #8975 | iframe Wrapper | 97 | 3 | 3 | 500 | | | Missing Version |
| #8976 | Image Size Selection for Divi | 96 | 60 | 3 | 500 | | | Text Domain Mismatch |
| #8977 | ImgSEO – AI Image Alt Text Generator & Image SEO Tools | 31 | 1 | 677 | 500 | | | Direct Query |
| #8978 | Include Matomo Tracking, by Jonas Hellmann | 62 | 14 | 4 | 500 | | | Setting is missing a sanitization callback |
| #8979 | Increase Maximum Upload File Size | 95 | 6 | 3 | 500 | | | Missing direct file access protection |
| #8980 | Infinite Ajax Scrolling Lite For Woocommerce | 41 | 33 | 28 | 500 | | | Output is not escaped |
| #8981 | Infinite Notification – Sales Notification Plugin | 73 | 13 | 5 | 500 | | | Setting is missing a sanitization callback |
| #8982 | RealHomes Stripe Payments | 32 | 201 | 33 | 500 | | | Exception output is not escaped |
| #8983 | Getnet Argentina para WooCommerce | 86 | 14 | 9 | 500 | | | Text Domain Mismatch |
| #8984 | Integrate Firebase | 64 | 26 | 7 | 500 | | | Output is not escaped |
| #8985 | Integrate GA4 Google Analytics | 63 | 33 | 3 | 500 | | | Text Domain Mismatch |
| #8986 | Integrate Razorpay for Contact Form 7 | 26 | 152 | 97 | 500 | | | curl curl setopt |
| #8987 | Bitrix24 | 65 | 28 | 10 | 500 | | | Text Domain Mismatch |
| #8988 | IntenseDebate Comments | 35 | 203 | 114 | 500 | | | Output is not escaped |
| #8989 | Interactive Polish Map | 60 | 30 | 4 | 500 | | | Output is not escaped |
| #8990 | Internet Speed Test | 98 | 3 | 0 | 500 | | | outdated tested upto header |
| #8991 | jAlbum Bridge | 99 | 1 | 6 | 500 | | | Not In Footer |
| #8992 | Jarvis | 35 | 10 | 19 | 500 | | | Input is not validated |
| #8993 | Static Site Exporter | 35 | 54 | 25 | 500 | | | file system operations mkdir |
| #8994 | Jock On Air Now (JOAN) | 38 | 121 | 224 | 500 | | | Output is not escaped |
| #8995 | Juiz Last Tweet Widget | 32 | 136 | 53 | 500 | | | Output is not escaped |
| #8996 | Just Responsive Images | 60 | 25 | 7 | 500 | | | Missing direct file access protection |
| #8997 | KCSG Kartra Pages | 47 | 30 | 16 | 500 | | | Heredoc Output Not Escaped |
| #8998 | Khattat – Arabic Fonts | 100 | | 2 | 500 | | | Discouraged text-domain loading |
| #8999 | Kindeditor For WordPress | 31 | 63 | 130 | 500 | | | Non-prefixed global variable |
| #9000 | core plugin for kitestudio themes | 30 | 244 | 415 | 500 | | | Nonce verification recommended |
