| #9601 | Formidable Honeypot | 74 | 10 | 6 | 400 | | | Text Domain Mismatch |
| #9602 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | | | Request data is not unslashed |
| #9603 | Free Customer Service Tools by OpenWidget | 95 | 2 | 1 | 400 | | | Request data is not unslashed |
| #9604 | Free PDF to Flipbook | 95 | 1 | 2 | 400 | | | Nonce verification recommended |
| #9605 | FreePay for WooCommerce | 36 | 114 | 102 | 400 | | | Output is not escaped |
| #9606 | Front End Users | 21 | 719 | 2,759 | 400 | | | Non-prefixed global variable |
| #9607 | Frontend Product Editor for WooCommerce | 78 | 76 | 31 | 400 | | | Text Domain Mismatch |
| #9608 | FT Password Protect Children Pages | 91 | 8 | 1 | 400 | | | Missing Arg Domain |
| #9609 | Fusion Page Builder : Extension – Button | 90 | 4 | 5 | 400 | | | Input is not validated |
| #9610 | GA Admin Taxonomy Search | 96 | 7 | 2 | 400 | | | Missing direct file access protection |
| #9611 | GamiPress – Leaderboards Include/Exclude Users | 85 | 11 | 3 | 400 | | | Output is not escaped |
| #9612 | GamiPress – Reset User | 51 | 14 | 27 | 400 | | | Interpolated SQL is not prepared |
| #9613 | GamiPress – WooCommerce Points Per Purchase Total | 90 | 10 | 5 | 400 | | | trademarked term |
| #9614 | Geliver Akıllı Kargo Pazaryeri | 34 | 49 | 247 | 400 | | | Non-prefixed global variable |
| #9615 | Easy Genesis Logo Uploader | 82 | 18 | 5 | 400 | | | Output is not escaped |
| #9616 | Get Chat App | 62 | 10 | 62 | 400 | | | Request data is not unslashed |
| #9617 | Get a Newsletter | 35 | 138 | 144 | 400 | | | Output is not escaped |
| #9618 | GetPaid > Item Inventory | 40 | 112 | 52 | 400 | | | Text Domain Mismatch |
| #9619 | Gravity Forms Confirmation Page List | 91 | 6 | 3 | 400 | | | Missing direct file access protection |
| #9620 | Location Add-on For Gravity Forms | 89 | 18 | 16 | 400 | | | Text Domain Mismatch |
| #9621 | WP Gravity Forms Zoho CRM and Bigin | 32 | 750 | 174 | 400 | | | Text Domain Mismatch |
| #9622 | Gifty | 75 | 38 | 7 | 400 | | | wp function not compatible with requires wp |
| #9623 | Gitium | 34 | 149 | 57 | 400 | | | Output is not escaped |
| #9624 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |
| #9625 | GHL Contact Form 7 Bridge – Send Contact Form 7 leads to GHL CRM | 94 | 6 | 17 | 400 | | | Non-prefixed global variable |
| #9626 | Good Old Twitter Feed Widget | 43 | 110 | 10 | 400 | | | Text Domain Mismatch |
| #9627 | Five Star Restaurant Reviews | 33 | 242 | 142 | 400 | | | Output is not escaped |
| #9628 | Per User Prompt for Google Authenticator | 43 | 8 | 52 | 400 | | | Nonce verification recommended |
| #9629 | Google SEO Pressor for Rich snippets | 36 | 51 | 160 | 400 | | | Missing nonce verification |
| #9630 | Comments – GraphComment | AI-Moderated Comment System | 33 | 191 | 177 | 400 | | | Unsafe printing function |
| #9631 | Gravity Forms Multi Currency | 74 | 6 | 12 | 400 | | | Output is not escaped |
| #9632 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | | | Non-prefixed global variable |
| #9633 | Consent Mode Banner | 85 | 3 | 7 | 400 | | | Missing Version |
| #9634 | GZSEO | 69 | 3 | 66 | 400 | | | Direct Query |
| #9635 | Hand Talk | 69 | 34 | 4 | 400 | | | Output is not escaped |
| #9636 | Header Promo – Show Top Bar Message or Call to Action | 40 | 472 | 45 | 400 | | | Output is not escaped |
| #9637 | Help Scout | 35 | 11 | 13 | 400 | | | Missing direct file access protection |
| #9638 | Hesabfa Accounting | 22 | 467 | 718 | 400 | | | Text Domain Mismatch |
| #9639 | Heureka | 22 | 557 | 254 | 400 | | | Exception output is not escaped |
| #9640 | Hide Broken Shortcodes | 99 | 1 | 3 | 400 | | | unexpected markdown file |
| #9641 | Hide My Dates | 41 | 50 | 11 | 400 | | | Unsafe printing function |
| #9642 | Hide Text Shortcode | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #9643 | Hide WordPress Version | 96 | 5 | 4 | 400 | | | trademarked term |
| #9644 | Hide My WP Lite | 39 | 24 | 62 | 400 | | | Nonce verification recommended |
| #9645 | hideShowPassword | 92 | 3 | 5 | 400 | | | trademarked term |
| #9646 | Hindi-To-Lat | 88 | 3 | 14 | 400 | | | Direct Query |
| #9647 | History Log by click5 | 22 | 675 | 1,290 | 400 | | | Direct Query |
| #9648 | Honeypot Toolkit | 32 | 155 | 770 | 400 | | | Missing nonce verification |
| #9649 | Host Header Injection Fix | 70 | 9 | 8 | 400 | | | Output is not escaped |
| #9650 | Humans TXT | 37 | 159 | 86 | 400 | | | Output is not escaped |