| #9801 | Quick Flickr Widget | 56 | 37 | 2 | 400 | | | Output is not escaped |
| #9802 | RaCar Clear Cart for WooCommerce | 99 | 1 | 1 | 400 | | | Non-prefixed constant |
| #9803 | rapidmail: Newsletter & E-Mail Marketing for WooCommerce | 37 | 79 | 47 | 400 | | | Text Domain Mismatch |
| #9804 | Rapyd Payment Extension for WooCommerce | 75 | 50 | 33 | 400 | | | Text Domain Mismatch |
| #9805 | RateMyAgent Official | 89 | 1 | 158 | 400 | | | Non-prefixed namespace |
| #9806 | Rating by BestWebSoft | 28 | 509 | 218 | 400 | | | Text Domain Mismatch |
| #9807 | RDP Wiki Embed | 38 | 69 | 26 | 400 | | | Output is not escaped |
| #9808 | RealHomes PayPal Payments | 60 | 55 | 23 | 400 | | | Non Singular String Literal Domain |
| #9809 | Really Simple Disable Comments | 100 | | 1 | 400 | | | Non-prefixed class |
| #9810 | Really Simple Popup | 98 | 2 | 4 | 400 | | | Missing Version |
| #9811 | Re:amaze Helpdesk & Live Chat | 31 | 96 | 115 | 400 | | | Output is not escaped |
| #9812 | Recent Posts | 78 | 7 | 2 | 400 | | | Database parameter is not escaped |
| #9813 | Record of Consent Extension for Complianz | 100 | | 2 | 400 | | | Schema Change |
| #9814 | Regen. Thumbs | 88 | 3 | 3 | 400 | | | Input is not sanitized |
| #9815 | Regiones de Chile para WooCommerce | 94 | 7 | 4 | 400 | | | trademarked term |
| #9816 | StyleAI | 94 | 1 | 4 | 400 | | | Missing nonce verification |
| #9817 | Remove Archive Label | 98 | 3 | 1 | 400 | | | Missing direct file access protection |
| #9818 | Remove Taxonomy Slug | 77 | 23 | 2 | 400 | | | Output is not escaped |
| #9819 | Remove WP Logo from Admin Bar | 98 | 2 | 3 | 400 | | | trademarked term |
| #9820 | Repeaterly – ACF Repeater, Flexible Content & Dynamic Tags for Elementor | 99 | | 7 | 400 | | | Dynamic hook name |
| #9821 | resmio button & widget | 37 | 99 | 36 | 400 | | | Text Domain Mismatch |
| #9822 | Responsive Image Widget | 49 | 43 | 0 | 400 | | | Output is not escaped |
| #9823 | Restaurant Food Menu by WP Darko – Drag & Drop Restaurant Menu Builder for WordPress | 73 | 1 | 68 | 400 | | | Non-prefixed global variable |
| #9824 | Advanced Datepicker – Restricts Date for Contact Form 7 | 72 | 228 | 11 | 400 | | | wp function not compatible with requires wp |
| #9825 | Reusable Blocks Admin Menu Option | 98 | 2 | 3 | 400 | | | Non-prefixed global variable |
| #9826 | Review Slider for WooCommerce | 33 | 160 | 422 | 400 | | | Non-prefixed global variable |
| #9827 | Review Stream | 56 | 41 | 42 | 400 | | | Non-prefixed global variable |
| #9828 | Risk Free Cash On Delivery (COD) – WooCommerce | 40 | 106 | 31 | 400 | | | Text Domain Mismatch |
| #9829 | Rollbar | 39 | 75 | 14 | 400 | | | Output is not escaped |
| #9830 | RSS Just Better | 42 | 136 | 2 | 400 | | | Output is not escaped |
| #9831 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #9832 | Russian Currency | 54 | 52 | 6 | 400 | | | Output is not escaped |
| #9833 | SaasPricing – Advanced Pricing & Comparison Tables for Elementor | 99 | 1 | 4 | 400 | | | Non-prefixed hook name |
| #9834 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #9835 | Invoice123 | 38 | 139 | 88 | 400 | | | Text Domain Mismatch |
| #9836 | Save and Continue Link Recovery for Gravity Forms | 85 | 16 | 5 | 400 | | | Text Domain Mismatch |
| #9837 | Schedule Content Block | 35 | 2 | 3 | 400 | | | Discouraged text-domain loading |
| #9838 | sCode (Easy Shortcodes) | 35 | 157 | 97 | 400 | | | Text Domain Mismatch |
| #9839 | Scroll Magic Addon for Elementor | 77 | 344 | 7 | 400 | | | Text Domain Mismatch |
| #9840 | Scrollbar | 59 | 7 | 22 | 400 | | | Missing nonce verification |
| #9841 | SeatReg | 21 | 312 | 1,637 | 400 | | | Missing nonce verification |
| #9842 | Second Street | 98 | 10 | 6 | 400 | | | Non Enqueued Script |
| #9843 | Section Collection – Add Ready-made Sections to Design Modern Websites | 100 | | 1 | 400 | | | mismatched plugin name |
| #9844 | Security-Protection | 51 | 5 | 32 | 400 | | | Missing nonce verification |
| #9845 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #9846 | Send email to customer on cancelled order in WooCommerce | 98 | 2 | 4 | 400 | | | trademarked term |
| #9847 | Send link to friend | 41 | 81 | 47 | 400 | | | Output is not escaped |
| #9848 | Sendy | 78 | 11 | 2 | 400 | | | Output is not escaped |
| #9849 | TrueRanker | 94 | 49 | 18 | 400 | | | wp function not compatible with requires wp |
| #9850 | Service Box Slider | 24 | 618 | 1,410 | 400 | | | Non-prefixed global variable |