| #1851 | Ovation Elements | 36 | 23 | 399 | 10k+ | | | Non-prefixed global variable |
| #1852 | Page View Count | 29 | 106 | 246 | 10k+ | | | Dynamic hook name |
| #1853 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,953 | 5,297 | 10k+ | | | Non-prefixed hook name |
| #1854 | Pantheon Advanced Page Cache | 91 | 10 | 6 | 10k+ | | | Request data is not unslashed |
| #1855 | Parent Category Toggler | 91 | 6 | 0 | 10k+ | | | Missing direct file access protection |
| #1856 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #1857 | Pdf Embed | 93 | 4 | 4 | 10k+ | | | Non-prefixed global variable |
| #1858 | PDF Viewer Block for Gutenberg | 95 | 39 | 3 | 10k+ | | | badly named files |
| #1859 | PDF viewer for Elementor & Gutenberg | 73 | 14 | 12 | 10k+ | | | Nonce verification recommended |
| #1860 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #1861 | PhonePe Payment Solutions | 34 | 77 | 106 | 10k+ | | | Missing direct file access protection |
| #1862 | Photonic Gallery & Lightbox for Flickr, SmugMug & Others | 36 | 180 | 117 | 10k+ | | | Missing Translators Comment |
| #1863 | Weblizar Pin It Button On Image Hover And Post | 100 | | 1 | 10k+ | | | trademarked term |
| #1864 | Plausible Analytics | 35 | 244 | 61 | 10k+ | | | Exception output is not escaped |
| #1865 | Plugin Check (PCP) | 0 | 128 | 132 | 10k+ | | | Exception output is not escaped |
| #1866 | Plugin Organizer | 33 | 325 | 257 | 10k+ | | | Output is not escaped |
| #1867 | Plugins Garbage Collector (Database Cleanup) | 36 | 32 | 51 | 10k+ | | | Missing nonce verification |
| #1868 | PNG to JPG | 37 | 130 | 173 | 10k+ | | | Interpolated SQL is not prepared |
| #1869 | Podcast Player – Your Podcasting Companion | 46 | 14 | 133 | 10k+ | | | Non-prefixed global variable |
| #1870 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #1871 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | | Non Singular String Literal Domain |
| #1872 | Popup Trigger URL for Elementor Pro | 86 | 2 | 4 | 10k+ | | | Nonce verification recommended |
| #1873 | PowerFolio – Portfolio & Image Gallery for Elementor | 97 | 10 | 12 | 10k+ | | | Non-prefixed hook name |
| #1874 | Post Grid Addon for Elementor | 74 | 16 | 13 | 10k+ | | | Missing direct file access protection |
| #1875 | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 24 | 599 | 1,532 | 10k+ | | | Non-prefixed global variable |
| #1876 | Post to Google My Business (Google Business Profile) | 23 | 845 | 1,452 | 10k+ | | | Non-prefixed global variable |
| #1877 | Post Types Unlimited | 72 | 45 | 7 | 10k+ | | | Missing Translators Comment |
| #1878 | Postie | 23 | 408 | 259 | 10k+ | | | Output is not escaped |
| #1879 | Posts in Page | 95 | 10 | 12 | 10k+ | | | date date |
| #1880 | Posts 2 Posts | 41 | 42 | 73 | 10k+ | | | Non Singular String Literal Domain |
| #1881 | Powerkit – Supercharge your WordPress Site | 61 | 67 | 116 | 10k+ | | | Non-prefixed global variable |
| #1882 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | | | Missing Translators Comment |
| #1883 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #1884 | Prevent Browser Caching | 90 | 2 | 18 | 10k+ | | | Non-prefixed hook name |
| #1885 | Prevent Direct Access – Protect WordPress Files | 96 | 4 | 26 | 10k+ | | | Non-prefixed constant |
| #1886 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #1887 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | | | Non-prefixed global variable |
| #1888 | Printify for WooCommerce | 99 | 2 | 3 | 10k+ | | | Missing direct file access protection |
| #1889 | Product Enquiry for WooCommerce (Now with AI Assistant) | 86 | 6 | 146 | 10k+ | | | Non-prefixed global variable |
| #1890 | WP All Export – Product Export Add-On for WooCommerce | 90 | 14 | 26 | 10k+ | | | Non-prefixed hook name |
| #1891 | Product Variations Swatches for WooCommerce | 67 | 8 | 136 | 10k+ | | | Non-prefixed global variable |
| #1892 | Product Video Gallery for Woocommerce | 40 | 61 | 36 | 10k+ | | | Setting is missing a sanitization callback |
| #1893 | Protect WP Admin | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #1894 | Public Post Preview Configurator | 84 | 14 | 6 | 10k+ | | | Non Singular String Literal Domain |
| #1895 | Pure Metafields | 53 | 5 | 130 | 10k+ | | | Non-prefixed global variable |
| #1896 | Qode Essential Addons | 31 | 55 | 295 | 10k+ | | | Non-prefixed global variable |
| #1897 | QODE Quick View for WooCommerce | 90 | 2 | 98 | 10k+ | | | Non-prefixed global variable |
| #1898 | QODE Wishlist for WooCommerce | 89 | 2 | 178 | 10k+ | | | Non-prefixed global variable |
| #1899 | QuadMenu – Mega Menu | 25 | 2,128 | 455 | 10k+ | | | Output is not escaped |
| #1900 | Quick and Easy FAQs | 71 | 92 | 9 | 10k+ | | | Non Singular String Literal Domain |