| #5851 | Floating Publish Button | 84 | 5 | 4 | 1k+ | | | Unsafe printing function |
| #5852 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 41 | 115 | 14 | 1k+ | | | Exception output is not escaped |
| #5853 | Fluent Forms Connector for MailPoet | 98 | 28 | 7 | 1k+ | | | Text Domain Mismatch |
| #5854 | FluentPlayer – Video Player With Forms & Lead Capture | 76 | 5 | 40 | 1k+ | | | Database parameter is not escaped |
| #5855 | FMTC Affiliate Disclosure | 92 | 5 | 0 | 1k+ | | | Missing Arg Domain |
| #5856 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | | | Non-prefixed global variable |
| #5857 | FooGallery Migrate | 33 | 83 | 205 | 1k+ | | | Non-prefixed global variable |
| #5858 | FooTable | 42 | 86 | 7 | 1k+ | | | Output is not escaped |
| #5859 | Football Pool | 24 | 1,085 | 733 | 1k+ | | | Output is not escaped |
| #5860 | Footer Credits | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #5861 | Force Update Translations | 97 | 8 | 1 | 1k+ | | | Missing direct file access protection |
| #5862 | FormFacade – Embed Google Forms in your website | 35 | 10 | 16 | 1k+ | | | Nonce verification recommended |
| #5863 | FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | 85 | 11 | 315 | 1k+ | | | Non-prefixed global variable |
| #5864 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | | | Non-prefixed global variable |
| #5865 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #5866 | Formstack Online Forms | 52 | 39 | 20 | 1k+ | | | Output is not escaped |
| #5867 | Foyer – Digital Signage for WordPress | 38 | 148 | 191 | 1k+ | | | Non-prefixed global variable |
| #5868 | FraudLabs Pro for WooCommerce | 31 | 169 | 213 | 1k+ | | | Request data is not unslashed |
| #5869 | Freshchat | 60 | 16 | 10 | 1k+ | | | Output is not escaped |
| #5870 | Friendly Functions for Welcart | 36 | 311 | 83 | 1k+ | | | Non Singular String Literal Domain |
| #5871 | Friends | 28 | 164 | 670 | 1k+ | | | Non-prefixed global variable |
| #5872 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | | | Missing direct file access protection |
| #5873 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #5874 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | | | Direct Query |
| #5875 | Functionality | 95 | 6 | 2 | 1k+ | | | date date |
| #5876 | FV Clone Screen Options | 89 | 16 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #5877 | FV Player 8 | 24 | 323 | 1,383 | 1k+ | | | Non-prefixed function |
| #5878 | f(x) Editor | 77 | 14 | 3 | 1k+ | | | Unsafe printing function |
| #5879 | Gallery Box | 32 | 395 | 43 | 1k+ | | | Text Domain Mismatch |
| #5880 | Gallery Images Ape | 25 | 588 | 341 | 1k+ | | | Output is not escaped |
| #5881 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #5882 | Portfolio Gallery – Responsive Image Gallery | Pending | - | - | 1k+ | | | Pending scan |
| #5883 | Gallery Block by Galleryberg: Lightbox with Tiles, Masonry, Square, & Justified Layouts | 97 | | 132 | 1k+ | | | Non-prefixed global variable |
| #5884 | GazChap's WooCommerce Auto Category Product Thumbnails | 85 | 4 | 8 | 1k+ | | | trademarked term |
| #5885 | GD bbPress Tools | 43 | 15 | 61 | 1k+ | | | Input is not sanitized |
| #5886 | GD Rating System | 25 | 1,511 | 1,043 | 1k+ | | | Output is not escaped |
| #5887 | GD Security Headers | 25 | 407 | 521 | 1k+ | | | Output is not escaped |
| #5888 | GDPRess | Eliminate external requests to increase GDPR compliance | 39 | 60 | 26 | 1k+ | | | Output is not escaped |
| #5889 | Osom Author Pro | 40 | 83 | 22 | 1k+ | | | Output is not escaped |
| #5890 | Genesis Sandbox Featured Content Widget | 36 | 229 | 24 | 1k+ | | | Text Domain Mismatch |
| #5891 | Genesis Footer Builder | 41 | 124 | 3 | 1k+ | | | Output is not escaped |
| #5892 | Geo Mashup | 28 | 775 | 232 | 1k+ | | | Text Domain Mismatch |
| #5893 | Geo Redirect | 97 | 10 | 1 | 1k+ | | | Missing direct file access protection |
| #5894 | GeoTargeting Lite – WordPress Geolocation | 35 | 66 | 79 | 1k+ | | | Output is not escaped |
| #5895 | Ecommerce Fabrick | 49 | 4 | 135 | 1k+ | | | Nonce verification recommended |
| #5896 | Get Custom Field Values | 37 | 40 | 44 | 1k+ | | | Output is not escaped |
| #5897 | GET Params | 83 | 3 | 8 | 1k+ | | | Nonce verification recommended |
| #5898 | Cron Setup and Monitor – Get URL Cron | 100 | | 0 | 1k+ | | | No open findings |
| #5899 | GetAutoSEO AI Tool | 46 | 10 | 250 | 1k+ | | | Direct Query |
| #5900 | Responsive Navigation Block | 99 | 1 | 1 | 1k+ | | | Missing Version |