| #6001 | Image Picker For Gravity Forms | 98 | | 21 | 1k+ | | | Non-prefixed global variable |
| #6002 | Image Cleanup | 34 | 52 | 94 | 1k+ | | | Nonce verification recommended |
| #6003 | Image Comparison Block | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #6004 | Image Rotation Fixer | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #6005 | WP Image Size Selection | 98 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #6006 | Image & Text Widget | 89 | 4 | 4 | 1k+ | | | Missing Version |
| #6007 | Image Title Remove | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #6008 | Image Widget Deluxe | 37 | 190 | 1 | 1k+ | | | Output is not escaped |
| #6009 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | | | Non-prefixed global variable |
| #6010 | ImageLinks – Interactive Image Builder with Hotspots | 33 | 517 | 90 | 1k+ | | | Text Domain Mismatch |
| #6011 | ImageMagick Sharpen Resized Images | 54 | 22 | 6 | 1k+ | | | Output is not escaped |
| #6012 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #6013 | Image SEO – AI-Driven Image SEO Optimizer | 26 | 350 | 327 | 1k+ | | | Text Domain Mismatch |
| #6014 | Img Title Removal | 97 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #6015 | WP All Import – Import SEO Settings for All In One SEO | 65 | 19 | 11 | 1k+ | | | Output is not escaped |
| #6016 | Index WP Users For Speed | 77 | 10 | 35 | 1k+ | | | Non-prefixed global variable |
| #6017 | Infobox | 82 | 15 | 12 | 1k+ | | | file system operations mkdir |
| #6018 | Keap Official Opt-in Forms | 24 | 829 | 1,046 | 1k+ | | | Non-prefixed global variable |
| #6019 | Injection Guard | 36 | 87 | 45 | 1k+ | | | Unsafe printing function |
| #6020 | Inline Spoilers | 99 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #6021 | Insert Amz Images | 39 | 79 | 44 | 1k+ | | | Output is not escaped |
| #6022 | Insert Blocks Before or After Posts Content | 43 | 42 | 15 | 1k+ | | | Output is not escaped |
| #6023 | RealHomes Memberships | 23 | 516 | 264 | 1k+ | | | Non Singular String Literal Domain |
| #6024 | Kit (formerly ConvertKit) for WPForms | 96 | 11 | 16 | 1k+ | | | Non-prefixed global variable |
| #6025 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #6026 | Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 626 | 351 | 1k+ | | | Text Domain Mismatch |
| #6027 | Interactive Image Map Builder | 31 | 160 | 381 | 1k+ | | | Non-prefixed global variable |
| #6028 | Interactive World Map | 29 | 684 | 341 | 1k+ | | | Text Domain Mismatch |
| #6029 | Internal Linking of Related Contents | 40 | 714 | 47 | 1k+ | | | Output is not escaped |
| #6030 | International Telephone Input With Flags And Dial Codes | 98 | 7 | 7 | 1k+ | | | badly named files |
| #6031 | Internet Archive Wayback Machine Link Fixer | 77 | 2 | 22 | 1k+ | | | Database parameter is not escaped |
| #6032 | Invite Anyone | 40 | 32 | 130 | 1k+ | | | Non-prefixed hook name |
| #6033 | Item Lists for Elementor | 98 | 1 | 49 | 1k+ | | | Non-prefixed global variable |
| #6034 | PBULKiT – Bulk Edit Products for WooCommerce | 100 | | 1 | 1k+ | | | Non-prefixed global variable |
| #6035 | iZooto – Web Push Notifications | 57 | 26 | 25 | 1k+ | | | wp function not compatible with requires wp |
| #6036 | Janolaw AGB Hosting | 33 | 198 | 11 | 1k+ | | | Short PHP open tag found |
| #6037 | Jellyfish Counter Widget | 41 | 174 | 5 | 1k+ | | | Output is not escaped |
| #6038 | Module Control for Jetpack | 88 | 11 | 15 | 1k+ | | | Non-prefixed global variable |
| #6039 | Jobber | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6040 | JobBoardWP – Job Board Listings and Submissions | 94 | 12 | 44 | 1k+ | | | slow db query meta query |
| #6041 | JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin | 25 | 1,541 | 1,578 | 1k+ | | | Non-prefixed global variable |
| #6042 | JoomSport – for Sports: Team & League, Football, Hockey & more | 25 | 523 | 1,745 | 1k+ | | | Direct Query |
| #6043 | Arvow AI SEO Writer | 95 | 1 | 6 | 1k+ | | | Non-prefixed global variable |
| #6044 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | | | Non Singular String Literal Domain |
| #6045 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | | | Output is not escaped |
| #6046 | jQuery Masonry Image Gallery | 72 | 17 | 6 | 1k+ | | | Unsafe printing function |
| #6047 | jQuery UI Widgets | 43 | 131 | 5 | 1k+ | | | Unsafe printing function |
| #6048 | JSON API User | 57 | 17 | 34 | 1k+ | | | Non-prefixed hook name |
| #6049 | JSON-LD Breadcrumbs | 98 | 3 | 1 | 1k+ | | | application detected |
| #6050 | JSON Feed (jsonfeed.org) | 35 | 9 | 29 | 1k+ | | | Non-prefixed global variable |