| #8901 | ESV CrossReference Tool | 97 | 4 | 1 | 500 | | | Missing direct file access protection |
| #8902 | Event Genius – Event Management, Events Calendar, Registration, and RSVP | 25 | 181 | 1,579 | 500 | | | Non-prefixed global variable |
| #8903 | AH Google Analytics Code | 88 | 6 | 2 | 500 | | | Output is not escaped |
| #8904 | Excerpt Editor | 37 | 170 | 142 | 500 | | | Unsafe printing function |
| #8905 | Excerpts for Pages | 97 | 4 | 2 | 500 | | | Missing direct file access protection |
| #8906 | Expire Passwords | 92 | 7 | 2 | 500 | | | Missing Translators Comment |
| #8907 | Export Customers Data | 34 | 109 | 49 | 500 | | | Text Domain Mismatch |
| #8908 | Export emails | 83 | 8 | 7 | 500 | | | Direct Query |
| #8909 | Extra Styling for MemberPress | 86 | 64 | 7 | 500 | | | Text Domain Mismatch |
| #8910 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #8911 | F2 Tag Cloud Widget | 54 | 66 | 2 | 500 | | | Output is not escaped |
| #8912 | F4 Post Tree | 25 | 536 | 1,332 | 500 | | | Non-prefixed global variable |
| #8913 | Fancy Lightbox | 98 | 3 | 2 | 500 | | | No Explicit Version |
| #8914 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #8915 | FAQ Block | 97 | 4 | 2 | 500 | | | Discouraged text-domain loading |
| #8916 | Fast Speed Index | 74 | 9 | 12 | 500 | | | Direct Query |
| #8917 | Fastest Age Verification | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #8918 | FCM Push Notification from WP | 42 | 43 | 16 | 500 | | | Non Singular String Literal Domain |
| #8919 | FA Lite – WP responsive slider plugin | 32 | 726 | 140 | 500 | | | Unsafe printing function |
| #8920 | Feed For TikTok Shop | 93 | 11 | 4 | 500 | | | wp function not compatible with requires wp |
| #8921 | Feed JSON | 86 | 9 | 15 | 500 | | | Non-prefixed global variable |
| #8922 | Firebase Authentication | 100 | | 2 | 500 | | | slow db query meta key |
| #8923 | Flamix: Bitrix24 and WooCommerce Orders integration | 39 | 81 | 31 | 500 | | | Output is not escaped |
| #8924 | Flex Import | 39 | 15 | 132 | 500 | | | Non-prefixed global variable |
| #8925 | Flockler – Social Media Embeds for WordPress | 97 | 3 | 6 | 500 | | | Missing Version |
| #8926 | Footer Copyright | 98 | 1 | 2 | 500 | | | outdated tested upto header |
| #8927 | JavaScript to Footer | 97 | 5 | 0 | 500 | | | Missing direct file access protection |
| #8928 | Force Admin Color Scheme | 99 | 1 | 1 | 500 | | | outdated tested upto header |
| #8929 | Force Plugin Updates Check | 92 | 5 | 5 | 500 | | | trademarked term |
| #8930 | فرم ساز فرم افزار | 94 | 8 | 9 | 500 | | | Non Enqueued Script |
| #8931 | Freetobook Responsive Widget | 73 | 5 | 14 | 500 | | | Input is not sanitized |
| #8932 | Friends Link Widget | 49 | 86 | 1 | 500 | | | Output is not escaped |
| #8933 | Front-end Editor | 38 | 78 | 62 | 500 | | | Output is not escaped |
| #8934 | FrontBlocks for Gutenberg/GeneratePress | 35 | 10 | 7 | 500 | | | Offloaded Content |
| #8935 | Frontend Dashboard | 21 | 384 | 945 | 500 | | | Non-prefixed function |
| #8936 | Fusion Page Builder : Extension – Image | 98 | 4 | 2 | 500 | | | Missing direct file access protection |
| #8937 | g-FFL Cockpit | 35 | 18 | 224 | 500 | | | Direct Query |
| #8938 | Gallery in columns | 97 | 3 | 5 | 500 | | | Missing Version |
| #8939 | Gallery Styles | 99 | 1 | 2 | 500 | | | Not In Footer |
| #8940 | Gallery Widget | 39 | 122 | 11 | 500 | | | Output is not escaped |
| #8941 | GamiPress – Multimedia Content | 49 | 11 | 25 | 500 | | | Nonce verification recommended |
| #8942 | Generate Security.txt | 99 | 1 | 5 | 500 | | | Non-prefixed class |
| #8943 | Generic Elements | 88 | 1,922 | 140 | 500 | | | Text Domain Mismatch |
| #8944 | Genesis Accessible | 62 | 49 | 17 | 500 | | | Text Domain Mismatch |
| #8945 | Geo to Lat | 97 | 3 | 11 | 500 | | | Direct Query |
| #8946 | Get Cash | 40 | 84 | 49 | 500 | | | Non Singular String Literal Domain |
| #8947 | Real Time Validation For Gravity Forms | 99 | 41 | 1 | 500 | | | Text Domain Mismatch |
| #8948 | GlotPress | 32 | 403 | 103 | 500 | | | Unsafe printing function |
| #8949 | GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites | 26 | 286 | 216 | 500 | | | badly named files |
| #8950 | Gravity Forms IBAN | 94 | 7 | 21 | 500 | | | Non-prefixed function |