| #9301 | WP Favicon | 68 | 25 | 9 | 500 | | | Non Singular String Literal Domain |
| #9302 | Add Google re captcha in WordPress Forms | 59 | 16 | 16 | 500 | | | Output is not escaped |
| #9303 | WP HTTP Compression | 95 | 5 | 6 | 500 | | | trademarked term |
| #9304 | WP Keyword Suggest | 40 | 29 | 41 | 500 | | | Non Singular String Literal Domain |
| #9305 | WP Link Preview | 84 | 4 | 9 | 500 | | | trademarked term |
| #9306 | WP Login Logo | 53 | 28 | 9 | 500 | | | Unsafe printing function |
| #9307 | WP Lorem ipsum | 41 | 37 | 29 | 500 | | | Unsafe printing function |
| #9308 | Lorem Ipsum Generator | 77 | 7 | 9 | 500 | | | Missing direct file access protection |
| #9309 | Lucky Wheel Giveaway | 96 | 3 | 27 | 500 | | | Non-prefixed constant |
| #9310 | WP Mail | 36 | 202 | 201 | 500 | | | Output is not escaped |
| #9311 | WP Mail SMTP SendGrid Edition | 38 | 102 | 19 | 500 | | | Text Domain Mismatch |
| #9312 | Rename WP Media Files Name | 99 | | 6 | 500 | | | Non-prefixed function |
| #9313 | WP PHP Console | 47 | 18 | 24 | 500 | | | Output is not escaped |
| #9314 | WP Plugin Info Card | 37 | 53 | 376 | 500 | | | Nonce verification recommended |
| #9315 | WP Print Friendly | 97 | 5 | 3 | 500 | | | trademarked term |
| #9316 | Require Login | 81 | 9 | 12 | 500 | | | Non-prefixed function |
| #9317 | WP Restaurant Price List | 30 | 295 | 95 | 500 | | | Text Domain Mismatch |
| #9318 | WP Search Suggest | 98 | 3 | 3 | 500 | | | trademarked term |
| #9319 | Peadig's Twitter Feed: Embedded Timeline WordPress Plugin | 53 | 37 | 6 | 500 | | | Output is not escaped |
| #9320 | Disable User Login | 89 | 1 | 20 | 500 | | | Direct Query |
| #9321 | WordPress Widgets Shortcode | 89 | 5 | 4 | 500 | | | trademarked term |
| #9322 | Social Share For WooCommerce | 76 | 85 | 23 | 500 | | | Text Domain Mismatch |
| #9323 | WPB Custom Tab Manager for WooCommerce – Add, Edit & Reorder Tabs | 42 | 95 | 32 | 500 | | | Output is not escaped |
| #9324 | Pay with PAYUNi | 77 | 9 | 13 | 500 | | | Input is not sanitized |
| #9325 | Image Widget by Angie Makes | 55 | 48 | 3 | 500 | | | Output is not escaped |
| #9326 | WPCasa Contact Form 7 | 88 | 4 | 5 | 500 | | | Output is not escaped |
| #9327 | WPCopyRights网站防复制插件 | 93 | 1 | 33 | 500 | | | Non-prefixed global variable |
| #9328 | wpDirAuth | 32 | 250 | 135 | 500 | | | wp function not compatible with requires wp |
| #9329 | wpShopGermany IT-RECHT KANZLEI | 36 | 37 | 47 | 500 | | | Input is not sanitized |
| #9330 | WPSSO Schema Product Metadata for WooCommerce | 60 | 33 | 23 | 500 | | | Missing Translators Comment |
| #9331 | WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 | 28 | 57 | 138 | 500 | | | Request data is not unslashed |
| #9332 | XT Variation Swatches for WooCommerce | 24 | 1,033 | 1,809 | 500 | | | Non-prefixed global variable |
| #9333 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | | | Text Domain Mismatch |
| #9334 | YOURLS Link Creator | 37 | 196 | 39 | 500 | | | Text Domain Mismatch |
| #9335 | Zoho Billing – Embed Payment Form | 57 | 22 | 10 | 500 | | | Output is not escaped |
| #9336 | Z | 39 | 84 | 69 | 500 | | | Output is not escaped |
| #9337 | Zotabox – 20+ Promotional Sales tools to boost your subscribers and sales | 94 | 12 | 8 | 500 | | | wp function not compatible with requires wp |
| #9338 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | | | Direct Query |
| #9339 | Absolute Addons For Elementor | 35 | 86 | 286 | 400 | | | Non-prefixed global variable |
| #9340 | Accordion Block Lite | 95 | 6 | 57 | 400 | | | Non-prefixed global variable |
| #9341 | Accordion Shortcode | 75 | 17 | 0 | 400 | | | Output is not escaped |
| #9342 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | | | Non-prefixed global variable |
| #9343 | ACF: Focal Point | 35 | 61 | 6 | 400 | | | Text Domain Mismatch |
| #9344 | Advanced Custom Fields: Price Field | 71 | 12 | 7 | 400 | | | Output is not escaped |
| #9345 | ACF to WP-API | 96 | 11 | 5 | 400 | | | wp function not compatible with requires wp |
| #9346 | ACF YouTube Picker | 85 | 82 | 7 | 400 | | | Text Domain Mismatch |
| #9347 | ACME Divi Modules | 32 | 573 | 35 | 400 | | | Text Domain Mismatch |
| #9348 | ActBlue Contributions | 98 | 2 | 3 | 400 | | | Missing direct file access protection |
| #9349 | Active Campaign & WPForms | 78 | 27 | 10 | 400 | | | Text Domain Mismatch |
| #9350 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | | | Output is not escaped |