| #9601 | GA Admin Taxonomy Search | 96 | 7 | 2 | 400 | | | Missing direct file access protection |
| #9602 | Gallery in columns | 97 | 3 | 5 | 400 | | | Missing Version |
| #9603 | GamiPress – Leaderboards Include/Exclude Users | 85 | 11 | 3 | 400 | | | Output is not escaped |
| #9604 | GamiPress – Reset User | 51 | 14 | 27 | 400 | | | Interpolated SQL is not prepared |
| #9605 | GamiPress – WooCommerce Points Per Purchase Total | 90 | 10 | 5 | 400 | | | trademarked term |
| #9606 | Geliver Akıllı Kargo Pazaryeri | 34 | 49 | 247 | 400 | | | Non-prefixed global variable |
| #9607 | Generate Security.txt | 99 | 1 | 5 | 400 | | | Non-prefixed class |
| #9608 | Easy Genesis Logo Uploader | 82 | 18 | 5 | 400 | | | Output is not escaped |
| #9609 | Get Chat App | 62 | 10 | 62 | 400 | | | Request data is not unslashed |
| #9610 | Get a Newsletter | 35 | 138 | 144 | 400 | | | Output is not escaped |
| #9611 | GetPaid > Item Inventory | 40 | 112 | 52 | 400 | | | Text Domain Mismatch |
| #9612 | Gravity Forms Confirmation Page List | 91 | 6 | 3 | 400 | | | Missing direct file access protection |
| #9613 | Location Add-on For Gravity Forms | 89 | 18 | 16 | 400 | | | Text Domain Mismatch |
| #9614 | WP Gravity Forms Zoho CRM and Bigin | 32 | 750 | 174 | 400 | | | Text Domain Mismatch |
| #9615 | Gifty | 75 | 38 | 7 | 400 | | | wp function not compatible with requires wp |
| #9616 | Gitium | 34 | 149 | 57 | 400 | | | Output is not escaped |
| #9617 | Simple Giveaways – Grow your business, email lists and traffic with contests | 25 | 956 | 2,384 | 400 | | | Non-prefixed global variable |
| #9618 | GHL Contact Form 7 Bridge – Send Contact Form 7 leads to GHL CRM | 94 | 6 | 17 | 400 | | | Non-prefixed global variable |
| #9619 | Good Old Twitter Feed Widget | 43 | 110 | 10 | 400 | | | Text Domain Mismatch |
| #9620 | Five Star Restaurant Reviews | 33 | 242 | 142 | 400 | | | Output is not escaped |
| #9621 | Per User Prompt for Google Authenticator | 43 | 8 | 52 | 400 | | | Nonce verification recommended |
| #9622 | Google SEO Pressor for Rich snippets | 36 | 51 | 160 | 400 | | | Missing nonce verification |
| #9623 | Comments – GraphComment | AI-Moderated Comment System | 33 | 191 | 177 | 400 | | | Unsafe printing function |
| #9624 | Gravity Forms Multi Currency | 74 | 6 | 12 | 400 | | | Output is not escaped |
| #9625 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | | | Non-prefixed global variable |
| #9626 | Consent Mode Banner | 85 | 3 | 7 | 400 | | | Missing Version |
| #9627 | GZSEO | 69 | 3 | 66 | 400 | | | Direct Query |
| #9628 | Hand Talk | 69 | 34 | 4 | 400 | | | Output is not escaped |
| #9629 | Header Promo – Show Top Bar Message or Call to Action | 40 | 472 | 45 | 400 | | | Output is not escaped |
| #9630 | Help Scout | 35 | 11 | 13 | 400 | | | Missing direct file access protection |
| #9631 | Hesabfa Accounting | 22 | 467 | 718 | 400 | | | Text Domain Mismatch |
| #9632 | Heureka | 22 | 557 | 254 | 400 | | | Exception output is not escaped |
| #9633 | Hide Broken Shortcodes | 99 | 1 | 3 | 400 | | | unexpected markdown file |
| #9634 | Hide My Dates | 41 | 50 | 11 | 400 | | | Unsafe printing function |
| #9635 | Hide Text Shortcode | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #9636 | Hide WordPress Version | 96 | 5 | 4 | 400 | | | trademarked term |
| #9637 | Hide My WP Lite | 39 | 24 | 62 | 400 | | | Nonce verification recommended |
| #9638 | hideShowPassword | 92 | 3 | 5 | 400 | | | trademarked term |
| #9639 | Hindi-To-Lat | 88 | 3 | 14 | 400 | | | Direct Query |
| #9640 | History Log by click5 | 22 | 675 | 1,290 | 400 | | | Direct Query |
| #9641 | Honeypot Toolkit | 32 | 155 | 770 | 400 | | | Missing nonce verification |
| #9642 | Host Header Injection Fix | 70 | 9 | 8 | 400 | | | Output is not escaped |
| #9643 | Humans TXT | 37 | 159 | 86 | 400 | | | Output is not escaped |
| #9644 | Iknow Extra | 82 | 6 | 5 | 400 | | | Missing direct file access protection |
| #9645 | Image Automatic Height Width | 97 | 6 | 0 | 400 | | | Missing direct file access protection |
| #9646 | Image Captcha For Gravity Forms | 80 | 20 | 10 | 400 | | | Text Domain Mismatch |
| #9647 | Image Sitemap | 63 | 11 | 14 | 400 | | | Output is not escaped |
| #9648 | Image Ticker Carousel | by Creavi | 87 | 2 | 17 | 400 | | | Nonce verification recommended |
| #9649 | ImgSEO – AI Image Alt Text Generator & Image SEO Tools | 31 | 1 | 677 | 400 | | | Direct Query |
| #9650 | Import from YML | 24 | 97 | 306 | 400 | | | Non-prefixed global variable |