| #9801 | Regen. Thumbs | 88 | 3 | 3 | 400 | | | Input is not sanitized |
| #9802 | Regiones de Chile para WooCommerce | 94 | 7 | 4 | 400 | | | trademarked term |
| #9803 | StyleAI | 94 | 1 | 4 | 400 | | | Missing nonce verification |
| #9804 | Remove Archive Label | 98 | 3 | 1 | 400 | | | Missing direct file access protection |
| #9805 | Remove Taxonomy Slug | 77 | 23 | 2 | 400 | | | Output is not escaped |
| #9806 | Remove WP Logo from Admin Bar | 98 | 2 | 3 | 400 | | | trademarked term |
| #9807 | Repeaterly – ACF Repeater, Flexible Content & Dynamic Tags for Elementor | 99 | | 7 | 400 | | | Dynamic hook name |
| #9808 | resmio button & widget | 37 | 99 | 36 | 400 | | | Text Domain Mismatch |
| #9809 | Responsive Image Widget | 49 | 43 | 0 | 400 | | | Output is not escaped |
| #9810 | Responsive Testimonials | 36 | 252 | 32 | 400 | | | Text Domain Mismatch |
| #9811 | Restaurant Food Menu by WP Darko – Drag & Drop Restaurant Menu Builder for WordPress | 73 | 1 | 68 | 400 | | | Non-prefixed global variable |
| #9812 | Advanced Datepicker – Restricts Date for Contact Form 7 | 72 | 228 | 11 | 400 | | | wp function not compatible with requires wp |
| #9813 | Reusable Blocks Admin Menu Option | 98 | 2 | 3 | 400 | | | Non-prefixed global variable |
| #9814 | Review Slider for WooCommerce | 33 | 160 | 422 | 400 | | | Non-prefixed global variable |
| #9815 | Review Stream | 56 | 41 | 42 | 400 | | | Non-prefixed global variable |
| #9816 | Risk Free Cash On Delivery (COD) – WooCommerce | 40 | 106 | 31 | 400 | | | Text Domain Mismatch |
| #9817 | Rollbar | 39 | 75 | 14 | 400 | | | Output is not escaped |
| #9818 | RSS Just Better | 42 | 136 | 2 | 400 | | | Output is not escaped |
| #9819 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #9820 | Russian Currency | 54 | 52 | 6 | 400 | | | Output is not escaped |
| #9821 | SaasPricing – Advanced Pricing & Comparison Tables for Elementor | 99 | 1 | 4 | 400 | | | Non-prefixed hook name |
| #9822 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #9823 | Invoice123 | 38 | 139 | 88 | 400 | | | Text Domain Mismatch |
| #9824 | Save and Continue Link Recovery for Gravity Forms | 85 | 16 | 5 | 400 | | | Text Domain Mismatch |
| #9825 | Schedule Content Block | 35 | 2 | 3 | 400 | | | Discouraged text-domain loading |
| #9826 | sCode (Easy Shortcodes) | 35 | 157 | 97 | 400 | | | Text Domain Mismatch |
| #9827 | Scroll Magic Addon for Elementor | 77 | 344 | 7 | 400 | | | Text Domain Mismatch |
| #9828 | Scrollbar | 59 | 7 | 22 | 400 | | | Missing nonce verification |
| #9829 | SeatReg | 21 | 312 | 1,637 | 400 | | | Missing nonce verification |
| #9830 | Second Street | 98 | 10 | 6 | 400 | | | Non Enqueued Script |
| #9831 | Section Collection – Add Ready-made Sections to Design Modern Websites | 100 | | 1 | 400 | | | mismatched plugin name |
| #9832 | Security-Protection | 51 | 5 | 32 | 400 | | | Missing nonce verification |
| #9833 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #9834 | Send email to customer on cancelled order in WooCommerce | 98 | 2 | 4 | 400 | | | trademarked term |
| #9835 | Send link to friend | 41 | 81 | 47 | 400 | | | Output is not escaped |
| #9836 | Sendy | 78 | 11 | 2 | 400 | | | Output is not escaped |
| #9837 | TrueRanker | 94 | 49 | 18 | 400 | | | wp function not compatible with requires wp |
| #9838 | Service Box Slider | 24 | 618 | 1,410 | 400 | | | Non-prefixed global variable |
| #9839 | Service Box | 41 | 150 | 230 | 400 | | | Missing nonce verification |
| #9840 | Serviceform Pixel | 40 | 18 | 22 | 400 | | | Output is not escaped |
| #9841 | Shamor | 53 | 55 | 12 | 400 | | | wp function not compatible with requires wp |
| #9842 | ShareLite: Zero-Bloat Social Sharing | 98 | 3 | 1 | 400 | | | Missing Translators Comment |
| #9843 | ShareThis Follow Buttons | 35 | 1 | 9 | 400 | | | Non-prefixed global variable |
| #9844 | Sheet2Site | 78 | 21 | 3 | 400 | | | Output is not escaped |
| #9845 | Shipit | 27 | 371 | 209 | 400 | | | Text Domain Mismatch |
| #9846 | Shipping by City for Woocommerce | 89 | 13 | 2 | 400 | | | Text Domain Mismatch |
| #9847 | ShopMagic for Google Sheets | 35 | 8 | 9 | 400 | | | Non-prefixed global variable |
| #9848 | SHOPVOTE | 35 | 64 | 58 | 400 | | | curl curl setopt |
| #9849 | Shortcode for OpenTable Widget | 98 | 3 | 2 | 400 | | | Missing direct file access protection |
| #9850 | Shortcodes in Sidebar | 98 | 4 | 0 | 400 | | | Missing direct file access protection |