| #1651 | Events Widgets For Elementor And The Events Calendar | 95 | | 4 | 10k+ | | | Non-prefixed class |
| #1652 | Export Import Menus | 46 | 23 | 28 | 10k+ | | | Missing nonce verification |
| #1653 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |
| #1654 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #1655 | Social LikeBox & Feed | 34 | 393 | 141 | 10k+ | | | Non Singular String Literal Domain |
| #1656 | Mongoose Page Plugin | 92 | 4 | 17 | 10k+ | | | Non-prefixed global variable |
| #1657 | FakerPress | 53 | 66 | 152 | 10k+ | | | Non-prefixed global variable |
| #1658 | Fathom Analytics for WP | 63 | 25 | 15 | 10k+ | | | Output is not escaped |
| #1659 | Favorites | 39 | 187 | 123 | 10k+ | | | Unsafe printing function |
| #1660 | Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations | 35 | 255 | 225 | 10k+ | | | Output is not escaped |
| #1661 | Featured Video Plus | 34 | 99 | 105 | 10k+ | | | Non-prefixed global variable |
| #1662 | File Manager | 53 | 41 | 68 | 10k+ | | | Missing direct file access protection |
| #1663 | Flash Toolkit | 34 | 158 | 242 | 10k+ | | | Non-prefixed global variable |
| #1664 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #1665 | Flexible Product Fields (WooCommerce Product Addons) – WooCommerce Product Page Editor | 67 | 57 | 98 | 10k+ | | | Non-prefixed global variable |
| #1666 | flowpaper | 59 | 13 | 31 | 10k+ | | | Non-prefixed function |
| #1667 | FluentAuth – The Ultimate Authorization & Security Plugin for WordPress | 34 | 44 | 229 | 10k+ | | | Nonce verification recommended |
| #1668 | Fluent Support – Helpdesk & Customer Support Ticket System | 26 | 92 | 272 | 10k+ | | | Direct Query |
| #1669 | WP OPcache | 88 | 6 | 25 | 10k+ | | | Non-prefixed global variable |
| #1670 | Forget Spam Comment | 67 | 5 | 10 | 10k+ | | | Input is not sanitized |
| #1671 | Form Input Masks For Elementor Forms | 35 | 3 | 1 | 10k+ | | | Hidden files included |
| #1672 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #1673 | Frontend Reset Password | 35 | 83 | 128 | 10k+ | | | Text Domain Mismatch |
| #1674 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | | | Non-prefixed global variable |
| #1675 | G Meta Keywords | 47 | 31 | 8 | 10k+ | | | Unsafe printing function |
| #1676 | Gallery Lightbox | 41 | 47 | 16 | 10k+ | | | Output is not escaped |
| #1677 | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 24 | 536 | 322 | 10k+ | | | Text Domain Mismatch |
| #1678 | Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery | 35 | 50 | 199 | 10k+ | | | Non-prefixed global variable |
| #1679 | GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | 23 | 3,590 | 2,771 | 10k+ | | | Output is not escaped |
| #1680 | GDPR | 77 | 39 | 121 | 10k+ | | | Non-prefixed global variable |
| #1681 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | | Short PHP open tag found |
| #1682 | Genesis Columns Advanced | 55 | 26 | 4 | 10k+ | | | Unsafe printing function |
| #1683 | Genesis Connect for WooCommerce | 96 | 45 | 17 | 10k+ | | | Text Domain Mismatch |
| #1684 | Genesis Custom Blocks | 90 | 7 | 22 | 10k+ | | | Non-prefixed function |
| #1685 | Genesis Simple Share | 98 | 3 | 0 | 10k+ | | | Missing direct file access protection |
| #1686 | Genesis Simple Sidebars | 35 | 9 | 51 | 10k+ | | | Nonce verification recommended |
| #1687 | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 22 | 4,465 | 3,974 | 10k+ | | | Output is not escaped |
| #1688 | GravityExport Lite for Gravity Forms | 67 | 48 | 14 | 10k+ | | | Output is not escaped |
| #1689 | Multiple Columns for Gravity Forms | 90 | 11 | 7 | 10k+ | | | Missing direct file access protection |
| #1690 | Gmail SMTP | 37 | 85 | 71 | 10k+ | | | Unsafe printing function |
| #1691 | Gmap Block | 99 | 1 | 0 | 10k+ | | | outdated tested upto header |
| #1692 | Maps Plugin using Google Maps for WordPress – WP Google Map | 48 | 289 | 38 | 10k+ | | | wp function not compatible with requires wp |
| #1693 | Goftino | 45 | 16 | 20 | 10k+ | | | Output is not escaped |
| #1694 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | | Non Singular String Literal Domain |
| #1695 | Login for Google Apps | 27 | 139 | 85 | 10k+ | | | Exception output is not escaped |
| #1696 | Google Tag Manager | 98 | 7 | 4 | 10k+ | | | wp function not compatible with requires wp |
| #1697 | AI Puffer – Chat. Create. Automate. (formerly AI Power) | 100 | | 0 | 10k+ | | | No open findings |
| #1698 | Granular Controls For Elementor | 47 | 56 | 4 | 10k+ | | | Output is not escaped |
| #1699 | Graphina – Charts and Graphs For Elementor | 39 | 1,910 | 113 | 10k+ | | | Text Domain Mismatch |
| #1700 | Gravity Forms + Custom Post Types | 54 | 44 | 7 | 10k+ | | | Output is not escaped |