| #1851 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,934 | 5,248 | 10k+ | | | Non-prefixed hook name |
| #1852 | Pantheon Advanced Page Cache | 91 | 10 | 6 | 10k+ | | | Request data is not unslashed |
| #1853 | Parent Category Toggler | 91 | 6 | 0 | 10k+ | | | Missing direct file access protection |
| #1854 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #1855 | Pdf Embed | 93 | 4 | 4 | 10k+ | | | Non-prefixed global variable |
| #1856 | PDF Viewer Block for Gutenberg | 95 | 39 | 3 | 10k+ | | | badly named files |
| #1857 | PDF viewer for Elementor & Gutenberg | 73 | 14 | 12 | 10k+ | | | Nonce verification recommended |
| #1858 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #1859 | PhonePe Payment Solutions | 34 | 77 | 106 | 10k+ | | | Missing direct file access protection |
| #1860 | Photonic Gallery & Lightbox for Flickr, SmugMug & Others | 36 | 180 | 117 | 10k+ | | | Missing Translators Comment |
| #1861 | Weblizar Pin It Button On Image Hover And Post | 100 | | 1 | 10k+ | | | trademarked term |
| #1862 | Plausible Analytics | 35 | 244 | 61 | 10k+ | | | Exception output is not escaped |
| #1863 | Plugin Check (PCP) | 0 | 128 | 132 | 10k+ | | | Exception output is not escaped |
| #1864 | Plugin Organizer | 33 | 325 | 257 | 10k+ | | | Output is not escaped |
| #1865 | Plugins Garbage Collector (Database Cleanup) | 36 | 32 | 51 | 10k+ | | | Missing nonce verification |
| #1866 | PNG to JPG | 37 | 130 | 173 | 10k+ | | | Interpolated SQL is not prepared |
| #1867 | Podcast Player – Your Podcasting Companion | 46 | 14 | 133 | 10k+ | | | Non-prefixed global variable |
| #1868 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #1869 | Smart Popup by Supsystic | 22 | 3,172 | 503 | 10k+ | | | Non Singular String Literal Domain |
| #1870 | Popup Trigger URL for Elementor Pro | 86 | 2 | 4 | 10k+ | | | Nonce verification recommended |
| #1871 | PowerFolio – Portfolio & Image Gallery for Elementor | 97 | 10 | 12 | 10k+ | | | Non-prefixed hook name |
| #1872 | Post Grid Addon for Elementor | 74 | 16 | 13 | 10k+ | | | Missing direct file access protection |
| #1873 | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 24 | 599 | 1,532 | 10k+ | | | Non-prefixed global variable |
| #1874 | Post to Google My Business (Google Business Profile) | 23 | 845 | 1,452 | 10k+ | | | Non-prefixed global variable |
| #1875 | Post Types Unlimited | 72 | 45 | 7 | 10k+ | | | Missing Translators Comment |
| #1876 | Postie | 23 | 408 | 259 | 10k+ | | | Output is not escaped |
| #1877 | Posts in Page | 95 | 10 | 12 | 10k+ | | | date date |
| #1878 | Posts 2 Posts | 41 | 42 | 73 | 10k+ | | | Non Singular String Literal Domain |
| #1879 | Powerkit – Supercharge your WordPress Site | 61 | 67 | 116 | 10k+ | | | Non-prefixed global variable |
| #1880 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | | | Missing Translators Comment |
| #1881 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #1882 | Prevent Browser Caching | 90 | 2 | 18 | 10k+ | | | Non-prefixed hook name |
| #1883 | Prevent Direct Access – Protect WordPress Files | 96 | 4 | 26 | 10k+ | | | Non-prefixed constant |
| #1884 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #1885 | Prime Mover – Migrate WordPress Website & Backups | 22 | 1,326 | 1,600 | 10k+ | | | Non-prefixed global variable |
| #1886 | Printify for WooCommerce | 99 | 2 | 3 | 10k+ | | | Missing direct file access protection |
| #1887 | Product Enquiry for WooCommerce (Now with AI Assistant) | 86 | 6 | 146 | 10k+ | | | Non-prefixed global variable |
| #1888 | WP All Export – Product Export Add-On for WooCommerce | 90 | 14 | 26 | 10k+ | | | Non-prefixed hook name |
| #1889 | Product Variations Swatches for WooCommerce | 67 | 8 | 136 | 10k+ | | | Non-prefixed global variable |
| #1890 | Product Video Gallery for Woocommerce | 40 | 61 | 36 | 10k+ | | | Setting is missing a sanitization callback |
| #1891 | Protect WP Admin | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #1892 | Public Post Preview Configurator | 84 | 14 | 6 | 10k+ | | | Non Singular String Literal Domain |
| #1893 | Pure Metafields | 53 | 5 | 130 | 10k+ | | | Non-prefixed global variable |
| #1894 | Qode Essential Addons | 31 | 55 | 295 | 10k+ | | | Non-prefixed global variable |
| #1895 | QODE Quick View for WooCommerce | 90 | 2 | 98 | 10k+ | | | Non-prefixed global variable |
| #1896 | QODE Wishlist for WooCommerce | 89 | 2 | 178 | 10k+ | | | Non-prefixed global variable |
| #1897 | QuadMenu – Mega Menu | 25 | 2,128 | 455 | 10k+ | | | Output is not escaped |
| #1898 | Quick and Easy FAQs | 71 | 92 | 9 | 10k+ | | | Non Singular String Literal Domain |
| #1899 | Quttera ThreatSign – Web Malware Scanner for WordPress | 25 | 334 | 471 | 10k+ | | | Non-prefixed global variable |
| #1900 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | | | Output is not escaped |