| #4701 | Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 25 | 4,019 | 1,265 | 2k+ | | | Text Domain Mismatch |
| #4702 | Landingi Landing Pages | 55 | 18 | 23 | 2k+ | | | Input is not sanitized |
| #4703 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | | | Output is not escaped |
| #4704 | ToneDen Shortcode | 98 | 3 | 0 | 2k+ | | | Missing direct file access protection |
| #4705 | Lazy Load for Comments | 99 | | 6 | 2k+ | | | Non-prefixed constant |
| #4706 | LeadBooster Chatbot by Pipedrive | 52 | 38 | 6 | 2k+ | | | Output is not escaped |
| #4707 | leadlovers for Elementor | 95 | 34 | 5 | 2k+ | | | Text Domain Mismatch |
| #4708 | LearnPress – bbPress Integration | 53 | 19 | 14 | 2k+ | | | Output is not escaped |
| #4709 | Cron Jobs | 62 | 21 | 33 | 2k+ | | | Nonce verification recommended |
| #4710 | Lemmony Companion | 95 | 13 | 5 | 2k+ | | | block api version too low |
| #4711 | Leyka | 21 | 257 | 3,446 | 2k+ | | | Request data is not unslashed |
| #4712 | LH Add Media From Url | 39 | 42 | 26 | 2k+ | | | Output is not escaped |
| #4713 | LH Force Lowercase URLs | 90 | 4 | 3 | 2k+ | | | Input is not validated or sanitized |
| #4714 | LifterLMS Labs | 55 | 51 | 8 | 2k+ | | | Output is not escaped |
| #4715 | Light Modal Block | 99 | 1 | 1 | 2k+ | | | Missing direct file access protection |
| #4716 | Light Views Counter – Fast, Scalable View Counter for High-Traffic Sites | 89 | 2 | 11 | 2k+ | | | Database parameter is not escaped |
| #4717 | Linker – URL shortener & track outbound link clicks | 43 | 17 | 17 | 2k+ | | | Output is not escaped |
| #4718 | LitCommerce: Multi-channel Selling Tool For WooCommerce | 92 | 4 | 3 | 2k+ | | | Missing direct file access protection |
| #4719 | Live News – Responsive News Ticker | 88 | 9 | 9 | 2k+ | | | Database parameter is not escaped |
| #4720 | Loan Calculator WP | 90 | 16 | 5 | 2k+ | | | Non Singular String Literal Text |
| #4721 | Log HTTP Requests | 35 | 7 | 18 | 2k+ | | | Interpolated SQL is not prepared |
| #4722 | Logbook | 40 | 33 | 59 | 2k+ | | | Nonce verification recommended |
| #4723 | Login Page Styler – Custom WordPress Login Page Customizer & Security | 35 | 125 | 168 | 2k+ | | | Missing Arg Domain |
| #4724 | Loginfy – Custom Login Page Customizer | 28 | 338 | 398 | 2k+ | | | Output is not escaped |
| #4725 | Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity | 31 | 122 | 131 | 2k+ | | | Output is not escaped |
| #4726 | Lucky Orange | 76 | 56 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #4727 | WPO365 | Mail Integration for Office 365 / Outlook | 40 | 59 | 27 | 2k+ | | | Output is not escaped |
| #4728 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 21 | 1,133 | 3,011 | 2k+ | | | Non-prefixed global variable |
| #4729 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #4730 | MailerSend – Official SMTP Integration | 40 | 39 | 25 | 2k+ | | | Unsafe printing function |
| #4731 | Mailster AmazonSES Integration | 60 | 52 | 25 | 2k+ | | | Missing Arg Domain |
| #4732 | MailUp for WordPress – Email and Newsletter Subscription Form | 33 | 251 | 100 | 2k+ | | | Text Domain Mismatch |
| #4733 | Maintenance mode for WooCommerce | 100 | | 0 | 2k+ | | | No open findings |
| #4734 | Make Disable Admin Email Verification Prompt| Aims Infosoft | 83 | 10 | 4 | 2k+ | | | Text Domain Mismatch |
| #4735 | Make Paths Relative | 95 | 74 | 1 | 2k+ | | | wp function not compatible with requires wp |
| #4736 | MakeITeasy Back To Top | 98 | 3 | 1 | 2k+ | | | Missing direct file access protection |
| #4737 | Markup by Attribute for WooCommerce | 39 | 46 | 102 | 2k+ | | | Direct Query |
| #4738 | Markup Markdown | 74 | 18 | 128 | 2k+ | | | Non-prefixed global variable |
| #4739 | matchHeight | 91 | 6 | 2 | 2k+ | | | Non-prefixed global variable |
| #4740 | MaxGalleria | 27 | 278 | 567 | 2k+ | | | Non-prefixed global variable |
| #4741 | MaxLimits – Increase Maximum Upload, Post & PHP Limits | 41 | 99 | 16 | 2k+ | | | Unsafe printing function |
| #4742 | MB Elementor Integration | 98 | 2 | 3 | 2k+ | | | Non-prefixed global variable |
| #4743 | MC4WP: WPML Integration | 91 | 7 | 9 | 2k+ | | | Missing direct file access protection |
| #4744 | Media Grid | 41 | 42 | 44 | 2k+ | | | Missing Arg Domain |
| #4745 | Media Slider for Photos Images Videos | 69 | 10 | 23 | 2k+ | | | Missing Version |
| #4746 | Max Mega Menu – StoreFront Integration | 81 | 12 | 2 | 2k+ | | | Text Domain Mismatch |
| #4747 | Meks Video Importer | 37 | 62 | 239 | 2k+ | | | Input is not sanitized |
| #4748 | Melapress Login Security | 31 | 69 | 278 | 2k+ | | | Non-prefixed global variable |
| #4749 | درگاه پرداخت بانک ملت ووکامرس | 28 | 61 | 130 | 2k+ | | | Request data is not unslashed |
| #4750 | MembershipWorks – Membership, Events & Directory | 40 | 41 | 29 | 2k+ | | | Output is not escaped |