| #8351 | Manual Image Crop | 40 | 178 | 61 | 8k+ | | | Output is not escaped |
| #8352 | Rename wp-admin login | 42 | 23 | 38 | 8k+ | | | Output is not escaped |
| #8353 | Business Hours Indicator | 35 | 139 | 106 | 8k+ | | | Alternative PHP tag found |
| #8354 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #8355 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 633 | 8k+ | | | Non-prefixed constant |
| #8356 | Radius Portfolio – Filterable Grid, Gallery & Slider Portfolio | 98 | 1 | 14 | 8k+ | | | Non-prefixed class |
| #8357 | Erident Custom Login and Dashboard | 38 | 122 | 28 | 8k+ | | | Unsafe printing function |
| #8358 | LiveJournal Importer | 37 | 86 | 67 | 8k+ | | | Output is not escaped |
| #8359 | Remove Uppercase Accents | 52 | 41 | 2 | 8k+ | | | Unsafe printing function |
| #8360 | My Simple Space | 73 | 21 | 3 | 8k+ | | | Output is not escaped |
| #8361 | Mailster WordPress Newsletter Plugin | 69 | 14 | 11 | 8k+ | | | Output is not escaped |
| #8362 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | | | Unsafe printing function |
| #8363 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | | | Request data is not unslashed |
| #8364 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #8365 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #8366 | HootKit | 28 | 429 | 1,295 | 8k+ | | | Non-prefixed global variable |
| #8367 | Blaze Demo Importer | 36 | 101 | 94 | 8k+ | | | Output is not escaped |
| #8368 | ElasticPress | 81 | 13 | 655 | 8k+ | | | Non-prefixed hook name |
| #8369 | Cash On Pickup for WooCommerce | 98 | 16 | 4 | 8k+ | | | Text Domain Mismatch |
| #8370 | Custom Payment Gateway for WooCommerce | 35 | 11 | 12 | 8k+ | | | Missing nonce verification |
| #8371 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | | | Output is not escaped |
| #8372 | SteadFast API | 80 | 2 | 23 | 8k+ | | | Non-prefixed global variable |
| #8373 | Bricks Navigator | 94 | 1 | 5 | 8k+ | | | Nonce verification recommended |
| #8374 | reCAPTCHA in WP comments form | 31 | 264 | 60 | 8k+ | | | Output is not escaped |
| #8375 | Classic Menu Block | 97 | 5 | 0 | 8k+ | | | Missing direct file access protection |
| #8376 | Ajax Cart AutoUpdate for WooCommerce | 76 | 15 | 5 | 8k+ | | | Output is not escaped |
| #8377 | Login IP & Country Restriction | 100 | 1 | 1 | 8k+ | | | textdomain mismatch |
| #8378 | Autocomplete Address for WooCommerce | 97 | 4 | 1 | 8k+ | | | Non-prefixed hook name |
| #8379 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | | | Exception output is not escaped |
| #8380 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #8381 | GSheetConnector For WPForms – WPForms Google Sheets Integration (Real-Time Sync) | 32 | 120 | 145 | 8k+ | | | Non-prefixed global variable |
| #8382 | User Roles and Capabilities | 36 | 227 | 132 | 8k+ | | | Output is not escaped |
| #8383 | SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster | 84 | 9 | 17 | 8k+ | | | Non-prefixed class |
| #8384 | PixCodes | 94 | | 216 | 8k+ | | | Non-prefixed global variable |
| #8385 | Easy Footnotes | 96 | 6 | 22 | 8k+ | | | Non-prefixed global variable |
| #8386 | Image Regenerate & Select Crop | 99 | 3 | 1 | 8k+ | | | wp function not compatible with requires wp |
| #8387 | Cimo – Free Instant Image Optimizer & WebP Converter | 90 | 6 | 4 | 9k+ | | | Missing Translators Comment |
| #8388 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | | | Non-prefixed global variable |
| #8389 | Horizontal scrolling announcements | 37 | 215 | 140 | 8k+ | | | Output is not escaped |
| #8390 | Prisna GWT – Google Website Translator | 39 | 117 | 77 | 8k+ | | | Text Domain Mismatch |
| #8391 | Fonts | 80 | 8 | 5 | 8k+ | | | Output is not escaped |
| #8392 | WPForce Logout – WordPress User Login Logout Management Plugin | 37 | 567 | 32 | 8k+ | | | Output is not escaped |
| #8393 | URL Params | 46 | 36 | 17 | 8k+ | | | Text Domain Mismatch |
| #8394 | TJ Custom CSS | 69 | 18 | 10 | 8k+ | | | Output is not escaped |
| #8395 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | | | Text Domain Mismatch |
| #8396 | Blockskit | 54 | 33 | 29 | 8k+ | | | Text Domain Mismatch |
| #8397 | Fix Another Update In Progress | 80 | 7 | 1 | 8k+ | | | Output is not escaped |
| #8398 | Hyper Cache | 45 | 36 | 100 | 8k+ | | | Non-prefixed global variable |
| #8399 | WP Remove Category Base | 95 | 1 | 4 | 8k+ | | | trademarked term |
| #8400 | Longer Permalinks | 57 | 27 | 21 | 8k+ | | | Missing Arg Domain |