| #8901 | Link Juice Keeper | 91 | 4 | 36 | 10k+ | | | Non-prefixed hook name |
| #8902 | QODE Quick View for WooCommerce | 90 | 2 | 98 | 10k+ | | | Non-prefixed global variable |
| #8903 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | | Output is not escaped |
| #8904 | WP REST Cache | 64 | 11 | 113 | 10k+ | | | Direct Query |
| #8905 | Omnibus — show the lowest price | 41 | 35 | 37 | 10k+ | | | Output is not escaped |
| #8906 | Gravity Forms + Custom Post Types | 54 | 44 | 7 | 10k+ | | | Output is not escaped |
| #8907 | Meks Easy Social Share | 64 | 26 | 3 | 10k+ | | | Output is not escaped |
| #8908 | WP-Memory-Usage | 89 | 4 | 9 | 10k+ | | | Interpolated SQL is not prepared |
| #8909 | Videopack | 58 | 28 | 108 | 10k+ | | | Input is not sanitized |
| #8910 | Team – Team Members Showcase Plugin | 60 | 12 | 781 | 10k+ | | | Non-prefixed global variable |
| #8911 | Catch Web Tools | 100 | | 0 | 10k+ | | | No open findings |
| #8912 | Counter Number Showcase, Fun Facts – WordPress Animated Counter Plugin | 31 | 255 | 170 | 10k+ | | | Non Singular String Literal Domain |
| #8913 | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 24 | 599 | 1,532 | 10k+ | | | Non-prefixed global variable |
| #8914 | Bogo | 39 | 30 | 139 | 10k+ | | | Request data is not unslashed |
| #8915 | WP No Base Permalink | 71 | 8 | 10 | 10k+ | | | Unsafe printing function |
| #8916 | ARI Fancy Lightbox – Popup for WordPress | 62 | 8 | 107 | 10k+ | | | Non-prefixed namespace |
| #8917 | Remove CPT base | 58 | 15 | 16 | 10k+ | | | Input is not sanitized |
| #8918 | Google Tag Manager | 98 | 7 | 4 | 10k+ | | | wp function not compatible with requires wp |
| #8919 | Rewrite Rules Inspector | 58 | 7 | 59 | 10k+ | | | Nonce verification recommended |
| #8920 | Controlled Admin Access | 41 | 22 | 40 | 10k+ | | | Nonce verification recommended |
| #8921 | Seo Optimized Images | 25 | 526 | 1,316 | 10k+ | | | Non-prefixed global variable |
| #8922 | Conditional Payments for WooCommerce | 36 | 292 | 184 | 10k+ | | | Text Domain Mismatch |
| #8923 | WP Accessibility Helper (WAH) | 38 | 61 | 88 | 10k+ | | | Missing direct file access protection |
| #8924 | Meks Easy Ads Widget | 73 | 21 | 9 | 10k+ | | | Output is not escaped |
| #8925 | ShiftNav – Responsive Mobile Menu | 38 | 249 | 35 | 10k+ | | | Text Domain Mismatch |
| #8926 | Successful Redirection for Contact Form | 49 | 33 | 20 | 10k+ | | | Text Domain Mismatch |
| #8927 | WPGet API – Connect to any external REST API | 89 | 15 | 19 | 10k+ | | | Missing direct file access protection |
| #8928 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | | | Unsafe printing function |
| #8929 | CartBounty – Save and recover abandoned carts for WooCommerce | 33 | 370 | 399 | 10k+ | | | Output is not escaped |
| #8930 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | | | Output is not escaped |
| #8931 | Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads | 77 | 17 | 1 | 10k+ | | | Exception output is not escaped |
| #8932 | Web Accessibility by accessiBe | 72 | 1 | 25 | 10k+ | | | Input is not sanitized |
| #8933 | Disable Embeds | 99 | 2 | 0 | 10k+ | | | Missing direct file access protection |
| #8934 | tarteaucitron.io | 41 | 44 | 92 | 10k+ | | | Output is not escaped |
| #8935 | Scriptless Social Sharing | 88 | 8 | 9 | 10k+ | | | Missing direct file access protection |
| #8936 | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 22 | 919 | 1,230 | 10k+ | | | Output is not escaped |
| #8937 | Animations for Blocks | 99 | 1 | 0 | 10k+ | | | plugin header no license |
| #8938 | Social LikeBox & Feed | 34 | 393 | 141 | 10k+ | | | Non Singular String Literal Domain |
| #8939 | WP OPcache | 88 | 6 | 25 | 10k+ | | | Non-prefixed global variable |
| #8940 | Bulk Post Update Date | 36 | 96 | 66 | 10k+ | | | Unsafe printing function |
| #8941 | WP Limit Login Attempts | 39 | 26 | 67 | 10k+ | | | Direct Query |
| #8942 | Responsive Pricing Table | 38 | 309 | 105 | 10k+ | | | Non Singular String Literal Domain |
| #8943 | Pdf Embed | 93 | 4 | 4 | 10k+ | | | Non-prefixed global variable |
| #8944 | Elements For Elementor | 74 | 39 | 37 | 10k+ | | | Non-prefixed global variable |
| #8945 | Maps Plugin using Google Maps for WordPress – WP Google Map | 48 | 289 | 38 | 10k+ | | | wp function not compatible with requires wp |
| #8946 | WP101 Video Tutorial Plugin | 86 | 15 | 18 | 10k+ | | | Missing direct file access protection |
| #8947 | Disable "BIG Image" Threshold | 98 | 3 | 1 | 10k+ | | | Missing direct file access protection |
| #8948 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | | Output is not escaped |
| #8949 | Admin Menu Tree Page View | 43 | 17 | 69 | 10k+ | | | Nonce verification recommended |
| #8950 | Bold Timeline Lite | 71 | 220 | 561 | 10k+ | | | Non-prefixed global variable |