| #8951 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #8952 | Disable WordPress Update Notifications and auto-update Email Notifications | 91 | 2 | 12 | 10k+ | | | Nonce verification recommended |
| #8953 | Hide Admin Bar from Non-Admins | 98 | 3 | 1 | 10k+ | | | Missing direct file access protection |
| #8954 | Groups | 35 | 1 | 1 | 10k+ | | | Hidden files included |
| #8955 | FakerPress | 53 | 66 | 152 | 10k+ | | | Non-prefixed global variable |
| #8956 | PhastPress | 29 | 95 | 52 | 10k+ | | | Exception output is not escaped |
| #8957 | WP Debugging | 99 | 1 | 5 | 10k+ | | | trademarked term |
| #8958 | Breadcrumbs Divi Module | 67 | 44 | 38 | 10k+ | | | Text Domain Mismatch |
| #8959 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | | | Output is not escaped |
| #8960 | Essential Widgets | 99 | | 3 | 10k+ | | | Non-prefixed function |
| #8961 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | | | Non Singular String Literal Domain |
| #8962 | Hide Shipping Method For WooCommerce | 24 | 946 | 1,447 | 10k+ | | | Non-prefixed global variable |
| #8963 | Database Reset | 98 | 14 | 3 | 10k+ | | | Missing direct file access protection |
| #8964 | Easy Twitter Feed Widget Plugin | 65 | 90 | 15 | 10k+ | | | Text Domain Mismatch |
| #8965 | Post Types Unlimited | 72 | 45 | 7 | 10k+ | | | Missing Translators Comment |
| #8966 | wp-jalali | 32 | 219 | 66 | 10k+ | | | Text Domain Mismatch |
| #8967 | Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery | 35 | 50 | 199 | 10k+ | | | Non-prefixed global variable |
| #8968 | Enlighter – Customizable Syntax Highlighter | 35 | 50 | 10 | 10k+ | | | Output is not escaped |
| #8969 | SEO Redirection Plugin – 301 Redirect Manager | 23 | 272 | 727 | 10k+ | | | Non-prefixed global variable |
| #8970 | Open Graph | 95 | 74 | 8 | 10k+ | | | wp function not compatible with requires wp |
| #8971 | Instant Back/Forward | 98 | 1 | 5 | 10k+ | | | Non-prefixed hook name |
| #8972 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #8973 | Menu Duplicator | 83 | 2 | 9 | 10k+ | | | Non-prefixed constant |
| #8974 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | | | trademarked term |
| #8975 | SMK Sidebar Generator | 64 | 19 | 5 | 10k+ | | | Output is not escaped |
| #8976 | Breadcrumb Trail | 89 | 6 | 4 | 10k+ | | | Non-prefixed hook name |
| #8977 | GravityExport Lite for Gravity Forms | 67 | 48 | 14 | 10k+ | | | Output is not escaped |
| #8978 | TinyMCE Clear Float | 97 | 2 | 4 | 10k+ | | | Missing direct file access protection |
| #8979 | QODE Wishlist for WooCommerce | 89 | 2 | 178 | 10k+ | | | Non-prefixed global variable |
| #8980 | Product Variations Swatches for WooCommerce | 67 | 8 | 136 | 10k+ | | | Non-prefixed global variable |
| #8981 | Protect WP Admin | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #8982 | SendWP | 37 | 47 | 42 | 10k+ | | | Output is not escaped |
| #8983 | Media Library Helper — Bulk edit image ALT, caption & description | 61 | 16 | 70 | 10k+ | | | Non-prefixed global variable |
| #8984 | Honeypot Anti-Spam | 78 | 5 | 7 | 10k+ | | | Missing nonce verification |
| #8985 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | | | Output is not escaped |
| #8986 | Contact Form 7 Shortcode Enabler | 92 | 4 | 3 | 10k+ | | | trademarked term |
| #8987 | WPS Visitor Counter | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #8988 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #8989 | Shapely Companion | 38 | 49 | 39 | 10k+ | | | Output is not escaped |
| #8990 | Custom Product tabs for WooCommerce | 96 | 25 | 6 | 10k+ | | | wp function not compatible with requires wp |
| #8991 | Qode Essential Addons | 31 | 55 | 295 | 10k+ | | | Non-prefixed global variable |
| #8992 | Custom Icons for Elementor | 80 | 6 | 25 | 10k+ | | | Non-prefixed global variable |
| #8993 | FlatPM – Ad Manager, AdSense and Custom Code | 25 | 3,017 | 557 | 10k+ | | | Text Domain Mismatch |
| #8994 | Min Max Control – Min Max Quantity & Step Control for WooCommerce | 33 | 96 | 215 | 10k+ | | | Non-prefixed global variable |
| #8995 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | | | Exception output is not escaped |
| #8996 | Transbank Webpay | 27 | 198 | 211 | 10k+ | | | Non-prefixed global variable |
| #8997 | Pay for Payment for WooCommerce | 41 | 29 | 67 | 10k+ | | | Missing nonce verification |
| #8998 | Head Meta Data | 55 | 19 | 42 | 10k+ | | | Non-prefixed function |
| #8999 | Disable Author Archives | 96 | 1 | 2 | 10k+ | | | Nonce verification recommended |
| #9000 | Mime Types Plus | 98 | 1 | 12 | 10k+ | | | Non-prefixed global variable |