| #9001 | One Click SSL | 40 | 136 | 62 | 10k+ | | | Unsafe printing function |
| #9002 | Theme and plugin translation for Polylang (TTfP) | 40 | 102 | 62 | 10k+ | | | Text Domain Mismatch |
| #9003 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | | | Text Domain Mismatch |
| #9004 | Advanced Sidebar Menu | 94 | 5 | 117 | 10k+ | | | Non-prefixed hook name |
| #9005 | Catch Gallery | 82 | 1 | 35 | 10k+ | | | Non-prefixed hook name |
| #9006 | Ocean Posts Slider | 76 | 13 | 14 | 10k+ | | | Output is not escaped |
| #9007 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |
| #9008 | Minify HTML | 99 | 1 | 0 | 10k+ | | | outdated tested upto header |
| #9009 | Remove Yoast SEO Comments | 85 | 12 | 5 | 10k+ | | | wp function not compatible with requires wp |
| #9010 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | | | Non-prefixed hook name |
| #9011 | Social Share Icons & Social Share Buttons | 25 | 2,365 | 1,357 | 10k+ | | | Output is not escaped |
| #9012 | Shortcode for Current Date | 66 | 27 | 12 | 10k+ | | | Text Domain Mismatch |
| #9013 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | | | Non-prefixed global variable |
| #9014 | Child Theme Creator by Orbisius | 34 | 86 | 39 | 10k+ | | | Output is not escaped |
| #9015 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #9016 | Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 27 | 289 | 751 | 10k+ | | | Output is not escaped |
| #9017 | Meks Smart Author Widget | 72 | 24 | 0 | 10k+ | | | Output is not escaped |
| #9018 | Weblizar Pin It Button On Image Hover And Post | 100 | | 1 | 10k+ | | | trademarked term |
| #9019 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | | | Non-prefixed hook name |
| #9020 | NextMove Lite – Thank You Page for WooCommerce | 24 | 916 | 857 | 10k+ | | | Non-prefixed global variable |
| #9021 | Tabby Responsive Tabs | 60 | 16 | 5 | 10k+ | | | Output is not escaped |
| #9022 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | | | Missing Translators Comment |
| #9023 | Related Posts by Taxonomy | 35 | 131 | 97 | 10k+ | | | Output is not escaped |
| #9024 | OSM – OpenStreetMap | 37 | 130 | 64 | 10k+ | | | Output is not escaped |
| #9025 | Typing Effect | 97 | 7 | 5 | 10k+ | | | Text Domain Mismatch |
| #9026 | Grow for WordPress | 96 | 7 | 5 | 10k+ | | | trademarked term |
| #9027 | Elastic Email Sender | 96 | 121 | 4 | 10k+ | | | Text Domain Mismatch |
| #9028 | jQuery Pin It Button for Images | 38 | 129 | 36 | 10k+ | | | Output is not escaped |
| #9029 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #9030 | Reorder Posts – Quick Post Type and Page Ordering | 61 | 10 | 23 | 10k+ | | | Request data is not unslashed |
| #9031 | Clone Posts | 98 | 5 | 5 | 10k+ | | | Missing Arg Domain |
| #9032 | Shortcode Widget | 100 | | 0 | 10k+ | | | No open findings |
| #9033 | Term Management Tools | 43 | 9 | 26 | 10k+ | | | Non-prefixed hook name |
| #9034 | Catch Infinite Scroll | 87 | | 20 | 10k+ | | | Non-prefixed global variable |
| #9035 | Disable Bloat for WordPress & WooCommerce | 23 | 863 | 1,325 | 10k+ | | | Non-prefixed global variable |
| #9036 | Bulky – Bulk Edit Products for WooCommerce | 81 | 3 | 21 | 10k+ | | | Non-prefixed hook name |
| #9037 | Show IDs by DraftPress | 98 | 2 | 3 | 10k+ | | | Missing direct file access protection |
| #9038 | 10WebSocial | 28 | 584 | 185 | 10k+ | | | Unsafe printing function |
| #9039 | Simple Map | 35 | 10 | 1 | 10k+ | | | Output is not escaped |
| #9040 | Thank You Page for WooCommerce | 68 | 6 | 27 | 10k+ | | | Non-prefixed global variable |
| #9041 | No Self Ping | 93 | 2 | 0 | 10k+ | | | Setting is missing a sanitization callback |
| #9042 | Admin CSS MU | 64 | 30 | 582 | 10k+ | | | Non-prefixed global variable |
| #9043 | User Login History | 99 | 2 | 0 | 10k+ | | | Plugin Directory Write |
| #9044 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |
| #9045 | Easy Username Updater | 69 | 19 | 28 | 10k+ | | | Missing Arg Domain |
| #9046 | Delete Duplicate Posts | 47 | 9 | 50 | 10k+ | | | Direct Query |
| #9047 | Mega Elements – Addons for Elementor | 38 | 170 | 57 | 10k+ | | | Output is not escaped |
| #9048 | My WordPress Login Logo | 57 | 28 | 36 | 10k+ | | | Non-prefixed global variable |
| #9049 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #9050 | Breadcrumb – Breadcrumb for WooCommerce and Custom Post Types | 45 | 3 | 107 | 10k+ | | | Request data is not unslashed |