| #9101 | Widget Disable | 46 | 19 | 19 | 10k+ | | | Output is not escaped |
| #9102 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #9103 | Cookies and Content Security Policy | 35 | 261 | 412 | 10k+ | | | Output is not escaped |
| #9104 | XServer Migrator | 35 | 39 | 53 | 10k+ | | | Interpolated SQL is not prepared |
| #9105 | Import Users from CSV | 47 | 33 | 12 | 10k+ | | | Unsafe printing function |
| #9106 | Lenix Leads Collector | 34 | 414 | 242 | 10k+ | | | Text Domain Mismatch |
| #9107 | Visual Term Description Editor | 82 | 11 | 5 | 10k+ | | | Missing Arg Domain |
| #9108 | Bulk Page Creator | 62 | 9 | 17 | 10k+ | | | Request data is not unslashed |
| #9109 | Central Color Palette | 41 | 73 | 33 | 10k+ | | | Output is not escaped |
| #9110 | ShareThis Share Buttons | 98 | | 29 | 10k+ | | | Non-prefixed global variable |
| #9111 | One Stop Shop for WooCommerce | 68 | 23 | 83 | 10k+ | | | Input is not sanitized |
| #9112 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | | | Output is not escaped |
| #9113 | Icegram Engage – Popups, Optins, CTAs & Lead Generation | 91 | 14 | 10 | 10k+ | | | wp function not compatible with requires wp |
| #9114 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #9115 | Preloader | 100 | | 0 | 10k+ | | | No open findings |
| #9116 | Core Framework | 35 | 70 | 62 | 10k+ | | | Text Domain Mismatch |
| #9117 | Post Grid Addon for Elementor | 74 | 16 | 13 | 10k+ | | | Missing direct file access protection |
| #9118 | Lazy Load | 98 | 4 | 0 | 10k+ | | | Missing direct file access protection |
| #9119 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |
| #9120 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #9121 | Video Conferencing with Zoom | 24 | 1,105 | 440 | 10k+ | | | Unsafe printing function |
| #9122 | Ad Invalid Click Protector (AICP) | 39 | 78 | 57 | 10k+ | | | Text Domain Mismatch |
| #9123 | Related Posts for WordPress | 35 | 207 | 180 | 10k+ | | | Output is not escaped |
| #9124 | Inactive Logout | 64 | 30 | 71 | 10k+ | | | Non-prefixed global variable |
| #9125 | Custom Login | 42 | 36 | 116 | 10k+ | | | Non-prefixed global variable |
| #9126 | ACF Options For Polylang | 94 | 9 | 23 | 10k+ | | | Non-prefixed constant |
| #9127 | Video Popup – Video Lightbox for YouTube, Vimeo & MP4 | 100 | | 0 | 10k+ | | | No open findings |
| #9128 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #9129 | Social Media Feather | 99 | | 4 | 10k+ | | | Non-prefixed constant |
| #9130 | Meks Easy Photo Feed Widget | 39 | 77 | 27 | 10k+ | | | Output is not escaped |
| #9131 | Soumettre.fr | 39 | 130 | 26 | 10k+ | | | Text Domain Mismatch |
| #9132 | Top Bar | 42 | 75 | 11 | 10k+ | | | Output is not escaped |
| #9133 | Restricted Site Access | 91 | 14 | 11 | 10k+ | | | Missing Arg Domain |
| #9134 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #9135 | Disable Right Click For WP | 61 | 15 | 12 | 10k+ | | | Missing nonce verification |
| #9136 | Core Rollback | 93 | 5 | 2 | 10k+ | | | wp function not compatible with requires wp |
| #9137 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | | | Output is not escaped |
| #9138 | Web Worker Offloading | 99 | | 2 | 10k+ | | | Non-prefixed constant |
| #9139 | Login With Ajax – Fast Logins, 2FA, Redirects | 23 | 623 | 520 | 10k+ | | | Output is not escaped |
| #9140 | Unique Headers | 97 | 12 | 6 | 10k+ | | | Missing Translators Comment |
| #9141 | Coming Soon & Maintenance Mode Page & Under Construction | 78 | 35 | 67 | 10k+ | | | Non-prefixed global variable |
| #9142 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | | | Non-prefixed hook name |
| #9143 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #9144 | WP Image Zoom | 67 | 30 | 46 | 10k+ | | | Non-prefixed global variable |
| #9145 | Throws SPAM Away | 34 | 327 | 123 | 10k+ | | | Missing Arg Domain |
| #9146 | Disable Blog | 93 | 2 | 22 | 10k+ | | | Non-prefixed global variable |
| #9147 | LWS Tools | 31 | 104 | 134 | 10k+ | | | Request data is not unslashed |
| #9148 | EasyTest – Simplify A/B Testing | 35 | 9 | 76 | 10k+ | | | Non-prefixed global variable |
| #9149 | SEO Ultimate | 24 | 437 | 269 | 10k+ | | | Output is not escaped |
| #9150 | Simple Taxonomy Ordering | 75 | 7 | 10 | 10k+ | | | Direct Query |