| #9151 | Gravity Forms CLI Add-On | 81 | 31 | 4 | 20k+ | | | Missing direct file access protection |
| #9152 | افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | 28 | 131 | 190 | 20k+ | | | Missing nonce verification |
| #9153 | Ansar Import – One Click Starter Sites – for Elementor & Themes | 48 | 27 | 116 | 10k+ | | | Non-prefixed global variable |
| #9154 | Granular Controls For Elementor | 47 | 56 | 4 | 10k+ | | | Output is not escaped |
| #9155 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | | | Non Singular String Literal Domain |
| #9156 | Simple Page Sidebars | 40 | 55 | 65 | 10k+ | | | Output is not escaped |
| #9157 | Amazon Pay for WooCommerce | 37 | 29 | 117 | 10k+ | | | Non-prefixed class |
| #9158 | Dashboard Welcome for Elementor | 94 | 1 | 2 | 20k+ | | | Non-prefixed class |
| #9159 | Flexy Breadcrumb | 38 | 241 | 13 | 20k+ | | | Output is not escaped |
| #9160 | Cloudways Site Manager | 91 | 14 | 7 | 20k+ | | | wp function not compatible with requires wp |
| #9161 | wp-Typography | 67 | 91 | 33 | 20k+ | | | Missing direct file access protection |
| #9162 | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 38 | 344 | 30 | 20k+ | | | Text Domain Mismatch |
| #9163 | Automattic For Agencies Client | 53 | 249 | 184 | 20k+ | | | Text Domain Mismatch |
| #9164 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | | Input is not validated |
| #9165 | WPS Cleaner | 30 | 430 | 491 | 20k+ | | | Output is not escaped |
| #9166 | UPI QR Code Payment Gateway for WooCommerce | 43 | 42 | 28 | 20k+ | | | Output is not escaped |
| #9167 | Event Tracking for Gravity Forms | 43 | 34 | 25 | 20k+ | | | rand mt rand |
| #9168 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #9169 | Multi Device Switcher | 98 | 2 | 9 | 20k+ | | | Non-prefixed function |
| #9170 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | | | Non-prefixed global variable |
| #9171 | Social Sharing Plugin – Social Warfare | 35 | 17 | 143 | 20k+ | | | Non-prefixed class |
| #9172 | Cookies for Comments | 39 | 22 | 29 | 20k+ | | | Input is not validated |
| #9173 | TrustedSite | 50 | 29 | 14 | 20k+ | | | Output is not escaped |
| #9174 | DSGVO All in one for WP | 24 | 75 | 1,637 | 20k+ | | | Non-prefixed global variable |
| #9175 | SmartCrawl SEO checker, analyzer & optimizer | 30 | 347 | 1,307 | 20k+ | | | Non-prefixed global variable |
| #9176 | Advanced WordPress Reset – Debug, Recover & Reset WP | 25 | 475 | 464 | 20k+ | | | Output is not escaped |
| #9177 | DreamHost Automated Migration | 62 | 15 | 23 | 20k+ | | | Output is not escaped |
| #9178 | External Thumbnail | 81 | 6 | 5 | 20k+ | | | Missing nonce verification |
| #9179 | Media Library Organizer – Folders, File Manager & Media Categories | 72 | 20 | 130 | 20k+ | | | Non-prefixed global variable |
| #9180 | Insights from Google PageSpeed | 32 | 414 | 475 | 20k+ | | | Text Domain Mismatch |
| #9181 | SEO Friendly Images | 39 | 292 | 20 | 20k+ | | | Output is not escaped |
| #9182 | Multiple Post Thumbnails | 53 | 25 | 18 | 20k+ | | | Output is not escaped |
| #9183 | Useful Blocks | 34 | 214 | 22 | 20k+ | | | Output is not escaped |
| #9184 | Hide Admin Menu | 55 | 18 | 27 | 20k+ | | | Non-prefixed function |
| #9185 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #9186 | Zoho Mail for WordPress | 46 | 29 | 48 | 20k+ | | | Request data is not unslashed |
| #9187 | Reusable Blocks Extended | 42 | 38 | 15 | 20k+ | | | Output is not escaped |
| #9188 | Add Category to Pages | 97 | 3 | 2 | 20k+ | | | Missing direct file access protection |
| #9189 | AccessibleWP – Accessibility Toolbar | 38 | 381 | 26 | 20k+ | | | Text Domain Mismatch |
| #9190 | Admin Custom Login | 43 | | 238 | 20k+ | | | Request data is not unslashed |
| #9191 | Flying Pages: Preload Pages for Faster Navigation & Improved User Experience | 47 | 21 | 21 | 20k+ | | | Missing direct file access protection |
| #9192 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #9193 | Dash Notifier | 73 | 12 | 6 | 20k+ | | | Heredoc Output Not Escaped |
| #9194 | Futurio Extra | 23 | 787 | 205 | 20k+ | | | Text Domain Mismatch |
| #9195 | LWS Cleaner | 38 | 81 | 129 | 20k+ | | | Direct Query |
| #9196 | LearnPress – Course Wishlist | 56 | 35 | 22 | 20k+ | | | Output is not escaped |
| #9197 | Accordions | 55 | 1 | 101 | 20k+ | | | slow db query meta query |
| #9198 | Image Photo Gallery Final Tiles Grid | 23 | 578 | 1,502 | 20k+ | | | Non-prefixed global variable |
| #9199 | Map Block for Google Maps | 35 | 6 | 5 | 20k+ | | | Hidden files included |
| #9200 | Attachment Pages Redirect | 99 | 1 | 0 | 20k+ | | | outdated tested upto header |