| #9201 | Action Scheduler | 38 | 92 | 134 | 20k+ | | | Exception output is not escaped |
| #9202 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #9203 | AI Provider for OpenAI | 76 | 15 | 1 | 30k+ | | | Exception output is not escaped |
| #9204 | Editorial Calendar | 35 | 127 | 160 | 20k+ | | | Output is not escaped |
| #9205 | Visual Form Builder | 34 | 82 | 329 | 20k+ | | | Direct Query |
| #9206 | AddFunc Head & Footer Code | 43 | 28 | 18 | 20k+ | | | Output is not escaped |
| #9207 | Geolocation IP Detection | 34 | 227 | 167 | 20k+ | | | Output is not escaped |
| #9208 | Fluent PDF Generator | 80 | 102 | 6 | 20k+ | | | Text Domain Mismatch |
| #9209 | Rearrange Products for WooCommerce | 76 | 1 | 22 | 20k+ | | | Input is not sanitized |
| #9210 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | | | Input is not sanitized |
| #9211 | AnWP Post Grid and Post Carousel Slider for Elementor | 48 | 758 | 171 | 20k+ | | | Text Domain Mismatch |
| #9212 | SyntaxHighlighter Evolved | 45 | 33 | 46 | 20k+ | | | Not In Footer |
| #9213 | Widgets on Pages | 23 | 809 | 1,306 | 20k+ | | | Non-prefixed global variable |
| #9214 | LWS Hide Login | 45 | 5 | 58 | 20k+ | | | Request data is not unslashed |
| #9215 | JivoChat Live Chat – WP live chat plugin for WordPress | 81 | 27 | 13 | 20k+ | | | wp function not compatible with requires wp |
| #9216 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | | | Non-prefixed global variable |
| #9217 | Yandex Metrica | 39 | 92 | 46 | 20k+ | | | Output is not escaped |
| #9218 | AI Provider for Google | 65 | 32 | 1 | 30k+ | | | Exception output is not escaped |
| #9219 | Hide Posts | 59 | 9 | 70 | 20k+ | | | Direct Query |
| #9220 | Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform | 99 | 1 | 0 | 20k+ | | | outdated tested upto header |
| #9221 | Two Factor Authentication | 35 | 108 | 139 | 20k+ | | | Output is not escaped |
| #9222 | Mail logging – WP Mail Catcher | 35 | 232 | 157 | 20k+ | | | Text Domain Mismatch |
| #9223 | Envo Extra | 21 | 878 | 600 | 20k+ | | | Text Domain Mismatch |
| #9224 | Featured Images in RSS for Mailchimp & More | 23 | 780 | 1,299 | 20k+ | | | Non-prefixed global variable |
| #9225 | PW WooCommerce Bulk Edit | 34 | 219 | 149 | 20k+ | | | Unsafe printing function |
| #9226 | Lightbox for Gallery & Image Block | 98 | 3 | 0 | 20k+ | | | Missing direct file access protection |
| #9227 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | | | Output is not escaped |
| #9228 | ND Shortcodes | 23 | 621 | 2,426 | 20k+ | | | Non-prefixed global variable |
| #9229 | WP Test Email | 41 | 32 | 28 | 20k+ | | | Unsafe printing function |
| #9230 | FV Top Level Categories | 56 | 24 | 16 | 20k+ | | | Text Domain Mismatch |
| #9231 | Statify – Extended Evaluation | 95 | 2 | 119 | 20k+ | | | Non-prefixed global variable |
| #9232 | User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #9233 | Simple Social Media Share Buttons – Social Sharing for Everyone | 24 | 468 | 101 | 20k+ | | | Output is not escaped |
| #9234 | Login rebuilder | 31 | 406 | 226 | 20k+ | | | Non Singular String Literal Domain |
| #9235 | Conversion Tracking for WooCommerce | 35 | 74 | 61 | 20k+ | | | Output is not escaped |
| #9236 | WP Customer Reviews | 98 | | 11 | 20k+ | | | slow db query meta query |
| #9237 | WP Console – WordPress PHP Console powered by PsySH | 53 | 34 | 48 | 20k+ | | | Exception output is not escaped |
| #9238 | WP Menu Icons | 54 | 68 | 52 | 20k+ | | | Text Domain Mismatch |
| #9239 | Power Coupons for WooCommerce | 90 | 6 | 91 | 20k+ | | | Non-prefixed global variable |
| #9240 | Debug Bar | 41 | 64 | 25 | 20k+ | | | Output is not escaped |
| #9241 | Comet Cache | 21 | 857 | 245 | 20k+ | | | Output is not escaped |
| #9242 | Chat Button & Custom ChatGPT-Powered Bot by GetButton.io | 58 | 26 | 8 | 20k+ | | | Non-prefixed function |
| #9243 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #9244 | YITH WooCommerce Product Add-Ons | 24 | 460 | 2,069 | 20k+ | | | Non-prefixed global variable |
| #9245 | Table Addons for Elementor | 50 | 92 | 29 | 20k+ | | | wp function not compatible with requires wp |
| #9246 | Ultimate Addons for Beaver Builder – Lite | 24 | 2,751 | 486 | 20k+ | | | Text Domain Mismatch |
| #9247 | Table Rate Shipping for WooCommerce | 98 | | 12 | 10k+ | | | Non-prefixed function |
| #9248 | PuSHPress | 42 | 11 | 65 | 20k+ | | | Missing nonce verification |
| #9249 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | | Output is not escaped |
| #9250 | WP User Avatars | 68 | 5 | 20 | 20k+ | | | Input is not sanitized |