| #9251 | WP Extended Search | 41 | 159 | 37 | 20k+ | | | Output is not escaped |
| #9252 | Quick Adsense | 93 | 31 | 26 | 20k+ | | | Missing direct file access protection |
| #9253 | CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x | 39 | 7 | 222 | 20k+ | | | Non-prefixed hook name |
| #9254 | WP Child Theme Generator | 42 | 35 | 66 | 20k+ | | | Request data is not unslashed |
| #9255 | Theme Check | 67 | 143 | 6 | 20k+ | | | Missing Translators Comment |
| #9256 | Rife Extensions & Templates for Elementor | 69 | 22 | 7 | 20k+ | | | Output is not escaped |
| #9257 | Rich Table of Contents | 37 | 262 | 57 | 20k+ | | | Output is not escaped |
| #9258 | WP All Import – Product Import for WooCommerce | 23 | 1,475 | 209 | 20k+ | | | Non Singular String Literal Domain |
| #9259 | Login or Logout Menu Item | 55 | 13 | 7 | 20k+ | | | Unsafe printing function |
| #9260 | Quads Ads Manager for Google AdSense | 99 | | 8 | 20k+ | | | Non-prefixed constant |
| #9261 | AI Provider for Anthropic | 78 | 13 | 1 | 30k+ | | | Exception output is not escaped |
| #9262 | Database Manager – WP Adminer | 24 | 1,005 | 2,752 | 20k+ | | | Non-prefixed global variable |
| #9263 | Error Log Monitor | 23 | 694 | 1,414 | 20k+ | | | Non-prefixed global variable |
| #9264 | Catch IDs | 88 | | 16 | 20k+ | | | Non-prefixed global variable |
| #9265 | Rara One Click Demo Import | 36 | 122 | 98 | 20k+ | | | Missing Translators Comment |
| #9266 | Media Library Categories | 40 | 29 | 49 | 20k+ | | | Output is not escaped |
| #9267 | Any Mobile Theme Switcher | 38 | 69 | 59 | 20k+ | | | Output is not escaped |
| #9268 | Website Monetization by MageNet | 33 | 60 | 87 | 20k+ | | | Output is not escaped |
| #9269 | WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map by aBlocks | 79 | 6 | 10 | 20k+ | | | trademarked term |
| #9270 | Search & Replace Everything by WPCode – Find and Replace Media, Text, Links, and More | 97 | 5 | 4 | 20k+ | | | Missing direct file access protection |
| #9271 | Woostify Sites Library | 29 | 229 | 198 | 20k+ | | | Text Domain Mismatch |
| #9272 | Ocean Product Sharing | 86 | 9 | 18 | 20k+ | | | Non-prefixed global variable |
| #9273 | AGCA – Custom Dashboard & Login Page | 34 | 350 | 44 | 20k+ | | | Unsafe printing function |
| #9274 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #9275 | Advanced Custom Fields: Image Aspect Ratio Crop Field | 35 | 70 | 37 | 20k+ | | | Text Domain Mismatch |
| #9276 | jQuery Updater | 97 | 8 | 4 | 20k+ | | | library core files |
| #9277 | Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery | 92 | 6 | 30 | 20k+ | | | Non-prefixed global variable |
| #9278 | Change Mail Sender | 76 | 97 | 19 | 20k+ | | | Text Domain Mismatch |
| #9279 | Seed Fonts | 66 | 29 | 11 | 20k+ | | | Output is not escaped |
| #9280 | Material Design Icons for Page Builders | 46 | 69 | 46 | 20k+ | | | Missing direct file access protection |
| #9281 | Embed PDF Viewer | 35 | 1 | 2 | 20k+ | | | Hidden files included |
| #9282 | WP-Paginate | 35 | 37 | 55 | 20k+ | | | Input is not validated |
| #9283 | Essential Content Types | 100 | | 1 | 20k+ | | | Non-prefixed class |
| #9284 | Spider Blocker | 78 | 19 | 9 | 20k+ | | | Missing Translators Comment |
| #9285 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | | | Text Domain Mismatch |
| #9286 | Metronet Tag Manager | 52 | 17 | 36 | 20k+ | | | Input is not validated |
| #9287 | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | 90 | | 20 | 20k+ | | | Non-prefixed function |
| #9288 | TinyMCE Templates | 35 | 41 | 27 | 20k+ | | | Text Domain Mismatch |
| #9289 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #9290 | VOD Infomaniak | 27 | 797 | 385 | 20k+ | | | Output is not escaped |
| #9291 | Movable Type and TypePad Importer | 39 | 42 | 25 | 20k+ | | | Output is not escaped |
| #9292 | Alt Text AI – Automatically generate image alt text for SEO and accessibility | 29 | 72 | 280 | 20k+ | | | Non-prefixed global variable |
| #9293 | Email Template Customizer for WooCommerce | 55 | 552 | 248 | 20k+ | | | Text Domain Mismatch |
| #9294 | Transients Manager | 42 | 45 | 50 | 20k+ | | | Output is not escaped |
| #9295 | WP All Import – Import SEO Settings for Yoast SEO | 46 | 19 | 26 | 20k+ | | | Nonce verification recommended |
| #9296 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | | Missing direct file access protection |
| #9297 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #9298 | Hide/Remove Metadata | 100 | | 1 | 20k+ | | | readme parser warnings too many tags |
| #9299 | WP Bottom Menu | 60 | 74 | 52 | 20k+ | | | Non-prefixed hook name |
| #9300 | PDF.js Viewer | 69 | 14 | 38 | 20k+ | | | Non-prefixed global variable |