| #9451 | TS Webfonts for さくらのレンタルサーバ | 35 | 183 | 100 | 30k+ | | | Missing Arg Domain |
| #9452 | Contact Form & SMTP Plugin for WordPress by PirateForms | 93 | 14 | 102 | 30k+ | | | Non-prefixed hook name |
| #9453 | Conditionally display featured image on singular posts and pages | 73 | 17 | 6 | 30k+ | | | Output is not escaped |
| #9454 | XO Security | 94 | 5 | 3 | 30k+ | | | wp function not compatible with requires wp |
| #9455 | SEOWriting | 52 | 10 | 24 | 30k+ | | | Output is not escaped |
| #9456 | Float menu – awesome floating side menu | 96 | 9 | 103 | 30k+ | | | Non-prefixed global variable |
| #9457 | Force Login | 74 | 5 | 8 | 30k+ | | | Output is not escaped |
| #9458 | ShopWriter Lite | 99 | 1 | 0 | 0 | | | outdated tested upto header |
| #9459 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #9460 | ActiveCampaign Postmark for WordPress | 36 | 47 | 75 | 50k+ | | | Text Domain Mismatch |
| #9461 | Better Font Awesome | 79 | 6 | 9 | 70k+ | | | Input is not sanitized |
| #9462 | Insert Pages | 55 | 52 | 30 | 40k+ | | | Output is not escaped |
| #9463 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 44 | 24 | 71 | 50k+ | | | Non-prefixed constant |
| #9464 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | 25 | 116 | 441 | 2m+ | | | Nonce verification recommended |
| #9465 | Content Aware Sidebars – Fastest Widget Area Plugin | 23 | 993 | 1,738 | 30k+ | | | Non-prefixed global variable |
| #9466 | WP Offload Media Lite for Amazon S3, DigitalOcean Spaces, and Google Cloud Storage | 96 | 8 | 12 | 30k+ | | | Missing direct file access protection |
| #9467 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #9468 | Divi Carousel Free (Divi5 Support) | 88 | 268 | 26 | 30k+ | | | Text Domain Mismatch |
| #9469 | WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets | 80 | 26 | 18 | 30k+ | | | Missing direct file access protection |
| #9470 | DethemeKit for Elementor | 30 | 335 | 228 | 30k+ | | | Output is not escaped |
| #9471 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | | Text Domain Mismatch |
| #9472 | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 22 | 1,567 | 1,277 | 30k+ | | | Non-prefixed global variable |
| #9473 | Astra Bulk Edit | 91 | 4 | 3 | 30k+ | | | Missing direct file access protection |
| #9474 | WP Telegram (Auto Post and Notifications) | 95 | 8 | 15 | 30k+ | | | Non-prefixed function |
| #9475 | Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | 25 | 789 | 313 | 30k+ | | | Text Domain Mismatch |
| #9476 | PPWP – Password Protect Pages | 98 | | 29 | 30k+ | | | Non-prefixed class |
| #9477 | Gallery Custom Links | 33 | 64 | 62 | 30k+ | | | Non Singular String Literal Domain |
| #9478 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | | | wp function not compatible with requires wp |
| #9479 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | | Text Domain Mismatch |
| #9480 | Enhanced Text Widget | 34 | 101 | 58 | 30k+ | | | Output is not escaped |
| #9481 | Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | 40 | 23 | 44 | 30k+ | | | Missing direct file access protection |
| #9482 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | | | Output is not escaped |
| #9483 | Elementor Beta (Developer Edition) | 57 | 36 | 32 | 30k+ | | | Output is not escaped |
| #9484 | Bulk Delete | 96 | 2 | 26 | 30k+ | | | slow db query meta key |
| #9485 | Clean Image Filenames | 82 | 6 | 1 | 30k+ | | | Output is not escaped |
| #9486 | Display PHP Version | 96 | 6 | 2 | 30k+ | | | Missing direct file access protection |
| #9487 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | | | Text Domain Mismatch |
| #9488 | Cornerstone | 34 | 161 | 174 | 30k+ | | | Nonce verification recommended |
| #9489 | Leaflet Map | 39 | 59 | 32 | 30k+ | | | Output is not escaped |
| #9490 | reCAPTCHA for MW WP Form | 43 | 37 | 14 | 30k+ | | | Non Singular String Literal Domain |
| #9491 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | | | Output is not escaped |
| #9492 | Hide Title | 66 | 13 | 6 | 30k+ | | | Output is not escaped |
| #9493 | Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster | 30 | 306 | 434 | 30k+ | | | Non-prefixed global variable |
| #9494 | Blackhole for Bad Bots | 39 | 123 | 69 | 30k+ | | | Output is not escaped |
| #9495 | YITH WooCommerce Ajax Search | 22 | 408 | 1,659 | 30k+ | | | Non-prefixed global variable |
| #9496 | WPFront User Role Editor | 35 | 333 | 578 | 30k+ | | | Output is not escaped |
| #9497 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | 23 | 4,746 | 1,279 | 30k+ | | | Non Singular String Literal Domain |
| #9498 | ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | 21 | 190 | 660 | 30k+ | | | Non-prefixed global variable |
| #9499 | Carousel Slider | 62 | | 71 | 30k+ | | | Non-prefixed global variable |
| #9500 | WP 404 Auto Redirect to Similar Post | 38 | 166 | 48 | 30k+ | | | Text Domain Mismatch |