| #9551 | Robo Gallery – Photo & Image Slider | 23 | 1,291 | 530 | 40k+ | | | Output is not escaped |
| #9552 | What The File | 35 | 9 | 12 | 40k+ | | | Input is not sanitized |
| #9553 | Bing URL Submissions Plugin | 74 | 10 | 38 | 40k+ | | | error log error log |
| #9554 | Category Posts Widget | 38 | 153 | 26 | 40k+ | | | Output is not escaped |
| #9555 | WP-Polls | 25 | 618 | 639 | 40k+ | | | Unsafe printing function |
| #9556 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #9557 | Say What? | 99 | 3 | 2 | 40k+ | | | Missing direct file access protection |
| #9558 | WP Edit | 33 | 337 | 137 | 40k+ | | | Unsafe printing function |
| #9559 | Advanced Free Shipping for WooCommerce | 34 | 270 | 132 | 40k+ | | | Text Domain Mismatch |
| #9560 | reCAPTCHA for WooCommerce | 42 | 80 | 31 | 40k+ | | | Output is not escaped |
| #9561 | Genesis eNews Extended | 82 | 9 | 1 | 40k+ | | | Output is not escaped |
| #9562 | Htaccess File Editor – Safely Edit Htaccess File | 96 | 4 | 15 | 40k+ | | | Non-prefixed global variable |
| #9563 | Hide Page And Post Title | 67 | 11 | 8 | 40k+ | | | Output is not escaped |
| #9564 | ActiveCampaign – The autonomous marketing platform | 31 | 235 | 98 | 40k+ | | | Output is not escaped |
| #9565 | Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More | 88 | 20 | 116 | 40k+ | | | Non-prefixed hook name |
| #9566 | WP-SCSS | 34 | 269 | 13 | 40k+ | | | Exception output is not escaped |
| #9567 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #9568 | Reveal IDs | 35 | 23 | 13 | 40k+ | | | Output is not escaped |
| #9569 | WP Call Button – Easy Click to Call Button for WordPress | 54 | 21 | 38 | 40k+ | | | Non-prefixed global variable |
| #9570 | Genesis Blocks | 88 | 154 | 9 | 40k+ | | | Offloaded Content |
| #9571 | UiCore Elements – Free widgets and templates for Elementor | 58 | 29 | 30 | 40k+ | | | Output is not escaped |
| #9572 | Easy SVG Support | 99 | 1 | 0 | 40k+ | | | outdated tested upto header |
| #9573 | Classic Editor + | 86 | 1 | 4 | 40k+ | | | Input is not sanitized |
| #9574 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements | 25 | 352 | 597 | 40k+ | | | Non-prefixed global variable |
| #9575 | Revision Control | 41 | 60 | 28 | 40k+ | | | Output is not escaped |
| #9576 | Quick Buy Now Button for WooCommerce | 54 | 136 | 25 | 40k+ | | | Text Domain Mismatch |
| #9577 | Clear Cache for Me | 47 | 58 | 8 | 40k+ | | | Text Domain Mismatch |
| #9578 | OoohBoi Steroids for Elementor | 30 | 2,059 | 100 | 40k+ | | | Text Domain Mismatch |
| #9579 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | | | Non-prefixed global variable |
| #9580 | ACF: Better Search | 97 | 11 | 10 | 40k+ | | | Missing direct file access protection |
| #9581 | Interactive Content – H5P | 23 | 565 | 380 | 40k+ | | | Non Singular String Literal Domain |
| #9582 | Age Gate | 69 | 61 | 139 | 40k+ | | | Missing direct file access protection |
| #9583 | Virtual Robots.txt | 55 | 10 | 21 | 40k+ | | | Input is not validated |
| #9584 | Export media with selected content (by DKZR) | 68 | 10 | 14 | 40k+ | | | Direct Query |
| #9585 | Adapta RGPD | 37 | 349 | 72 | 40k+ | | | Text Domain Mismatch |
| #9586 | Crop-Thumbnails | 38 | 33 | 27 | 40k+ | | | Missing direct file access protection |
| #9587 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #9588 | Block Visibility — Conditional Visibility Control for the Block Editor | 81 | 7 | 11 | 40k+ | | | Input is not sanitized |
| #9589 | Structured Content (JSON-LD) #wpsc | 39 | 291 | 73 | 40k+ | | | Output is not escaped |
| #9590 | WP Revisions Control | 85 | 9 | 6 | 40k+ | | | wp function not compatible with requires wp |
| #9591 | Patchstack – WordPress & Plugins Security | 23 | 107 | 489 | 50k+ | | | Missing nonce verification |
| #9592 | WP All Import – Import Add-On for ACF | 84 | 3 | 46 | 50k+ | | | Non-prefixed global variable |
| #9593 | Better Find and Replace – AI-Powered Suggestions | 36 | 67 | 129 | 40k+ | | | Missing direct file access protection |
| #9594 | WP Extra File Types | 43 | 11 | 26 | 40k+ | | | Request data is not unslashed |
| #9595 | UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks | 49 | 34 | 38 | 40k+ | | | Missing direct file access protection |
| #9596 | Clone | 23 | 244 | 262 | 40k+ | | | Output is not escaped |
| #9597 | Super Progressive Web Apps | 59 | 62 | 22 | 40k+ | | | wp function not compatible with requires wp |
| #9598 | Themesflat Addons For Elementor | 28 | 714 | 227 | 40k+ | | | Output is not escaped |
| #9599 | WCBoost – Wishlist | 97 | 2 | 29 | 50k+ | | | Non-prefixed global variable |
| #9600 | BoldGrid Easy SEO – Simple and Effective SEO | 34 | 149 | 104 | 40k+ | | | Text Domain Mismatch |