| #9701 | Yandex.Metrica | 36 | 76 | 30 | 60k+ | | | Output is not escaped |
| #9702 | Dynamic Conditions | 74 | 42 | 3 | 60k+ | | | Missing Arg Domain |
| #9703 | Image Placeholders | 100 | | 2 | 60k+ | | | Text Domain Mismatch |
| #9704 | Enhanced Media Library | 36 | 361 | 117 | 60k+ | | | Unsafe printing function |
| #9705 | MWW Scheduled Post Trigger | 92 | 4 | 2 | 60k+ | | | Direct Query |
| #9706 | WP fail2ban – Advanced Security | 32 | 75 | 153 | 60k+ | | | Dynamic hook name |
| #9707 | Ocean Social Sharing | 84 | 10 | 36 | 60k+ | | | Non-prefixed global variable |
| #9708 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 70k+ | | | Unsafe printing function |
| #9709 | Wordfence Login Security | 25 | 248 | 418 | 60k+ | | | Output is not escaped |
| #9710 | Database Backup for WordPress | 35 | 128 | 88 | 70k+ | | | Output is not escaped |
| #9711 | iframe | 74 | 18 | 0 | 70k+ | | | Unsafe printing function |
| #9712 | Easy Theme and Plugin Upgrades | 94 | 29 | 20 | 70k+ | | | Discouraged PHP function |
| #9713 | Feeds for TikTok (TikTok feed, video, and gallery plugin) | 98 | 5 | 3 | 70k+ | | | Missing direct file access protection |
| #9714 | Brazilian Market on WooCommerce | 75 | 4 | 51 | 70k+ | | | Missing nonce verification |
| #9715 | Remove Footer Credit | 85 | 7 | 31 | 70k+ | | | Non-prefixed global variable |
| #9716 | StatCounter – Free Real Time Visitor Stats | 95 | 41 | 10 | 70k+ | | | wp function not compatible with requires wp |
| #9717 | Redirect 404 to Homepage | 88 | 4 | 4 | 70k+ | | | parse url parse url |
| #9718 | WP Show Posts | 36 | 107 | 102 | 70k+ | | | Output is not escaped |
| #9719 | Featured Image from URL (FIFU) | 24 | 1,654 | 418 | 70k+ | | | Non Singular String Literal Domain |
| #9720 | SMTP Mailer | 42 | 51 | 49 | 70k+ | | | Unsafe printing function |
| #9721 | Nav Menu Roles | 84 | 3 | 18 | 70k+ | | | Non-prefixed hook name |
| #9722 | Async JavaScript | 37 | 357 | 79 | 70k+ | | | Unsafe printing function |
| #9723 | Hotjar | 61 | 16 | 4 | 70k+ | | | Output is not escaped |
| #9724 | Speculative Loading | 99 | | 7 | 70k+ | | | Non-prefixed global variable |
| #9725 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 33 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #9726 | Title Remover | 86 | 7 | 5 | 70k+ | | | wp function not compatible with requires wp |
| #9727 | LoftLoader | 81 | 17 | 19 | 70k+ | | | Missing direct file access protection |
| #9728 | Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder | 24 | 576 | 1,344 | 70k+ | | | Non-prefixed global variable |
| #9729 | kk Star Ratings – Rate Post & Collect User Feedbacks | 25 | 772 | 1,388 | 70k+ | | | Non-prefixed global variable |
| #9730 | WP Ultimate Review | 55 | 23 | 381 | 70k+ | | | Non-prefixed global variable |
| #9731 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,410 | 866 | 70k+ | | | Text Domain Mismatch |
| #9732 | Real-Time Find and Replace | 57 | 23 | 10 | 70k+ | | | Output is not escaped |
| #9733 | Responsive Menu – Create Mobile-Friendly Menu | 34 | 68 | 40 | 70k+ | | | Nonce verification recommended |
| #9734 | Dynific Addons for Elementor (formerly AnyWhere Elementor) | 84 | 33 | 5 | 70k+ | | | Text Domain Mismatch |
| #9735 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #9736 | Jupiter X Core | 38 | 71 | 767 | 70k+ | | | Non-prefixed global variable |
| #9737 | 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | 38 | 353 | 77 | 80k+ | | | Non Singular String Literal Domain |
| #9738 | Advanced Excerpt | 41 | 69 | 43 | 70k+ | | | Unsafe printing function |
| #9739 | YITH WooCommerce Ajax Product Filter | 23 | 463 | 1,527 | 70k+ | | | Non-prefixed global variable |
| #9740 | WP Mobile Menu – The Mobile-Friendly Responsive Menu | 32 | 990 | 195 | 70k+ | | | Output is not escaped |
| #9741 | Ajax Search Lite – Live Search & Filter | 76 | 126 | 264 | 80k+ | | | Non-prefixed hook name |
| #9742 | Duplicate Page and Post | 41 | 26 | 21 | 80k+ | | | Unsafe printing function |
| #9743 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #9744 | WP Post Page Clone | 96 | | 5 | 80k+ | | | trademarked term |
| #9745 | Tidio – Live Chat & AI Chatbots | 34 | 52 | 19 | 80k+ | | | curl curl setopt |
| #9746 | Make Connector | 94 | 1 | 9 | 80k+ | | | Non-prefixed constant |
| #9747 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | | | Post Not In exclude |
| #9748 | Facebook Chat Plugin – Live Chat Plugin for WordPress | 88 | 7 | 8 | 80k+ | | | trademarked term |
| #9749 | Hello Plus | 94 | 15 | 38 | 80k+ | | | Post Not In exclude |
| #9750 | PHP Code Widget | 64 | 22 | 1 | 80k+ | | | Output is not escaped |