| #2551 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | | Unsafe printing function |
| #2552 | Import Users & Customers with Meta | WP Ultimate CSV Importer Add-on | 35 | 27 | 140 | 5k+ | | | Interpolated SQL is not prepared |
| #2553 | Imsanity | 35 | 32 | 29 | 200k+ | | | Direct Query |
| #2554 | IndieWeb | 35 | 5 | 9 | 600 | | | Non-prefixed hook name |
| #2555 | InPost PL | 35 | 2 | 938 | 10k+ | | | Non-prefixed global variable |
| #2556 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #2557 | Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor | 35 | 6 | 200 | 10k+ | | | Non-prefixed global variable |
| #2558 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | | | Text Domain Mismatch |
| #2559 | Instant CSS | 35 | 25 | 25 | 3k+ | | | Output is not escaped |
| #2560 | Instapage Plugin | 35 | 220 | 45 | 4k+ | | | Output is not escaped |
| #2561 | Integrate Umami | 35 | 10 | 0 | 2k+ | | | Hidden files included |
| #2562 | IntenseDebate Comments | 35 | 203 | 114 | 500 | | | Output is not escaped |
| #2563 | ICIT Weather Widget | 35 | 358 | 8 | 400 | | | Output is not escaped |
| #2564 | IP Based Login | 35 | 179 | 146 | 600 | | | Output is not escaped |
| #2565 | iPages – FlipBook Image & PDF Viewer | 35 | 467 | 177 | 2k+ | | | Text Domain Mismatch |
| #2566 | Issuu PDF Sync | 35 | 159 | 28 | 900 | | | Text Domain Mismatch |
| #2567 | Japanese font for WordPress(Previously: Japanese Font for TinyMCE) | 35 | 11 | 37 | 10k+ | | | Non-prefixed global variable |
| #2568 | Jarvis | 35 | 10 | 19 | 500 | | | Input is not validated |
| #2569 | Static Site Exporter | 35 | 54 | 25 | 500 | | | file system operations mkdir |
| #2570 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | | | Nonce verification recommended |
| #2571 | Jetpack VideoPress | 35 | 710 | 241 | 7k+ | | | Text Domain Mismatch |
| #2572 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | | | Non Singular String Literal Domain |
| #2573 | JSON Feed (jsonfeed.org) | 35 | 9 | 29 | 1k+ | | | Non-prefixed global variable |
| #2574 | Nobs • Share Buttons | 35 | 314 | 85 | 3k+ | | | Output is not escaped |
| #2575 | JWT Auth – WordPress JSON Web Token Authentication | 35 | 14 | 18 | 6k+ | | | Output is not escaped |
| #2576 | Kadence for WooCommerce and Elementor | 35 | 39 | 21 | 3k+ | | | Output is not escaped |
| #2577 | Kargo Takip | 35 | 84 | 142 | 3k+ | | | Missing nonce verification |
| #2578 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | | | Non Singular String Literal Domain |
| #2579 | KBoard 위젯 – 워드프레스 게시판 | 35 | 53 | 32 | 3k+ | | | Output is not escaped |
| #2580 | Keyring | 35 | 233 | 203 | 1k+ | | | Output is not escaped |
| #2581 | Kiyoh customer review | 35 | 173 | 68 | 500 | | | Output is not escaped |
| #2582 | Kustom Checkout for WooCommerce | 35 | 101 | 505 | 10k+ | | | Dynamic hook name |
| #2583 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | | | Non-prefixed hook name |
| #2584 | Flexible Invoices for WooCommerce – KSeF Add-on | 35 | 39 | 15 | 600 | | | Non-prefixed global variable |
| #2585 | Lead Call Buttons | 35 | 113 | 81 | 5k+ | | | Output is not escaped |
| #2586 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #2587 | Lead Generation Form | 35 | 21 | 63 | 600 | | | Non-prefixed global variable |
| #2588 | Topic Progression Using Storyline/Captivate for LearnDash | 35 | 382 | 25 | 400 | | | Text Domain Mismatch |
| #2589 | Lenix scss compiler | 35 | 133 | 34 | 800 | | | Exception output is not escaped |
| #2590 | Less PHP Compiler | 35 | 163 | 47 | 3k+ | | | Exception output is not escaped |
| #2591 | Web3Press – Migrating to 3ook.com Decentralized Bookstore | 35 | 7 | 49 | 400 | | | Non-prefixed constant |
| #2592 | Listamester | 35 | 17 | 16 | 600 | | | Output is not escaped |
| #2593 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | | | Non-prefixed global variable |
| #2594 | Log HTTP Requests | 35 | 7 | 18 | 2k+ | | | Interpolated SQL is not prepared |
| #2595 | Login-Logout | 35 | 104 | 8 | 3k+ | | | Output is not escaped |
| #2596 | Login Page Styler – Custom WordPress Login Page Customizer & Security | 35 | 125 | 168 | 2k+ | | | Missing Arg Domain |
| #2597 | Log in with Google | 35 | 5 | 17 | 6k+ | | | Non-prefixed global variable |
| #2598 | LottieFiles | 35 | 8 | 1 | 7k+ | | | Hidden files included |
| #2599 | Magic Login – Passwordless Authentication for WordPress – Login Without Password | 35 | 23 | 53 | 3k+ | | | Missing nonce verification |
| #2600 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |