| #7401 | Media Library Downloader | 35 | 21 | 16 | 4k+ | | | Output is not escaped |
| #7402 | MeetingHub – Webinar & Meeting Plugin for Zoom, Google Meet, Webex, Microsoft Teams, & Jitsi Meet | 35 | 33 | 289 | 400 | | | Non-prefixed global variable |
| #7403 | Menu Item Duplicator | 35 | 3 | 0 | 2k+ | | | Hidden files included |
| #7404 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | | | Unsafe printing function |
| #7405 | Metadata Viewer | 35 | 2 | 11 | 400 | | | Non-prefixed global variable |
| #7406 | Mighty Pros & Cons | 35 | 12 | 6 | 800 | | | Text Domain Mismatch |
| #7407 | Mini Ajax Cart for WooCommerce | 35 | 297 | 240 | 900 | | | Text Domain Mismatch |
| #7408 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | | | Non-prefixed global variable |
| #7409 | SAML IDP (Identity Provider) – Login with Website Users | 35 | 13 | 326 | 600 | | | Non-prefixed global variable |
| #7410 | Modal Guten Block | 35 | 6 | 3 | 2k+ | | | Hidden files included |
| #7411 | Modern Images WP | 35 | 10 | 3 | 400 | | | Missing Translators Comment |
| #7412 | MONEI Payments for WooCommerce | 35 | 15 | 65 | 500 | | | Non-prefixed hook name |
| #7413 | More Widgets | 35 | 55 | 15 | 1k+ | | | Output is not escaped |
| #7414 | mosparo Integration | 35 | 114 | 301 | 900 | | | Missing nonce verification |
| #7415 | AI Product Search for WooCommerce – Motive Commerce Search | 35 | 70 | 82 | 400 | | | Missing direct file access protection |
| #7416 | Movylo Marketing Automation | 35 | 38 | 88 | 700 | | | error log print r |
| #7417 | MotoPress Hotel Booking Styles & Templates | 35 | 37 | 19 | 10k+ | | | block api version too low |
| #7418 | Hide from Search | 35 | 5 | 8 | 3k+ | | | Missing direct file access protection |
| #7419 | Image Refresh | 35 | 4 | 6 | 900 | | | Dynamic hook name |
| #7420 | My Eyes Are Up Here | 35 | 7 | 12 | 2k+ | | | Missing nonce verification |
| #7421 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #7422 | Never Let Me Go | 35 | 34 | 47 | 400 | | | Non-prefixed global variable |
| #7423 | NewsPlugin | 35 | 84 | 53 | 400 | | | Text Domain Mismatch |
| #7424 | NGG Smart Image Search | 35 | 298 | 155 | 400 | | | Output is not escaped |
| #7425 | Nginx Cache Controller | 35 | 79 | 96 | 1k+ | | | Text Domain Mismatch |
| #7426 | Ni WooCommerce Sales Report | 35 | 236 | 256 | 500 | | | Text Domain Mismatch |
| #7427 | Nooz | 35 | 287 | 108 | 500 | | | Text Domain Mismatch |
| #7428 | Noted! | 35 | 5 | 22 | 1k+ | | | Non-prefixed global variable |
| #7429 | NS Cloner – Site Cloner and Multisite Duplicator | 35 | 29 | 16 | 7k+ | | | Missing direct file access protection |
| #7430 | Meta pixel for WordPress | 35 | 90 | 40 | 400k+ | | | Exception output is not escaped |
| #7431 | Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts | 35 | 41 | 8 | 200k+ | | | Missing direct file access protection |
| #7432 | Newsletters, Email Marketing, SMS and Popups by Omnisend | 35 | 4 | 2 | 100k+ | | | Hidden files included |
| #7433 | Email Marketing for WooCommerce by Omnisend | 35 | 12 | 21 | 40k+ | | | Non-prefixed function |
| #7434 | One Page Express Companion | 35 | 132 | 65 | 10k+ | | | Output is not escaped |
| #7435 | ONet Regenerate Thumbnails | 35 | 190 | 64 | 1k+ | | | Text Domain Mismatch |
| #7436 | Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce | 35 | 117 | 144 | 2k+ | | | Output is not escaped |
| #7437 | Out of the Block: OpenStreetMap | 35 | 9 | 4 | 700 | | | Missing direct file access protection |
| #7438 | OPcache Manager | 35 | 155 | 75 | 1k+ | | | Output is not escaped |
| #7439 | OPcache Reset | 35 | 9 | 7 | 400 | | | Non-prefixed function |
| #7440 | Order Delivery Date for WooCommerce | 35 | 2,075 | 73 | 10k+ | | | wp function not compatible with requires wp |
| #7441 | Orderable – Restaurant & Food Ordering System | 35 | 12 | 324 | 5k+ | | | Non-prefixed global variable |
| #7442 | OSM Map Widget for Elementor | 35 | 183 | 14 | 9k+ | | | Text Domain Mismatch |
| #7443 | OT Flatsome Vertical Menu | 35 | 126 | 26 | 10k+ | | | Text Domain Mismatch |
| #7444 | OtFm Gutenberg Spoiler – (or FAQ) collapse block | 35 | 6 | 9 | 600 | | | trademarked term |
| #7445 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 35 | 131 | 41 | 300k+ | | | Missing direct file access protection |
| #7446 | Page Optimize | 35 | 70 | 41 | 200k+ | | | Non Singular String Literal Domain |
| #7447 | Page Visits Counter – Lite | 35 | 28 | 35 | 5k+ | | | Output is not escaped |
| #7448 | Paybox WooCommerce Payment Gateway | 35 | 165 | 88 | 500 | | | Non Singular String Literal Domain |
| #7449 | Paytm Payment Gateway | 35 | 92 | 104 | 3k+ | | | Missing Arg Domain |
| #7450 | Paytrail for WooCommerce | 35 | 28 | 46 | 3k+ | | | Non-prefixed global variable |