| #7851 | Melhor Envio | 34 | 24 | 276 | 10k+ | | | Nonce verification recommended |
| #7852 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | | | Output is not escaped |
| #7853 | Meow Lightbox | 34 | 77 | 52 | 10k+ | | | Non Singular String Literal Domain |
| #7854 | Meta Tag Manager | 34 | 142 | 321 | 80k+ | | | Nonce verification recommended |
| #7855 | OTP Login & Register Woocommerce | 34 | 148 | 202 | 1k+ | | | Missing nonce verification |
| #7856 | Montonio for WooCommerce | 34 | 44 | 257 | 10k+ | | | Non-prefixed global variable |
| #7857 | mowomo Social Share | 34 | 202 | 156 | 1k+ | | | Output is not escaped |
| #7858 | MPL-Publisher — Ebook & Audiobook Creator | 34 | 489 | 76 | 800 | | | Text Domain Mismatch |
| #7859 | Multi Step Form | 34 | 277 | 139 | 9k+ | | | Output is not escaped |
| #7860 | My Tickets – Accessible Event Ticketing | 34 | 314 | 566 | 700 | | | Nonce verification recommended |
| #7861 | NextGEN Gallery Optimizer | 34 | 128 | 92 | 2k+ | | | Output is not escaped |
| #7862 | Ni WooCommerce Custom Order Status | 34 | 256 | 139 | 2k+ | | | Text Domain Mismatch |
| #7863 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | | | Non-prefixed global variable |
| #7864 | Openpay SPEI Plugin | 34 | 112 | 14 | 1k+ | | | Exception output is not escaped |
| #7865 | Optima Express IDX | 34 | 71 | 237 | 10k+ | | | Non-prefixed class |
| #7866 | Child Theme Creator by Orbisius | 34 | 86 | 39 | 10k+ | | | Output is not escaped |
| #7867 | Team Members Profile – Employee Directory & Staff Showcase | 34 | 339 | 90 | 600 | | | Output is not escaped |
| #7868 | OwnerRez | 34 | 79 | 56 | 700 | | | Unsafe printing function |
| #7869 | MW Font Changer | 34 | 463 | 75 | 7k+ | | | Text Domain Mismatch |
| #7870 | Payoneer Checkout | 34 | 168 | 41 | 5k+ | | | Exception output is not escaped |
| #7871 | PDF Invoices and Packing Slips For WooCommerce | 34 | 108 | 284 | 1k+ | | | Non-prefixed global variable |
| #7872 | PhonePe Payment Solutions | 34 | 77 | 106 | 10k+ | | | Missing direct file access protection |
| #7873 | Podigee WordPress Quick Publish – now with Gutenberg support! | 34 | 108 | 95 | 700 | | | Text Domain Mismatch |
| #7874 | Progress Bar & Skill Bar | 34 | 175 | 179 | 1k+ | | | Non Singular String Literal Domain |
| #7875 | PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget | 34 | 46 | 298 | 9k+ | | | Missing nonce verification |
| #7876 | PW WooCommerce Bulk Edit | 34 | 219 | 149 | 20k+ | | | Unsafe printing function |
| #7877 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | | | Text Domain Mismatch |
| #7878 | Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | 34 | 261 | 863 | 20k+ | | | Non-prefixed global variable |
| #7879 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | | | Output is not escaped |
| #7880 | Responsive Menu – Create Mobile-Friendly Menu | 34 | 68 | 40 | 70k+ | | | Nonce verification recommended |
| #7881 | Event Timeline – Vertical Timeline | 34 | 26 | 684 | 1k+ | | | Non-prefixed global variable |
| #7882 | RTMForm Builder | 34 | 188 | 209 | 30k+ | | | Text Domain Mismatch |
| #7883 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #7884 | Saphali Woocommerce Lite | 34 | 376 | 313 | 10k+ | | | Non-prefixed global variable |
| #7885 | Search Engine Insights for Google Search Console | 34 | 174 | 113 | 2k+ | | | Output is not escaped |
| #7886 | Search Meter | 34 | 191 | 94 | 20k+ | | | Output is not escaped |
| #7887 | Security Safe | 34 | 193 | 164 | 700 | | | Missing Translators Comment |
| #7888 | Seriously Simple Stats | 34 | 99 | 126 | 5k+ | | | Output is not escaped |
| #7889 | Shift8 CDN | 34 | 81 | 25 | 600 | | | Output is not escaped |
| #7890 | Student Result or Employee Database | 34 | 89 | 98 | 1k+ | | | Direct Query |
| #7891 | Social Integration for BlueSky | 34 | 98 | 147 | 700 | | | Non-prefixed global variable |
| #7892 | Software License Manager | 34 | 69 | 289 | 900 | | | Nonce verification recommended |
| #7893 | Subscribe to Download Lite – Email Before Download Plugin | 34 | 106 | 157 | 400 | | | Non-prefixed global variable |
| #7894 | SuperFrete | 34 | 84 | 242 | 1k+ | | | Request data is not unslashed |
| #7895 | Swiftype Site Search Plugin for WordPress | 34 | 250 | 50 | 400 | | | Output is not escaped |
| #7896 | Tab Ultimate | 34 | 107 | 138 | 1k+ | | | Output is not escaped |
| #7897 | TaxJar – Sales Tax Automation for WooCommerce | 34 | 236 | 170 | 5k+ | | | Text Domain Mismatch |
| #7898 | Testimonial Slider | 34 | 448 | 262 | 3k+ | | | Unsafe printing function |
| #7899 | Easy Mega Menu for WordPress – ThemeHunk | 34 | 480 | 256 | 1k+ | | | Text Domain Mismatch |
| #7900 | Throws SPAM Away | 34 | 327 | 123 | 10k+ | | | Missing Arg Domain |