| #6401 | Browser Theme Color | 83 | 4 | 2 | 2k+ | | | Output is not escaped |
| #6402 | CBX User Online & Last Login | 86 | 3 | 87 | 800 | | | Non-prefixed global variable |
| #6403 | PDF viewer for Elementor & Gutenberg | 73 | 14 | 12 | 10k+ | | | Nonce verification recommended |
| #6404 | Dynamic Pricing and Discount Rules | 51 | 24 | 65 | 1k+ | | | Non Singular String Literal Text |
| #6405 | WPWaterMark 轻水印插件 | 73 | 24 | 17 | 900 | | | Request data is not unslashed |
| #6406 | Redirect List | 43 | 34 | 22 | 1k+ | | | Output is not escaped |
| #6407 | Captivate Sync | 24 | 173 | 557 | 1k+ | | | Non-prefixed global variable |
| #6408 | SureDash – Community, Courses & Member Dashboard | 25 | 422 | 808 | 1k+ | | | Non-prefixed global variable |
| #6409 | Passwordless Login | 41 | 40 | 24 | 1k+ | | | Output is not escaped |
| #6410 | Force Reinstall | 35 | 118 | 34 | 2k+ | | | Output is not escaped |
| #6411 | Mini Ajax Cart for WooCommerce | 35 | 297 | 240 | 900 | | | Text Domain Mismatch |
| #6412 | Page Meta | 66 | 26 | 14 | 800 | | | Missing Arg Domain |
| #6413 | Payment Integration Wompi | 85 | 44 | 11 | 1k+ | | | Missing Arg Domain |
| #6414 | Topic SEO Content Optimization Tool | 62 | 35 | 15 | 1k+ | | | curl curl close |
| #6415 | Block List Updater | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #6416 | Include Klaviyo for Elementor pro | 63 | 60 | 10 | 2k+ | | | Missing Arg Domain |
| #6417 | Testerwp ecommerce companion | 21 | 811 | 436 | 1k+ | | | Text Domain Mismatch |
| #6418 | Civist – Petitions and Fundraising | 100 | | 0 | 1k+ | | | No open findings |
| #6419 | Timeline – Vertical and Horizontal Timeline Layouts | 39 | 500 | 43 | 2k+ | | | Output is not escaped |
| #6420 | Repeat Order for WooCommerce | 88 | 19 | 9 | 3k+ | | | Text Domain Mismatch |
| #6421 | Clean Testimonials | 34 | 127 | 87 | 400 | | | Output is not escaped |
| #6422 | Classified Listing Toolkits | 30 | 43 | 1,859 | 4k+ | | | Non-prefixed global variable |
| #6423 | Site Favicon | 97 | 3 | 0 | 5k+ | | | invalid license |
| #6424 | Genealogical Tree – Family Tree & Ancestry for WordPress | 24 | 560 | 1,641 | 600 | | | Non-prefixed global variable |
| #6425 | Categories in Hierarchical Order | 97 | 1 | 5 | 2k+ | | | Non-prefixed function |
| #6426 | ForumWP – Forum & Discussion Board | 82 | 22 | 444 | 900 | | | Non-prefixed global variable |
| #6427 | miniOrange Embed Files for SharePoint/OneDrive | 100 | | 4 | 800 | | | Non-prefixed constant |
| #6428 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #6429 | UPI QR Code Payment Gateway | 42 | 179 | 28 | 1k+ | | | Text Domain Mismatch |
| #6430 | Editor Blocks for Gutenberg | 82 | 6 | 8 | 700 | | | Missing direct file access protection |
| #6431 | AOS Animation for SiteOrigin Page Builder | 97 | 2 | 7 | 3k+ | | | Missing Version |
| #6432 | Cache External Scripts | 76 | 21 | 4 | 900 | | | Output is not escaped |
| #6433 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #6434 | LeadBooster Chatbot by Pipedrive | 52 | 38 | 6 | 2k+ | | | Output is not escaped |
| #6435 | WP Voting Contest Lite | 24 | 259 | 258 | 400 | | | Text Domain Mismatch |
| #6436 | Customizable Post Listings | 54 | 42 | 13 | 700 | | | Deprecated parameter: the_author parameter 1 |
| #6437 | Gravity Forms Eway | 33 | 519 | 45 | 500 | | | Missing Translators Comment |
| #6438 | Minimum Order Amount for Woocommerce | 44 | 50 | 16 | 2k+ | | | Text Domain Mismatch |
| #6439 | Cron Setup and Monitor – Get URL Cron | 100 | | 0 | 1k+ | | | No open findings |
| #6440 | Protected Video | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6441 | Auto Alt Text | 43 | 52 | 13 | 4k+ | | | Exception output is not escaped |
| #6442 | Kargo Takip | 35 | 84 | 142 | 3k+ | | | Missing nonce verification |
| #6443 | TrackingMore Order Tracking for WooCommerce (Free plan available) | 33 | 94 | 124 | 800 | | | Text Domain Mismatch |
| #6444 | GSheetConnector For Ninja Forms | 32 | 165 | 93 | 1k+ | | | Unsafe printing function |
| #6445 | Scrollbar | 59 | 7 | 22 | 400 | | | Missing nonce verification |
| #6446 | Cryptocurrency Payment Gateway | 25 | 1,963 | 589 | 400 | | | Text Domain Mismatch |
| #6447 | Gutena Accordion – Beautiful FAQ Accordion Block | 97 | 6 | 3 | 6k+ | | | Missing Arg Domain |
| #6448 | Widget Click to Chat | 61 | 22 | 4 | 500 | | | Setting is missing a sanitization callback |
| #6449 | Despacho vía Starken Pro para WooCommerce | 44 | 175 | 60 | 400 | | | Text Domain Mismatch |
| #6450 | Payphone – Payment Gateway Button | 35 | 3 | 2 | 2k+ | | | Hidden files included |