| #6701 | WC Booster | 27 | 191 | 282 | 800 | | | Non-prefixed global variable |
| #6702 | Payment gateway via Teya SecurePay for WooCommerce | 97 | 96 | 2 | 1k+ | | | Text Domain Mismatch |
| #6703 | UltraAddons for Elementor | 90 | 65 | 2 | 600 | | | wp function not compatible with requires wp |
| #6704 | Plugin Groups | 73 | 16 | 12 | 1k+ | | | Non Singular String Literal Domain |
| #6705 | HTML Template for CF7 | 42 | 21 | 27 | 1k+ | | | Non-prefixed global variable |
| #6706 | CHL-Change HTML Lang | 81 | 5 | 7 | 7k+ | | | Non-prefixed function |
| #6707 | What Template File Am I Viewing? | 96 | 7 | 0 | 1k+ | | | wp function not compatible with requires wp |
| #6708 | Clean My Archives | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #6709 | Easy Post Views Count | 26 | 534 | 1,180 | 2k+ | | | Non-prefixed global variable |
| #6710 | AM LottiePlayer | 86 | 5 | 12 | 800 | | | Non-prefixed global variable |
| #6711 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | | | Exception output is not escaped |
| #6712 | Custom Product Tabs for WooCommerce WP All Import Add-on | 65 | 18 | 18 | 1k+ | | | Non-prefixed global variable |
| #6713 | WP Custom Author URL | 47 | 16 | 38 | 5k+ | | | Non-prefixed global variable |
| #6714 | HM Multiple Roles | 27 | 537 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #6715 | AI Copilot – Content Generator | 23 | 262 | 367 | 1k+ | | | wp function not compatible with requires wp |
| #6716 | Writesonic | 35 | 14 | 16 | 1k+ | | | Non-prefixed global variable |
| #6717 | Nice Search | 81 | 4 | 5 | 900 | | | Input is not sanitized |
| #6718 | Official CleverReach® Plugin for WooCommerce | 46 | 37 | 98 | 400 | | | Non-prefixed global variable |
| #6719 | Sequential Order Numbers for WooCommerce | 24 | 698 | 472 | 1k+ | | | Text Domain Mismatch |
| #6720 | Openpay Stores Plugin | 31 | 121 | 75 | 1k+ | | | Non-prefixed global variable |
| #6721 | Staffer | 42 | 88 | 42 | 600 | | | Output is not escaped |
| #6722 | Duplicate Pages, Posts and CPT | 88 | 2 | 5 | 5k+ | | | Input is not sanitized |
| #6723 | Remove Featured Image | 61 | 21 | 12 | 1k+ | | | Missing Arg Domain |
| #6724 | Exchange Rates Widget | 100 | | 0 | 1k+ | | | No open findings |
| #6725 | Rabo Smart Pay for WooCommerce | 36 | 150 | 55 | 600 | | | Text Domain Mismatch |
| #6726 | WP fail2ban Blocklist | 36 | 61 | 63 | 3k+ | | | SQL query is not prepared |
| #6727 | Export emails | 83 | 8 | 7 | 500 | | | Direct Query |
| #6728 | Easy Testimonial Slider and Form | 37 | 14 | 144 | 800 | | | Request data is not unslashed |
| #6729 | Enhanced AJAX Add to Cart for WooCommerce | 46 | 90 | 78 | 600 | | | Missing Arg Domain |
| #6730 | WPC Admin Columns | 97 | | 26 | 1k+ | | | Direct Query |
| #6731 | Product Time Countdown for WooCommerce | 52 | 7 | 36 | 400 | | | Input is not sanitized |
| #6732 | Popup for Contact Form 7 | 73 | 13 | 7 | 800 | | | Setting is missing a sanitization callback |
| #6733 | Duplicate Widget | 74 | 17 | 0 | 1k+ | | | Output is not escaped |
| #6734 | WP Admin Category Search | 58 | 23 | 11 | 2k+ | | | Unsafe printing function |
| #6735 | Sharing buttons shortcode for Jetpack | 98 | 3 | 2 | 800 | | | Missing direct file access protection |
| #6736 | CiviCRM Member Sync | 76 | 8 | 70 | 800 | | | Non-prefixed global variable |
| #6737 | WP MapIt | 98 | 6 | 3 | 2k+ | | | wp function not compatible with requires wp |
| #6738 | Lemmony Companion | 95 | 13 | 5 | 2k+ | | | block api version too low |
| #6739 | WP Mapbox GL JS Maps | 28 | 104 | 119 | 1k+ | | | Output is not escaped |
| #6740 | Image Carousel For Divi | 23 | 569 | 1,309 | 1k+ | | | Non-prefixed global variable |
| #6741 | Add Pinterest conversion tags for Pinterest Ads + Site verification | 40 | 88 | 26 | 1k+ | | | Output is not escaped |
| #6742 | Reusable Content Blocks | 37 | 349 | 14 | 4k+ | | | Text Domain Mismatch |
| #6743 | Admin Color Schemer | 35 | 166 | 20 | 1k+ | | | Exception output is not escaped |
| #6744 | Team Member Block | 81 | 15 | 14 | 1k+ | | | file system operations mkdir |
| #6745 | Disabler | 64 | 212 | 38 | 900 | | | Text Domain Mismatch |
| #6746 | Library Bookshelves | 48 | 12 | 59 | 500 | | | Nonce verification recommended |
| #6747 | Categorify – WordPress Media Library Category & File Manager | 24 | 573 | 1,385 | 1k+ | | | Non-prefixed global variable |
| #6748 | WPC Order Tip for WooCommerce | 83 | | 55 | 1k+ | | | Non-prefixed global variable |
| #6749 | WP jQuery Plus | 88 | 7 | 5 | 900 | | | trademarked term |
| #6750 | PayTR Taksit Tablosu – WooCommerce | 38 | 67 | 39 | 3k+ | | | Non Singular String Literal Domain |