| #6851 | Swifty Image Widget | 39 | 114 | 28 | 900 | | | Output is not escaped |
| #6852 | Security Header Generator | 87 | 11 | 14 | 500 | | | Non Singular String Literal Text |
| #6853 | Social Share Block – Social Sharing Buttons for Posts and Pages | 94 | 2 | 1 | 2k+ | | | Discouraged text-domain loading |
| #6854 | Gosign – Background Container Block | 97 | 1 | 9 | 1k+ | | | Not In Footer |
| #6855 | Extended Post Status | 45 | 27 | 27 | 1k+ | | | Output is not escaped |
| #6856 | Virtuaria PagBank / PagSeguro for WooCommerce | 48 | 12 | 160 | 1k+ | | | Non-prefixed global variable |
| #6857 | User Posts Limit | 44 | 82 | 22 | 2k+ | | | Output is not escaped |
| #6858 | WPC Order Notes for WooCommerce | 54 | 20 | 25 | 900 | | | Output is not escaped |
| #6859 | AdWords Conversion Tracking Code | 43 | 26 | 25 | 1k+ | | | Non Singular String Literal Domain |
| #6860 | Elegant Custom Fonts | 53 | 15 | 17 | 3k+ | | | Output is not escaped |
| #6861 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | | | Non-prefixed global variable |
| #6862 | LitExtension: Store to WooCommerce Migration | 98 | 1 | 9 | 1k+ | | | Non-prefixed constant |
| #6863 | Verge3D Publishing and E-Commerce | 27 | 245 | 298 | 400 | | | Nonce verification recommended |
| #6864 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | | | Direct Query |
| #6865 | Variation Price Display For WooCommerce | 77 | 87 | 16 | 900 | | | Text Domain Mismatch |
| #6866 | Conditional Logic Emails, Fields, Redirect for Elementor Forms | 75 | 312 | 31 | 2k+ | | | wp function not compatible with requires wp |
| #6867 | Mailster SendGrid Integration | 83 | 23 | 3 | 1k+ | | | Missing Translators Comment |
| #6868 | Advanced Custom Fields – Contact Form 7 Field | 45 | 59 | 8 | 2k+ | | | Output is not escaped |
| #6869 | Base (formerly BaseLinker) – 300+ marketplaces, 150+ carriers & PIM & OMS & WMS in one | 97 | 2 | 16 | 4k+ | | | Direct Query |
| #6870 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #6871 | eMagicOne Store Manager for WooCommerce | 91 | 6 | 19 | 500 | | | Non-prefixed class |
| #6872 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #6873 | JobWP – Job Board Plugin for WordPress | Job Listings, Career Page & Applications | 28 | 872 | 391 | 1k+ | | | Non Singular String Literal Text |
| #6874 | Hide Broken Shortcodes | 99 | 1 | 3 | 400 | | | unexpected markdown file |
| #6875 | Da Reactions | 39 | 15 | 140 | 400 | | | Request data is not unslashed |
| #6876 | YOURLS Link Creator | 37 | 196 | 39 | 500 | | | Text Domain Mismatch |
| #6877 | Video Gallery Block – YouTube, Vimeo, Playlist & Lightbox | 99 | | 3 | 1k+ | | | Non-prefixed function |
| #6878 | Audience Analytics – by Quantcast | 76 | 17 | 3 | 1k+ | | | Text Domain Mismatch |
| #6879 | Wishlist for WooCommerce | 98 | 2 | 10 | 900 | | | Non-prefixed constant |
| #6880 | Gravity Fieldset for Gravity Forms | 73 | 14 | 1 | 900 | | | Output is not escaped |
| #6881 | Filter for Divi | 99 | 2 | 0 | 2k+ | | | Missing direct file access protection |
| #6882 | WP MyLinks | 33 | 354 | 206 | 1k+ | | | Text Domain Mismatch |
| #6883 | Disable Comments | 94 | 2 | 4 | 9k+ | | | trademarked term |
| #6884 | Albacross for WordPress | 73 | 18 | 5 | 1k+ | | | Text Domain Mismatch |
| #6885 | Basic Interactive World Map | 40 | 94 | 54 | 1k+ | | | Text Domain Mismatch |
| #6886 | Contact Form 7 Email Validation | 74 | 8 | 10 | 1k+ | | | Input is not validated |
| #6887 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #6888 | WP CountUP JS | 87 | 3 | 3 | 1k+ | | | trademarked term |
| #6889 | Expire Passwords | 92 | 7 | 2 | 500 | | | Missing Translators Comment |
| #6890 | WF Magnific Lightbox | 100 | | 0 | 1k+ | | | No open findings |
| #6891 | Host Header Injection Fix | 70 | 9 | 8 | 400 | | | Output is not escaped |
| #6892 | Simple Analytics | 35 | 25 | 20 | 1k+ | | | Output is not escaped |
| #6893 | Insert Code by Angie Makes | 51 | 43 | 8 | 900 | | | Output is not escaped |
| #6894 | Order Bump for WooCommerce | 23 | 1,720 | 1,562 | 600 | | | Output is not escaped |
| #6895 | Insert JavaScript and CSS | 41 | 64 | 19 | 400 | | | Text Domain Mismatch |
| #6896 | Search with Typesense | 40 | 81 | 122 | 700 | | | Non-prefixed global variable |
| #6897 | E-namad & Shamed Logo Manager | 58 | 26 | 2 | 2k+ | | | Output is not escaped |
| #6898 | DigitalOcean Spaces Sync | 41 | 80 | 8 | 500 | | | Text Domain Mismatch |
| #6899 | Show Stock Status for WooCommerce | 38 | 30 | 19 | 1k+ | | | Output is not escaped |
| #6900 | Bulk menu creator | 69 | 27 | 4 | 1k+ | | | Text Domain Mismatch |