| #7001 | Easy Hotel – Powerful Hotel Booking | 70 | 4 | 1,900 | 800 | | | Non-prefixed global variable |
| #7002 | One to one user Chat by WPGuppy | 31 | 74 | 187 | 700 | | | Non-prefixed global variable |
| #7003 | Qikink Print On Demand and DropShipping | 61 | 14 | 23 | 1k+ | | | Input is not validated |
| #7004 | SVGator | 97 | 15 | 0 | 1k+ | | | Missing direct file access protection |
| #7005 | Product Expiry for WooCommerce | 41 | 31 | 85 | 2k+ | | | Request data is not unslashed |
| #7006 | User Login Notifier for WordPress | 41 | 72 | 26 | 1k+ | | | Output is not escaped |
| #7007 | Nooz | 35 | 287 | 108 | 500 | | | Text Domain Mismatch |
| #7008 | Tawk.To Manager | 39 | 204 | 21 | 600 | | | Output is not escaped |
| #7009 | ACF Recent Posts Widget | 39 | 260 | 16 | 500 | | | Output is not escaped |
| #7010 | WP Scroll Depth | 66 | 29 | 9 | 1k+ | | | Output is not escaped |
| #7011 | Partial Shipment for Woocommerce | 99 | | 9 | 1k+ | | | Non-prefixed class |
| #7012 | List View Google Calendar | 100 | | 0 | 500 | | | No open findings |
| #7013 | Blog Time | 57 | 38 | 6 | 600 | | | Output is not escaped |
| #7014 | Mailster Google Analytics | 63 | 26 | 9 | 800 | | | Output is not escaped |
| #7015 | Codevyne SEO Meta Keywords | 89 | 3 | 7 | 3k+ | | | Non-prefixed function |
| #7016 | Media Focus Point | 78 | 11 | 6 | 6k+ | | | Output is not escaped |
| #7017 | PVB Contact Form 7 Calculator | 99 | 4 | 3 | 600 | | | Missing direct file access protection |
| #7018 | Accessibility | 38 | 66 | 61 | 1k+ | | | Non-prefixed global variable |
| #7019 | Better Post & Filter Widgets for Elementor | 84 | 7 | 27 | 3k+ | | | slow db query tax query |
| #7020 | Image Editor by Pixo | 40 | 126 | 66 | 800 | | | Output is not escaped |
| #7021 | QR Code PicPay for WooCommerce | 61 | 15 | 25 | 500 | | | Non-prefixed global variable |
| #7022 | Reorder by Term | 39 | 20 | 84 | 1k+ | | | Request data is not unslashed |
| #7023 | Which Template | 98 | 4 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #7024 | All-in-One Sticky Anything – Click to Call, Fixed Widget, Sticky Header, Menu & Sidebar | 96 | | 7 | 1k+ | | | Non-prefixed global variable |
| #7025 | Social Media Widget | 47 | 51 | 3 | 400 | | | Output is not escaped |
| #7026 | Post Views for Jetpack | 83 | 12 | 3 | 1k+ | | | Output is not escaped |
| #7027 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | | Output is not escaped |
| #7028 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | | | Output is not escaped |
| #7029 | Yandex Mail SMTP Server for WordPress | 78 | 16 | 5 | 2k+ | | | Text Domain Mismatch |
| #7030 | Smart App Banner | 43 | 47 | 49 | 600 | | | Output is not escaped |
| #7031 | RSS Featured Image | 96 | 4 | 2 | 2k+ | | | Missing direct file access protection |
| #7032 | Enable vCard Upload | 97 | 3 | 1 | 2k+ | | | outdated tested upto header |
| #7033 | Chatbase | 91 | 4 | 4 | 5k+ | | | Non-prefixed function |
| #7034 | Pastacode | 33 | 77 | 66 | 400 | | | Non-prefixed global variable |
| #7035 | Contact Form 7 GetResponse Extension | 40 | 90 | 18 | 1k+ | | | Text Domain Mismatch |
| #7036 | QuadMenu – Astra Mega Menu | 81 | 10 | 2 | 600 | | | Text Domain Mismatch |
| #7037 | Product Size Chart for Woocommerce | 39 | 20 | 169 | 600 | | | Non-prefixed global variable |
| #7038 | Block Referer Spam | Pending | - | - | 500 | | | Pending scan |
| #7039 | Edit Custom Fields | 96 | 10 | 19 | 2k+ | | | Direct Query |
| #7040 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 500 | | | Missing nonce verification |
| #7041 | MC4WP: WPML Integration | 91 | 7 | 9 | 2k+ | | | Missing direct file access protection |
| #7042 | Leo Product Recommendations for WooCommerce | 76 | 3 | 79 | 400 | | | Short URL found |
| #7043 | Timeline Module for Divi | 84 | 16 | 11 | 3k+ | | | Text Domain Mismatch |
| #7044 | linkPizza-Manager | 39 | 46 | 23 | 700 | | | Exception output is not escaped |
| #7045 | Creta Testimonial Showcase | 65 | 28 | 41 | 3k+ | | | Non-prefixed global variable |
| #7046 | Custom field finder | 75 | 9 | 3 | 2k+ | | | Output is not escaped |
| #7047 | Form data to kintone | 56 | 25 | 22 | 1k+ | | | Output is not escaped |
| #7048 | Thumbnail Editor | 35 | 187 | 68 | 600 | | | wp function not compatible with requires wp |
| #7049 | Mastodon Autopost | 40 | 41 | 50 | 700 | | | Output is not escaped |
| #7050 | AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations | 84 | 88 | 20 | 3k+ | | | Text Domain Mismatch |