| #7051 | Geo Redirect | 97 | 10 | 1 | 1k+ | | | Missing direct file access protection |
| #7052 | Attendance Manager | 85 | 93 | 21 | 800 | | | date date |
| #7053 | Grid Shortcodes | 92 | 3 | 2 | 2k+ | | | Missing Version |
| #7054 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | | | Output is not escaped |
| #7055 | Support WebP – Upload webp files in wordpress without hassle | 99 | 1 | 3 | 4k+ | | | Discouraged text-domain loading |
| #7056 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #7057 | WP Safe Mode | 38 | 95 | 55 | 2k+ | | | Output is not escaped |
| #7058 | MilesWeb Tools | 95 | 4 | 49 | 10k+ | | | Non-prefixed global variable |
| #7059 | Expand Divi | 28 | 91 | 100 | 1k+ | | | Non-prefixed global variable |
| #7060 | Order Delivery Date And Time | 75 | 26 | 28 | 1k+ | | | Text Domain Mismatch |
| #7061 | Termin-Kalender | 100 | | 0 | 400 | | | No open findings |
| #7062 | ELEX WooCommerce Address Validation & Google Address Autocomplete Plugin | 78 | 73 | 40 | 700 | | | Missing Arg Domain |
| #7063 | Custom Profile Menu for BuddyPress | 77 | 8 | 4 | 400 | | | Output is not escaped |
| #7064 | WPC Smart Notifications for WooCommerce | 89 | | 79 | 600 | | | Non-prefixed global variable |
| #7065 | SpreadsheetConverter Calculator | 99 | 24 | 1 | 600 | | | Text Domain Mismatch |
| #7066 | Auto Focus Keyword for SEO | 47 | 13 | 44 | 2k+ | | | Interpolated SQL is not prepared |
| #7067 | Comment Moderation/Notification Recipients | 98 | 2 | 7 | 1k+ | | | Non-prefixed global variable |
| #7068 | Export Categories | 66 | 22 | 13 | 1k+ | | | Output is not escaped |
| #7069 | Gettext override translations | 59 | 33 | 7 | 2k+ | | | Missing Arg Domain |
| #7070 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | | | Non-prefixed global variable |
| #7071 | RPS Include Content | 73 | 13 | 2 | 700 | | | Output is not escaped |
| #7072 | WP AutoTags | 89 | 4 | 5 | 1k+ | | | trademarked term |
| #7073 | Shipping by Rules for WooCommerce | 39 | 130 | 48 | 500 | | | Output is not escaped |
| #7074 | ERE Colors – Essential Real Estate Add-On | 92 | 4 | 1 | 1k+ | | | Missing direct file access protection |
| #7075 | WPVibe – MCP Server for WordPress. Connect Claude, ChatGPT, Gemini & Cursor | 52 | 20 | 57 | 5k+ | | | Interpolated SQL is not prepared |
| #7076 | WPC Smart Messages for WooCommerce | 78 | 1 | 58 | 1k+ | | | Non-prefixed global variable |
| #7077 | Announce from the Dashboard | 38 | 138 | 24 | 7k+ | | | Non Singular String Literal Domain |
| #7078 | WP Gravity Forms Constant Contact Plugin | 31 | 684 | 164 | 600 | | | Text Domain Mismatch |
| #7079 | Algori Social Share Buttons | 97 | 2 | 10 | 1k+ | | | Missing Version |
| #7080 | WPReplace内容字符替换插件 | 33 | 209 | 195 | 800 | | | Non Singular String Literal Domain |
| #7081 | DD Last Viewed | 34 | 193 | 132 | 500 | | | Output is not escaped |
| #7082 | PDF for WPForms + Drag and Drop Template Builder | 26 | 674 | 113 | 1k+ | | | wp function not compatible with requires wp |
| #7083 | Out of the Block: OpenStreetMap | 35 | 9 | 4 | 800 | | | Missing direct file access protection |
| #7084 | Import external attachments | 41 | 18 | 26 | 2k+ | | | Output is not escaped |
| #7085 | Libro de Reclamaciones y Quejas | 36 | 266 | 124 | 3k+ | | | Text Domain Mismatch |
| #7086 | First payment date for WooCommerce Subscriptions | 42 | 42 | 19 | 400 | | | Output is not escaped |
| #7087 | Tilopay | 37 | 35 | 130 | 1k+ | | | Nonce verification recommended |
| #7088 | FAQ Block For Gutenberg | 98 | 3 | 5 | 4k+ | | | trademarked term |
| #7089 | Supplier Order Email | 36 | 54 | 105 | 400 | | | Output is not escaped |
| #7090 | WebMan Templates | 95 | 1 | 3 | 1k+ | | | Non-prefixed global variable |
| #7091 | Sessions | 33 | 196 | 103 | 800 | | | Output is not escaped |
| #7092 | Sensei LMS Post to Course Creator | 91 | 6 | 7 | 1k+ | | | Missing Translators Comment |
| #7093 | Custom Author Byline | 66 | 11 | 8 | 500 | | | Output is not escaped |
| #7094 | Sync QCloud COS | 36 | 63 | 109 | 600 | | | Non-prefixed function |
| #7095 | Unit Price for WooCommerce | 44 | 112 | 63 | 1k+ | | | Output is not escaped |
| #7096 | Smart JavaScript Auto Loader | 44 | 83 | 2 | 400 | | | Output is not escaped |
| #7097 | Voice Search | 99 | 2 | 1 | 600 | | | Missing direct file access protection |
| #7098 | Bulk Edit YOAST SEO fields in Spreadsheet | 61 | 56 | 16 | 1k+ | | | Non Singular String Literal Domain |
| #7099 | Material Admin Theme | 98 | 2 | 3 | 1k+ | | | Missing Version |
| #7100 | Smartslider | 83 | 13 | 0 | 600 | | | Output is not escaped |