| #7101 | Widget Icon | 53 | 53 | 10 | 700 | | | Output is not escaped |
| #7102 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | | | Non-prefixed global variable |
| #7103 | WooBuilder | 49 | 20 | 17 | 700 | | | Output is not escaped |
| #7104 | Simple Table Manager | 99 | 2 | 2 | 400 | | | Discouraged text-domain loading |
| #7105 | WP-Font-Resizer | 90 | 14 | 6 | 400 | | | wp function not compatible with requires wp |
| #7106 | CIELO API PIX, credit card, debit payment for WooCommerce | 58 | 9 | 121 | 700 | | | Nonce verification recommended |
| #7107 | WP Hydra | 35 | 10 | 18 | 1k+ | | | Input is not sanitized |
| #7108 | SSLCommerz Payment Gateway | 38 | 21 | 132 | 2k+ | | | Non-prefixed global variable |
| #7109 | Simple Slug Translate | 74 | 32 | 3 | 1k+ | | | Non Singular String Literal Domain |
| #7110 | Widget for Google Reviews | 97 | 3 | 4 | 1k+ | | | Discouraged text-domain loading |
| #7111 | DSGVO Youtube | 41 | 48 | 29 | 1k+ | | | Unsafe printing function |
| #7112 | Post Cloner | 41 | 25 | 15 | 1k+ | | | Text Domain Mismatch |
| #7113 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 400 | | | rand rand |
| #7114 | BNE Gallery Extended | 86 | 8 | 0 | 1k+ | | | Unsafe printing function |
| #7115 | Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress | 94 | 1 | 18 | 3k+ | | | Non-prefixed hook name |
| #7116 | WC Moneris Payment Gateway | 56 | 82 | 20 | 900 | | | Text Domain Mismatch |
| #7117 | Floating Contact Button | 77 | 6 | 3 | 1k+ | | | Output is not escaped |
| #7118 | WPVibe – MCP Server for WordPress. Connect Claude, ChatGPT, Gemini & Cursor | 52 | 19 | 58 | 4k+ | | | Interpolated SQL is not prepared |
| #7119 | Easy Noindex And Nofollow | 35 | 55 | 18 | 400 | | | Output is not escaped |
| #7120 | HT Builder – WordPress Theme Builder for Elementor | 37 | 142 | 41 | 1k+ | | | Output is not escaped |
| #7121 | Help Scout | 35 | 11 | 13 | 400 | | | Missing direct file access protection |
| #7122 | PDF Catalog for WooCommerce | 38 | 30 | 46 | 1k+ | | | Nonce verification recommended |
| #7123 | Simple CPT | 41 | 280 | 60 | 4k+ | | | Unsafe printing function |
| #7124 | WPOSS阿里云对象存储 | 19 | 269 | 315 | 900 | | | Non-prefixed namespace |
| #7125 | SameSite Cookies | 98 | 3 | 2 | 700 | | | Missing direct file access protection |
| #7126 | Price Table Block | 81 | 15 | 16 | 900 | | | file system operations mkdir |
| #7127 | AcyMailing integration for WooCommerce | 99 | | 4 | 400 | | | Non-prefixed class |
| #7128 | Image Refresh | 35 | 4 | 6 | 900 | | | Dynamic hook name |
| #7129 | WoowGallery | 60 | 15 | 178 | 1k+ | | | Non-prefixed global variable |
| #7130 | Add-on Gravity Forms – MailPoet 3 | 39 | 31 | 33 | 600 | | | Output is not escaped |
| #7131 | EU Cookie Law Compliance | 38 | 151 | 22 | 2k+ | | | Non Singular String Literal Domain |
| #7132 | FAQly – Ultimate FAQ | 96 | | 2 | 1k+ | | | Nonce verification recommended |
| #7133 | Simple Block Gallery | 100 | | 0 | 1k+ | | | No open findings |
| #7134 | Fr Multi Bank Transfer Payment Gateways for WooCommerce | 89 | 28 | 2 | 2k+ | | | Text Domain Mismatch |
| #7135 | Tilda-publishing | 29 | 219 | 78 | 700 | | | Output is not escaped |
| #7136 | Hatom/hentry remover (Fixes errors in Google Webmaster Tools) | 98 | 2 | 2 | 1k+ | | | mismatched plugin name |
| #7137 | Pelecard Gateway | 76 | 295 | 54 | 400 | | | Text Domain Mismatch |
| #7138 | Estonian Shipping Methods for WooCommerce | 64 | 97 | 16 | 1k+ | | | Text Domain Mismatch |
| #7139 | fitness calculators | 70 | 94 | 25 | 600 | | | Missing Arg Domain |
| #7140 | Social Media Feed for WordPress | 99 | 1 | 2 | 400 | | | mismatched plugin name |
| #7141 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | | | curl curl setopt |
| #7142 | Advanced Addons – Animation and Custom CSS for Gutenberg and Elementor | 97 | 1 | 8 | 700 | | | Not In Footer |
| #7143 | Zapper Payments | 69 | 11 | 11 | 600 | | | Output is not escaped |
| #7144 | Dintero Checkout for WooCommerce Payment Methods | 35 | 58 | 48 | 600 | | | Text Domain Mismatch |
| #7145 | Dashboard To-Do List | 50 | 21 | 8 | 1k+ | | | Unsafe printing function |
| #7146 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #7147 | PHP Native Password Hash | 90 | 7 | 6 | 2k+ | | | Non-prefixed global variable |
| #7148 | Custom iFrame – Embed PDFs, Videos, and External Content in WordPress (Elementor & Gutenberg) | 91 | 13 | 5 | 3k+ | | | wp function not compatible with requires wp |
| #7149 | PlayerJS – Free Custom HTML5 Video and Audio Player Builder | 85 | 1 | 13 | 1k+ | | | Missing Version |
| #7150 | EDD Hide Download | 65 | 13 | 13 | 600 | | | Output is not escaped |