| #7151 | Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms | 48 | 34 | 14 | 800 | | | Non Singular String Literal Domain |
| #7152 | Gravity Forms: Multiple Form Instances | 35 | 6 | 6 | 700 | | | Hidden files included |
| #7153 | Custom Post Type Auto Menu | 39 | 54 | 33 | 500 | | | Text Domain Mismatch |
| #7154 | BinancePay Checkout for WooCommerce | 84 | 5 | 14 | 800 | | | Input is not validated |
| #7155 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | | | Exception output is not escaped |
| #7156 | StifLi Flex MCP – MCP Server with undo for ChatGPT, Claude & Gemini | 42 | 2 | 111 | 1k+ | | | Interpolated SQL is not prepared |
| #7157 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #7158 | Duitku Payment Gateway | 36 | 507 | 107 | 700 | | | Text Domain Mismatch |
| #7159 | Media Library Downloader | 35 | 21 | 16 | 4k+ | | | Output is not escaped |
| #7160 | Video Background Block – Add Stunning Video Backgrounds to Any Section | 75 | 35 | 90 | 2k+ | | | Non-prefixed global variable |
| #7161 | Humans TXT | 37 | 159 | 86 | 400 | | | Output is not escaped |
| #7162 | WT GeoTargeting | 32 | 89 | 43 | 1k+ | | | Output is not escaped |
| #7163 | Relative Image URLs | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #7164 | Icon Separator | 100 | | 0 | 1k+ | | | No open findings |
| #7165 | Custom Color Palette for Gutenberg | 98 | 2 | 4 | 1k+ | | | Discouraged text-domain loading |
| #7166 | Content Anchor Links | 90 | 6 | 5 | 1k+ | | | Non-prefixed hook name |
| #7167 | Product Categories/Tags Bottom Description for WooCommerce | 47 | 60 | 23 | 3k+ | | | Text Domain Mismatch |
| #7168 | User Access Shortcodes | 92 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #7169 | Simple Image Popup | 73 | 21 | 5 | 1k+ | | | Output is not escaped |
| #7170 | Disable Revisions | 90 | 5 | 5 | 1k+ | | | Direct Query |
| #7171 | Magni Image Flip For WooCommerce | 86 | 24 | 8 | 700 | | | Text Domain Mismatch |
| #7172 | G-Forms hCaptcha | 88 | 7 | 5 | 3k+ | | | Missing direct file access protection |
| #7173 | blueimp lightbox | 75 | 19 | 2 | 1k+ | | | Output is not escaped |
| #7174 | Better WordPress External Links | 39 | 130 | 35 | 400 | | | Non Singular String Literal Domain |
| #7175 | Universally – AI Translation & Multilingual SEO: Translate Your Site into 110+ Languages | 100 | | 1 | 10k+ | | | mismatched plugin name |
| #7176 | Dokan Menu Hider | 95 | 8 | 2 | 500 | | | Text Domain Mismatch |
| #7177 | Elfsight Blocks for Elementor — 80+ Widgets | 35 | 444 | 3 | 2k+ | | | Text Domain Mismatch |
| #7178 | Media Grid | 41 | 42 | 44 | 2k+ | | | Missing Arg Domain |
| #7179 | Simple No Comments | 95 | 7 | 8 | 1k+ | | | Direct Query |
| #7180 | Pedido Mínimo para WooCommerce | 73 | 8 | 14 | 1k+ | | | Nonce verification recommended |
| #7181 | Expanding Archives | 54 | 37 | 9 | 3k+ | | | Output is not escaped |
| #7182 | StreamWeasels YouTube Integration | 24 | 544 | 1,384 | 1k+ | | | Non-prefixed global variable |
| #7183 | Pronamic Client | 35 | 111 | 48 | 700 | | | Output is not escaped |
| #7184 | Tutor LMS Divi Modules | 30 | 420 | 722 | 1k+ | | | Non-prefixed global variable |
| #7185 | TableKit – WordPress Table Builder for Data Tables, WooCommerce Product Tables & Post Tables | 56 | 80 | 20 | 3k+ | | | Missing Translators Comment |
| #7186 | Post Template | 70 | 12 | 11 | 400 | | | Missing nonce verification |
| #7187 | Yampi Checkout | 70 | 6 | 10 | 900 | | | Nonce verification recommended |
| #7188 | wpsection | 77 | 131 | 554 | 3k+ | | | Non-prefixed global variable |
| #7189 | WPD Beaver Builder Additions | 35 | 406 | 35 | 600 | | | Non Singular String Literal Domain |
| #7190 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | | | Output is not escaped |
| #7191 | Advanced Posts Listing – Show Post List Easily | 98 | 31 | 5 | 3k+ | | | Missing Arg Domain |
| #7192 | Semrush Content Toolkit | 55 | 22 | 24 | 2k+ | | | Non-prefixed global variable |
| #7193 | DOMINATION! Let WooCommerce take control of your dashboard | 98 | 2 | 3 | 400 | | | trademarked term |
| #7194 | Boei – AI Chatbot, Live Chat & 50+ Channels for WordPress | 78 | 9 | 4 | 1k+ | | | Output is not escaped |
| #7195 | Eazy Enable Blogroll | 98 | 4 | 2 | 1k+ | | | Missing Arg Domain |
| #7196 | Advanced Post Excerpt | 98 | 2 | 2 | 2k+ | | | Non-prefixed hook name |
| #7197 | WP Quick Post Duplicator | 92 | 3 | 10 | 2k+ | | | trademarked term |
| #7198 | Ultimate Custom Cursor | 40 | 138 | 3 | 800 | | | Output is not escaped |
| #7199 | SV Proven Expert | 26 | 747 | 380 | 900 | | | Output is not escaped |
| #7200 | Fr Custom Payment Gateway Icon for WooCommerce | 99 | 2 | 1 | 2k+ | | | Non-prefixed function |