| #7351 | Soro – SEO Autopilot & AI Content Writer | 83 | 4 | 10 | 10k+ | | | Input is not sanitized |
| #7352 | Add Any Extension to Pages | 71 | 3 | 10 | 2k+ | | | Input is not sanitized |
| #7353 | Easy UTM Tracking with Contact Form 7 | 85 | 3 | 10 | 2k+ | | | Input is not validated |
| #7354 | Conditional Fees for WooCommerce Lite | 26 | 566 | 1,303 | 500 | | | Non-prefixed global variable |
| #7355 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #7356 | Whitelist IP For Limit Login Attempts | 48 | 18 | 12 | 500 | | | Output is not escaped |
| #7357 | ShareThis Reaction Buttons | 35 | 1 | 7 | 600 | | | Non-prefixed global variable |
| #7358 | SheetDB – get your Google Spreadsheet data | 98 | 1 | 5 | 700 | | | Missing Version |
| #7359 | Protect Login | 100 | | 0 | 600 | | | No open findings |
| #7360 | Custom Sidebars by ProteusThemes | 62 | 17 | 23 | 1k+ | | | Missing nonce verification |
| #7361 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | | | Unsafe printing function |
| #7362 | Advanced Categories Widget | 39 | 170 | 41 | 700 | | | Output is not escaped |
| #7363 | Feed JSON | 86 | 9 | 15 | 500 | | | Non-prefixed global variable |
| #7364 | Virtuaria Correios – Frete, Etiqueta, Rastreio e Declaração | 39 | 18 | 81 | 500 | | | Nonce verification recommended |
| #7365 | Unlimited Logo Carousel | 40 | 286 | 15 | 500 | | | Text Domain Mismatch |
| #7366 | Pofily – WooCommerce Product Filters | 86 | 1 | 322 | 600 | | | Non-prefixed global variable |
| #7367 | Auto Login for Sakura Rental Server | 35 | 3 | 3 | 10k+ | | | Hidden files included |
| #7368 | Payment Gateway – nexi Alpha Bank for WooCommerce | 39 | 96 | 40 | 1k+ | | | Non Singular String Literal Domain |
| #7369 | Manage User Columns | 42 | 15 | 27 | 1k+ | | | Request data is not unslashed |
| #7370 | Add Featured Image Custom Link | 89 | 3 | 6 | 1k+ | | | Request data is not unslashed |
| #7371 | QNAP NAS Backup | 33 | 374 | 70 | 2k+ | | | Non Singular String Literal Domain |
| #7372 | List Last Changes | 58 | 50 | 15 | 1k+ | | | Output is not escaped |
| #7373 | Advanced 301 and 302 Redirect | 37 | 88 | 354 | 1k+ | | | Non-prefixed global variable |
| #7374 | Media Library File Download | 23 | 615 | 1,286 | 1k+ | | | Non-prefixed global variable |
| #7375 | Яндекс.ПДС Пингер / Yandex Site search pinger | 64 | 21 | 5 | 800 | | | Output is not escaped |
| #7376 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #7377 | GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels | 24 | 469 | 592 | 1k+ | | | Non-prefixed global variable |
| #7378 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | | | Unsafe printing function |
| #7379 | Custom Currency for WooCommerce | 70 | 63 | 5 | 2k+ | | | Missing direct file access protection |
| #7380 | Auto Tag Creator | 98 | 23 | 1 | 1k+ | | | Text Domain Mismatch |
| #7381 | Gravity Forms Personality Quiz Add-On | 98 | 7 | 3 | 500 | | | Text Domain Mismatch |
| #7382 | Team Section Block – Showcase Team Members with Layout Options | 83 | 1 | 21 | 1k+ | | | Non-prefixed namespace |
| #7383 | Check Conflicts | 83 | 36 | 12 | 1k+ | | | Missing Arg Domain |
| #7384 | Page Sidebar for Twenty Seventeen | 89 | 110 | 14 | 1k+ | | | Text Domain Mismatch |
| #7385 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #7386 | WP Permastructure | 79 | 14 | 6 | 400 | | | Missing Arg Domain |
| #7387 | Product Image Hover Effects WOOC – WPSHARE247 | 37 | 161 | 94 | 800 | | | Output is not escaped |
| #7388 | UddoktaPay | 99 | 1 | 5 | 1k+ | | | Non-prefixed hook name |
| #7389 | Admin Dashboard RSS Feed | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #7390 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | | | Output is not escaped |
| #7391 | Global Site Tag Tracking | 79 | 11 | 1 | 1k+ | | | Output is not escaped |
| #7392 | Include Mastodon Feed | 90 | 11 | 3 | 800 | | | Non-prefixed global variable |
| #7393 | The Cache Purger | 51 | 16 | 16 | 1k+ | | | Non Singular String Literal Text |
| #7394 | SF Author Url Control | 68 | 29 | 4 | 1k+ | | | Output is not escaped |
| #7395 | TZ Flickr Widget | 40 | 67 | 7 | 500 | | | Output is not escaped |
| #7396 | Vertical marquee post title | 42 | 109 | 68 | 400 | | | Output is not escaped |
| #7397 | Quick Copy – Duplicate Posts & Pages | 97 | | 3 | 1k+ | | | Discouraged text-domain loading |
| #7398 | WC-AC Hook | 38 | 44 | 72 | 1k+ | | | Missing nonce verification |
| #7399 | 코드엠샵 마이사이트 – MSHOP MY SITE | 36 | 58 | 55 | 800 | | | Output is not escaped |
| #7400 | Gutena Newsletter – Subscriber Block & Connect Mailchimp | 97 | 18 | 3 | 1k+ | | | Text Domain Mismatch |