| #7551 | Calculated fields for ACF | 66 | 5 | 18 | 1k+ | | | Non-prefixed global variable |
| #7552 | Really Simple Popup | 98 | 2 | 4 | 400 | | | Missing Version |
| #7553 | Admin Toolbar Menus | 98 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #7554 | Advance Canonical URL | 82 | 3 | 10 | 1k+ | | | Input is not validated |
| #7555 | Noindex Pages | 94 | 3 | 3 | 2k+ | | | Missing Version |
| #7556 | WiserNotify – Social Proof & FOMO Notifications, WooCommerce Sales Popups, Reviews & Announcement Bar | 62 | 13 | 32 | 1k+ | | | Request data is not unslashed |
| #7557 | Friends Link Widget | 49 | 86 | 1 | 500 | | | Output is not escaped |
| #7558 | Alt Magic: AI Image Alt Text Generator for WP & Image Rename | 39 | 61 | 112 | 1k+ | | | Direct Query |
| #7559 | Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales | 37 | 59 | 64 | 2k+ | | | SQL query is not prepared |
| #7560 | Simple Cookie Notification Bar | 51 | 49 | 6 | 1k+ | | | Text Domain Mismatch |
| #7561 | Remove Taxonomy URL | 73 | 17 | 16 | 1k+ | | | Output is not escaped |
| #7562 | Helcim for WooCommerce | 99 | | 4 | 700 | | | Discouraged text-domain loading |
| #7563 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #7564 | Autopreenchimento de endereço em formulários | 96 | 5 | 1 | 1k+ | | | Missing direct file access protection |
| #7565 | Porn Videos Embed | 96 | 17 | 2 | 2k+ | | | Missing direct file access protection |
| #7566 | WPSSO WP Sitemaps XML with News, Image, and Video Sitemap | 75 | 60 | 24 | 400 | | | Missing Translators Comment |
| #7567 | Known Agents – Track AI Bots and Crawlers, Block Scrapers, Analyze LLM Referral Traffic | 57 | 37 | 12 | 1k+ | | | Setting is missing a sanitization callback |
| #7568 | Website Optimization – Plerdy | 73 | 48 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #7569 | Weather Widget Pro | 42 | 294 | 5 | 1k+ | | | Output is not escaped |
| #7570 | Wayfinder | 98 | 2 | 2 | 700 | | | Non-prefixed function |
| #7571 | Creative Clans Embed Script | 63 | 10 | 9 | 600 | | | Input is not sanitized |
| #7572 | Preload Featured Images | 91 | 2 | 2 | 1k+ | | | Output is not escaped |
| #7573 | Rapyd Payment Extension for WooCommerce | 75 | 50 | 33 | 400 | | | Text Domain Mismatch |
| #7574 | Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor | 97 | 2 | 14 | 1k+ | | | Dynamic hook name |
| #7575 | ACME Divi Modules | 32 | 573 | 35 | 400 | | | Text Domain Mismatch |
| #7576 | Honeypot Toolkit | 32 | 155 | 770 | 400 | | | Missing nonce verification |
| #7577 | Book Now | 41 | 75 | 14 | 1k+ | | | Output is not escaped |
| #7578 | Slider Templates | 45 | 10 | 33 | 1k+ | | | Request data is not unslashed |
| #7579 | Hide Archive Label | 100 | | 0 | 900 | | | No open findings |
| #7580 | Super List Block | 99 | 3 | 0 | 800 | | | Missing direct file access protection |
| #7581 | Advanced Custom Fields: Ninjaforms Add-on | 76 | 43 | 8 | 1k+ | | | Text Domain Mismatch |
| #7582 | CloudFilt Bot & Spam Protection | 51 | 11 | 22 | 600 | | | Output is not escaped |
| #7583 | Unlimited Background Slider | 39 | 66 | 53 | 600 | | | Output is not escaped |
| #7584 | Block Editor Bootstrap Blocks | 39 | 173 | 50 | 900 | | | Text Domain Mismatch |
| #7585 | Rename wp-admin login | 42 | 23 | 38 | 8k+ | | | Output is not escaped |
| #7586 | Razorpay Subscriptions for WooCommerce | 44 | 28 | 35 | 600 | | | Exception output is not escaped |
| #7587 | Multi-Carrier EasyPost Shipping Methods & Address Validation for WooCommerce | 33 | 424 | 69 | 400 | | | Non Singular String Literal Domain |
| #7588 | Custom Cursor For WP | 77 | 10 | 7 | 1k+ | | | Setting is missing a sanitization callback |
| #7589 | Just TinyMCE Custom Styles | 36 | 112 | 28 | 1k+ | | | Missing Arg Domain |
| #7590 | WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics) | 69 | 9 | 24 | 700 | | | Non-prefixed constant |
| #7591 | WPC Coupon Listing for WooCommerce | 98 | | 18 | 1k+ | | | Non-prefixed class |
| #7592 | Archive Title | 98 | 2 | 11 | 1k+ | | | Non-prefixed global variable |
| #7593 | NoFollow Link | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #7594 | WP Click to Chat – Email, Live Chat, Call & Book Now Buttons | 94 | 43 | 47 | 1k+ | | | wp function not compatible with requires wp |
| #7595 | Inspectlet – AI-Powered Session Replay, Heatmaps & Analytics | 83 | 13 | 2 | 700 | | | Text Domain Mismatch |
| #7596 | Themx Maximum Upload File Size | Increase Maximum Upload File Size | 93 | 17 | 14 | 1k+ | | | Text Domain Mismatch |
| #7597 | Site Health Tool Manager | 57 | 13 | 5 | 1k+ | | | Unsafe printing function |
| #7598 | Advanced Custom Fields: Accordion Tab Field | 74 | 14 | 11 | 800 | | | Missing Version |
| #7599 | ANAC XML Viewer | 73 | 21 | 1 | 1k+ | | | Output is not escaped |
| #7600 | SX User Name Security | 46 | 42 | 9 | 900 | | | Output is not escaped |