| #7651 | Google Photos embed | 92 | 2 | 5 | 700 | | | trademarked term |
| #7652 | VigIA – AI Visibility, Analytics & Control | 100 | | 0 | 1k+ | | | No open findings |
| #7653 | Meks Quick Plugin Disabler | 91 | 3 | 8 | 1k+ | | | Nonce verification recommended |
| #7654 | SportsPress for Cricket | 40 | 122 | 34 | 500 | | | Text Domain Mismatch |
| #7655 | Custom Field For WP Job Manager | 69 | 16 | 54 | 900 | | | Non-prefixed global variable |
| #7656 | Reusable Gutenberg Blocks Widget | 68 | 24 | 9 | 500 | | | Output is not escaped |
| #7657 | Before After Image Comparison Slider for WPBakery Page Builder | 35 | 58 | 59 | 1k+ | | | Output is not escaped |
| #7658 | Search and Replace for Block Editor | 91 | 2 | 1 | 600 | | | Output is not escaped |
| #7659 | WPMagPlus Companion | 79 | 104 | 16 | 700 | | | Text Domain Mismatch |
| #7660 | BWD Elementor Addons | 21 | 670 | 1,168 | 400 | | | Non-prefixed global variable |
| #7661 | Add-on Brevo for Gravity Forms | 83 | 14 | 12 | 1k+ | | | Text Domain Mismatch |
| #7662 | Online Payments with iK Pay Gateway | 64 | 12 | 29 | 1k+ | | | Missing nonce verification |
| #7663 | Security Ninja For MainWP | 47 | 246 | 71 | 500 | | | Text Domain Mismatch |
| #7664 | Topic Progression Using Storyline/Captivate for LearnDash | 35 | 382 | 25 | 400 | | | Text Domain Mismatch |
| #7665 | Light Modal Block | 99 | 1 | 1 | 2k+ | | | Missing direct file access protection |
| #7666 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | | | Non-prefixed hook name |
| #7667 | Remove Admin Bar logo | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #7668 | Blocks for ACF Fields — Display Custom Fields in the Block Editor | 98 | | 21 | 1k+ | | | Non-prefixed hook name |
| #7669 | Rename Taxonomies by WebMan | 69 | 32 | 7 | 1k+ | | | Missing Arg Domain |
| #7670 | Publish Post Email Notification | 61 | 16 | 18 | 600 | | | Output is not escaped |
| #7671 | Review Stream | 56 | 41 | 42 | 400 | | | Non-prefixed global variable |
| #7672 | AffiliateWP – External Referral Links | 77 | 30 | 11 | 800 | | | Text Domain Mismatch |
| #7673 | Trusona for WordPress | 55 | 8 | 34 | 500 | | | Non-prefixed function |
| #7674 | NewsmanApp | 94 | 747 | 4 | 400 | | | Text Domain Mismatch |
| #7675 | AweSplash – Just Splash Page | 42 | 39 | 34 | 400 | | | Output is not escaped |
| #7676 | Greeklish Slugs | 92 | 12 | 2 | 3k+ | | | Text Domain Mismatch |
| #7677 | ACF Nav Menu Field | 85 | 16 | 6 | 2k+ | | | Text Domain Mismatch |
| #7678 | Service Showcase | 41 | 41 | 597 | 800 | | | Non-prefixed global variable |
| #7679 | Always Use Open Graph with Jetpack | 98 | 2 | 1 | 500 | | | Missing direct file access protection |
| #7680 | List Products By Category Widget for WooCommerce | 42 | 84 | 5 | 1k+ | | | Output is not escaped |
| #7681 | Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… | 100 | | 1 | 1k+ | | | mismatched plugin name |
| #7682 | Phone Validator for WooCommerce | 63 | 8 | 33 | 1k+ | | | Missing nonce verification |
| #7683 | NodeInfo(2) | 99 | 1 | 1 | 900 | | | Missing direct file access protection |
| #7684 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #7685 | Bestfreebie Elementor Icons | 73 | 27 | 13 | 400 | | | Text Domain Mismatch |
| #7686 | WP Disable Automatic Updates | 69 | 14 | 8 | 2k+ | | | Output is not escaped |
| #7687 | Anchor Block | 99 | 3 | 0 | 2k+ | | | No Explicit Version |
| #7688 | Admin Bar Toggle | 97 | 6 | 3 | 400 | | | Missing Arg Domain |
| #7689 | Dynamic Year Block – display a copyright notice in your footer with the current year | 90 | 5 | 28 | 2k+ | | | Non-prefixed global variable |
| #7690 | FreePay for WooCommerce | 36 | 114 | 102 | 400 | | | Output is not escaped |
| #7691 | Simple Spoiler | 95 | 1 | 8 | 2k+ | | | Non-prefixed global variable |
| #7692 | WP Gravity Forms Zoho CRM and Bigin | 32 | 750 | 174 | 400 | | | Text Domain Mismatch |
| #7693 | Blocks for Eventbrite | 35 | 3 | 4 | 1k+ | | | Hidden files included |
| #7694 | WP-DraftsForFriends | 38 | 141 | 71 | 1k+ | | | Output is not escaped |
| #7695 | Store Locator for WordPress📍 | 39 | 100 | 36 | 1k+ | | | Missing Arg Domain |
| #7696 | Zen Feed | 39 | 39 | 22 | 400 | | | Output is not escaped |
| #7697 | Password Reset with Code for WordPress REST API | 66 | 24 | 8 | 900 | | | Exception output is not escaped |
| #7698 | TinyMCE Smiley Button | 97 | 3 | 3 | 600 | | | Missing Version |
| #7699 | Wikipedia Preview | 96 | 8 | 15 | 1k+ | | | Non-prefixed function |
| #7700 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |