| #7901 | SMTP for SendGrid – YaySMTP | 36 | 27 | 96 | 1k+ | | | Non-prefixed global variable |
| #7902 | Second Street | 98 | 10 | 6 | 400 | | | Non Enqueued Script |
| #7903 | Classic Menu in Navigation Block | 99 | 1 | 3 | 2k+ | | | Non-prefixed class |
| #7904 | TomS reCAPTCHA | 39 | 128 | 256 | 500 | | | Missing nonce verification |
| #7905 | WP Cron Cleaner | 42 | 51 | 38 | 500 | | | Unsafe printing function |
| #7906 | Sendy Widget | 40 | 46 | 17 | 600 | | | Output is not escaped |
| #7907 | Delisho – Recipe Widgets and Blocks | 34 | 60 | 355 | 1k+ | | | Input is not sanitized |
| #7908 | Wild Apricot Login | 35 | 88 | 30 | 800 | | | Non Singular String Literal Domain |
| #7909 | Smooth scrolling with Lenis | 97 | 3 | 0 | 3k+ | | | outdated tested upto header |
| #7910 | AffiliateWP – Allow Own Referrals | 78 | 37 | 10 | 500 | | | Text Domain Mismatch |
| #7911 | FACTO – Facturación Electrónica | 22 | 242 | 432 | 400 | | | Request data is not unslashed |
| #7912 | Color Mobile Browser Address Bar | 88 | 5 | 0 | 2k+ | | | Output is not escaped |
| #7913 | AL Pack | 29 | 13 | 816 | 2k+ | | | Non-prefixed global variable |
| #7914 | CleverReach Integration for Contact Form 7 | 40 | 103 | 43 | 700 | | | Text Domain Mismatch |
| #7915 | Loginfy – Custom Login Page Customizer | 28 | 338 | 398 | 2k+ | | | Output is not escaped |
| #7916 | Country Code Selector | 38 | 91 | 20 | 1k+ | | | Unsafe printing function |
| #7917 | Werk aan de Muur | 64 | 48 | 20 | 900 | | | Non Singular String Literal Domain |
| #7918 | Chronological Posts | 100 | | 1 | 1k+ | | | readme parser warnings no short description present |
| #7919 | Extra Shortcodes | 35 | 35 | 3 | 1k+ | | | date date |
| #7920 | WC Provincia Canton Distrito | 48 | 103 | 14 | 1k+ | | | Text Domain Mismatch |
| #7921 | Remove Add to Cart Button for WooCommerce | 59 | 115 | 18 | 500 | | | Text Domain Mismatch |
| #7922 | Branded Social Images – Open Graph Images with logo and extra text layer | 29 | 254 | 91 | 900 | | | Non Singular String Literal Domain |
| #7923 | Focus Videos | 53 | 36 | 9 | 400 | | | Text Domain Mismatch |
| #7924 | Posts Character Count Admin | 85 | 9 | 0 | 1k+ | | | Output is not escaped |
| #7925 | ACF Flexible Content Modal | 98 | 2 | 4 | 700 | | | Missing Version |
| #7926 | SM Vertical Menu | 55 | 45 | 1 | 400 | | | Output is not escaped |
| #7927 | WP DataTable | 97 | 1 | 11 | 600 | | | Missing Version |
| #7928 | SMS Extension for Contact Form 7 | 21 | 720 | 1,387 | 400 | | | Non-prefixed global variable |
| #7929 | Hide Tooltips on Hover – Clean Up Title Attributes Without Losing Accessibility | 98 | 1 | 2 | 4k+ | | | mismatched plugin name |
| #7930 | Countdown Block | 35 | 5 | 2 | 1k+ | | | Hidden files included |
| #7931 | Visibility Control for LearnPress | 40 | 52 | 19 | 700 | | | Missing Arg Domain |
| #7932 | F4 Total Stock Value for WooCommerce | 43 | 27 | 12 | 1k+ | | | Output is not escaped |
| #7933 | GetPaid > Wallet | 36 | 174 | 227 | 700 | | | Text Domain Mismatch |
| #7934 | SMS Abandoned Cart Recovery ✦ CartBoss | 34 | 67 | 72 | 400 | | | SQL query is not prepared |
| #7935 | Skyboot Portfolio Gallery for Elementor | 92 | 116 | 3 | 1k+ | | | Text Domain Mismatch |
| #7936 | MW WP Form reCAPTCHA | 65 | 11 | 14 | 2k+ | | | Input is not sanitized |
| #7937 | ACF: Multiple Taxonomy | 98 | 20 | 2 | 600 | | | Text Domain Mismatch |
| #7938 | MomentoPress for Momento360 | 98 | 2 | 3 | 1k+ | | | Missing Version |
| #7939 | WP fancybox | 86 | 7 | 8 | 1k+ | | | Output is not escaped |
| #7940 | Custom Post Type Parents | 39 | 75 | 18 | 900 | | | Output is not escaped |
| #7941 | Squeeze – Image Optimization & Compression, WEBP Conversion | 41 | 20 | 70 | 2k+ | | | Nonce verification recommended |
| #7942 | Custom Post Type WooCommerce Integration | 75 | 3 | 23 | 400 | | | Non-prefixed hook name |
| #7943 | WP Mapa Politico España | 69 | 32 | 12 | 400 | | | Output is not escaped |
| #7944 | MAS Company Reviews For WP Job Manager | 40 | 44 | 71 | 1k+ | | | Output is not escaped |
| #7945 | User Notes | 100 | 1 | 0 | 800 | | | Missing Translators Comment |
| #7946 | Mailster Live | 48 | 22 | 37 | 600 | | | Missing Translators Comment |
| #7947 | Counting Number Block | 100 | | 0 | 2k+ | | | No open findings |
| #7948 | Turn Comments Off | 100 | | 0 | 1k+ | | | No open findings |
| #7949 | Active Campaign & WPForms | 78 | 27 | 10 | 400 | | | Text Domain Mismatch |
| #7950 | One Tap Google Sign in | 63 | 6 | 30 | 900 | | | Request data is not unslashed |