| #751 | WP Edit | 33 | 337 | 137 | 40k+ | | | Unsafe printing function |
| #752 | Easy Social Icons | 35 | 182 | 158 | 20k+ | | | Output is not escaped |
| #753 | WP Store Locator | 35 | 26 | 14 | 50k+ | | | wp function not compatible with requires wp |
| #754 | SiteSEO – SEO Simplified | 40 | 36 | 119 | 500k+ | | | Nonce verification recommended |
| #755 | LocoAI – Auto Translate for Loco Translate | 95 | 10 | 3 | 70k+ | | | wp function not compatible with requires wp |
| #756 | CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree | 41 | 121 | 96 | 50k+ | | | Unsafe printing function |
| #757 | Live Composer – Free WordPress Website Builder | 25 | 1,216 | 427 | 10k+ | | | Output is not escaped |
| #758 | Exclusive Addons for Elementor | 30 | 3,630 | 263 | 50k+ | | | Text Domain Mismatch |
| #759 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | | | Non-prefixed global variable |
| #760 | Keon Toolset | 74 | 4 | 28 | 30k+ | | | Non-prefixed function |
| #761 | File Manager | 53 | 41 | 68 | 10k+ | | | Missing direct file access protection |
| #762 | Ibtana – WordPress Website Builder | 26 | 173 | 409 | 10k+ | | | Non-prefixed global variable |
| #763 | Responsive Plus – Elementor Templates & Starter Sites | 40 | 46 | 305 | 10k+ | | | Non-prefixed global variable |
| #764 | Popups for Divi | 89 | 99 | 57 | 100k+ | | | Text Domain Mismatch |
| #765 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 957 | 966 | 70k+ | | | Exception output is not escaped |
| #766 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #767 | PWA for WP – Progressive Web Apps Made Simple | 100 | | 4 | 20k+ | | | trademarked term |
| #768 | WPGraphQL | 35 | 10 | 86 | 30k+ | | | Non-prefixed hook name |
| #769 | Gwolle Guestbook | 32 | 269 | 527 | 20k+ | | | Output is not escaped |
| #770 | Autocomplete WooCommerce Orders | 76 | 70 | 55 | 30k+ | | | Text Domain Mismatch |
| #771 | Edit Author Slug | 74 | 5 | 8 | 100k+ | | | Output is not escaped |
| #772 | Advanced Excerpt | 41 | 69 | 43 | 70k+ | | | Unsafe printing function |
| #773 | Product Addons for Woocommerce – Product Options with Custom Fields | 33 | 124 | 114 | 30k+ | | | Output is not escaped |
| #774 | Co-Authors Plus | 59 | 2 | 76 | 20k+ | | | Input is not sanitized |
| #775 | File Manager Pro – Filester | 22 | 566 | 391 | 100k+ | | | Request data is not unslashed |
| #776 | SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers | 79 | 45 | 66 | 200k+ | | | Non-prefixed hook name |
| #777 | Editorial Calendar | 35 | 127 | 160 | 20k+ | | | Output is not escaped |
| #778 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | | Output is not escaped |
| #779 | Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More | 24 | 146 | 759 | 100k+ | | | Non-prefixed global variable |
| #780 | Ultimate Responsive Image Slider | 99 | 3 | 1 | 30k+ | | | wp function not compatible with requires wp |
| #781 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #782 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 4 | 252 | 10k+ | | | Dynamic hook name |
| #783 | Phoenix Media Rename | 37 | 180 | 104 | 50k+ | | | Output is not escaped |
| #784 | WP Database Reset | 98 | 1 | 10 | 5k+ | | | Direct Query |
| #785 | Speed Booster Pack ⚡ PageSpeed Optimization Suite | 27 | 108 | 187 | 9k+ | | | Missing Translators Comment |
| #786 | MailerLite – WooCommerce integration | 34 | 65 | 36 | 30k+ | | | Output is not escaped |
| #787 | PPOM – Product Addons & Custom Fields for WooCommerce | 21 | 336 | 1,322 | 20k+ | | | Non-prefixed global variable |
| #788 | Video Conferencing with Zoom | 24 | 1,105 | 440 | 10k+ | | | Unsafe printing function |
| #789 | Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More | 100 | | 0 | 80k+ | | | No open findings |
| #790 | Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ | 75 | | 306 | 70k+ | | | Non-prefixed global variable |
| #791 | Database Reset | 98 | 14 | 3 | 10k+ | | | Missing direct file access protection |
| #792 | Visual CSS Style Editor | 36 | 283 | 233 | 40k+ | | | Output is not escaped |
| #793 | All In One Favicon | 34 | 214 | 62 | 60k+ | | | Output is not escaped |
| #794 | Backup and Staging by WP Time Capsule | Pending | - | - | 20k+ | | | Pending scan |
| #795 | Dynific Addons for Elementor (formerly AnyWhere Elementor) | 84 | 33 | 5 | 70k+ | | | Text Domain Mismatch |
| #796 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #797 | Variation Swatches for WooCommerce | 33 | 469 | 116 | 50k+ | | | Text Domain Mismatch |
| #798 | OoohBoi Steroids for Elementor | 30 | 2,059 | 100 | 40k+ | | | Text Domain Mismatch |
| #799 | Kustom Checkout for WooCommerce | 35 | 101 | 505 | 10k+ | | | Dynamic hook name |
| #800 | Disable Admin Notices – Hide Dashboard Notifications | 25 | 465 | 195 | 100k+ | | | Output is not escaped |