| #8351 | Live News – Responsive News Ticker | 88 | 9 | 9 | 2k+ | | | Database parameter is not escaped |
| #8352 | Polylang – Country Detection | 89 | 4 | 7 | 1k+ | | | Input is not sanitized |
| #8353 | Video Popup for Elementor – WPTD | 66 | 33 | 13 | 1k+ | | | Output is not escaped |
| #8354 | WP Max Submit Protect | 65 | 19 | 12 | 400 | | | Output is not escaped |
| #8355 | Claspo – Popups, Spin the Wheel & Email Capture | 78 | 107 | 16 | 1k+ | | | wp function not compatible with requires wp |
| #8356 | SocketLabs | 65 | 15 | 18 | 900 | | | Output is not escaped |
| #8357 | Substack Importer | 39 | 33 | 33 | 1k+ | | | Missing nonce verification |
| #8358 | Business Card Block – Display Business or Personal Info in Card Format | 100 | | 1 | 1k+ | | | mismatched plugin name |
| #8359 | Custom WP Store Locator | 31 | 26 | 245 | 400 | | | Non-prefixed global variable |
| #8360 | Masonry Gallery & Posts For Divi (WP Tools) | 23 | 754 | 1,450 | 700 | | | Non-prefixed global variable |
| #8361 | AdSimple Cookie Consent Banner | 65 | 55 | 109 | 600 | | | wp function not compatible with requires wp |
| #8362 | Divi Styling Add-On for Gravity Forms | 97 | 2 | 5 | 600 | | | trademarked term |
| #8363 | Formsite | Embed online forms to collect orders, registrations, leads, and surveys | 98 | 3 | 2 | 900 | | | Missing direct file access protection |
| #8364 | Expire Sticky Posts | 68 | 16 | 8 | 1k+ | | | Text Domain Mismatch |
| #8365 | Extend Link | 100 | | 0 | 1k+ | | | No open findings |
| #8366 | Flipdish Ordering System | 90 | 5 | 11 | 400 | | | Non-prefixed function |
| #8367 | ESV CrossReference Tool | 97 | 4 | 1 | 500 | | | Missing direct file access protection |
| #8368 | Mark New Posts | 40 | 61 | 39 | 500 | | | Non Singular String Literal Domain |
| #8369 | La Poste Pro Expéditions WooCommerce | 86 | 3 | 95 | 1k+ | | | Non-prefixed global variable |
| #8370 | Huurkalender WP | 93 | 3 | 7 | 800 | | | trademarked term |
| #8371 | Posts Viewed Recently | 41 | 58 | 16 | 700 | | | Output is not escaped |
| #8372 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #8373 | Default Sort Ascend | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #8374 | Post Carousel Addons For Elementor | 80 | 9 | 8 | 1k+ | | | Output is not escaped |
| #8375 | Nepali Date Converter | 97 | 2 | 25 | 900 | | | Non-prefixed function |
| #8376 | Dehkadeh Fonts | 63 | 117 | 5 | 800 | | | Text Domain Mismatch |
| #8377 | Insert Giphy Block | 98 | 3 | 1 | 700 | | | Missing direct file access protection |
| #8378 | Bitrix24 | 65 | 28 | 10 | 500 | | | Text Domain Mismatch |
| #8379 | MultiManager WP – Manage All Your WordPress Sites Easily | 91 | 28 | 11 | 1k+ | | | Missing Arg Domain |
| #8380 | TailPress – Tailwind for WordPress | 35 | 23 | 22 | 500 | | | Output is not escaped |
| #8381 | g-FFL Checkout | 31 | 249 | 300 | 600 | | | Request data is not unslashed |
| #8382 | Motors VIN Decoder | 36 | 87 | 88 | 400 | | | Output is not escaped |
| #8383 | Smart Brands for WooCommerce | 95 | | 150 | 400 | | | Non-prefixed global variable |
| #8384 | WP Hotel Booking WPML Support | 43 | 10 | 52 | 400 | | | Direct Query |
| #8385 | SSO for Entra ID | 99 | 4 | 1 | 600 | | | Missing Arg Domain |
| #8386 | Stax Addons for Elementor | 40 | 143 | 81 | 500 | | | Output is not escaped |
| #8387 | Oomph Hidden Tags | 80 | 13 | 2 | 400 | | | Missing Arg Domain |
| #8388 | Remove Howdy | 98 | 3 | 0 | 700 | | | Missing direct file access protection |
| #8389 | Postepay Gateway per Woocommerce | 68 | 36 | 4 | 1k+ | | | Text Domain Mismatch |
| #8390 | WP Admin Audit | 24 | 1,051 | 781 | 1k+ | | | error log print r |
| #8391 | Automatically Update Permalinks | 94 | 2 | 2 | 2k+ | | | Missing nonce verification |
| #8392 | Podigee WordPress Quick Publish – now with Gutenberg support! | 34 | 108 | 95 | 700 | | | Text Domain Mismatch |
| #8393 | Text Scroll Widget | 59 | 30 | 2 | 400 | | | Output is not escaped |
| #8394 | Override String Translations | 84 | 8 | 6 | 1k+ | | | Nonce verification recommended |
| #8395 | Advanced Custom Fields – Taxonomy Field add-on | 50 | 57 | 4 | 1k+ | | | Non Singular String Literal Domain |
| #8396 | Default Admin Color Scheme | 100 | | 0 | 800 | | | No open findings |
| #8397 | Advanced Country Blocker | 40 | 23 | 77 | 2k+ | | | Exception output is not escaped |
| #8398 | CSH Login | 36 | 126 | 41 | 500 | | | Output is not escaped |
| #8399 | Select and Multi-Select Field for Contact Form 7 | 81 | 25 | 12 | 2k+ | | | Text Domain Mismatch |
| #8400 | Master QR Code Generator – Fast & Easy QR Code Creator | 77 | 21 | 59 | 400 | | | Non-prefixed global variable |