| #8401 | Leadfeeder | 89 | 2 | 3 | 2k+ | | | Non-prefixed class |
| #8402 | GDPR Tools: comment ip removement | 49 | 18 | 13 | 2k+ | | | Unsafe printing function |
| #8403 | WP Before After Image Slider – Interactive Image and Video Comparison Plugin for WordPress | 42 | 112 | 17 | 1k+ | | | Text Domain Mismatch |
| #8404 | Get Cash | 40 | 84 | 49 | 500 | | | Non Singular String Literal Domain |
| #8405 | Registration Form for WooCommerce | 75 | 5 | 42 | 900 | | | Non-prefixed global variable |
| #8406 | Live Summary for Gravity Forms | 54 | 15 | 27 | 1k+ | | | Nonce verification recommended |
| #8407 | Interactive Globes – 3D World Maps | 51 | 24 | 104 | 400 | | | Non-prefixed global variable |
| #8408 | Link Widget Title | 66 | 22 | 5 | 4k+ | | | Output is not escaped |
| #8409 | Kiyoh customer review | 35 | 173 | 68 | 500 | | | Output is not escaped |
| #8410 | Advanced Custom Fields: Number Slider | 47 | 99 | 4 | 400 | | | Output is not escaped |
| #8411 | Paste as Plain Text | 98 | 2 | 1 | 1k+ | | | Missing direct file access protection |
| #8412 | AH Google Analytics Code | 88 | 6 | 2 | 500 | | | Output is not escaped |
| #8413 | Article Word Count | 97 | 4 | 3 | 1k+ | | | Missing Arg Domain |
| #8414 | 3D viewer by Visody | 25 | 832 | 1,322 | 1k+ | | | Non-prefixed global variable |
| #8415 | Templatiq | 38 | 31 | 94 | 900 | | | Non-prefixed hook name |
| #8416 | Certificate Verification | 38 | 33 | 40 | 1k+ | | | Output is not escaped |
| #8417 | Slash Edit: Admin Shortcuts to Edit Posts and Pages Faster | 90 | 3 | 3 | 500 | | | Output is not escaped |
| #8418 | Hand Talk | 69 | 34 | 4 | 400 | | | Output is not escaped |
| #8419 | Logo Carousel – Display Brand or Client Logos in Slider | 38 | 524 | 42 | 800 | | | Output is not escaped |
| #8420 | WP Sitemap Pages and Posts | 99 | | 7 | 1k+ | | | trademarked term |
| #8421 | Razorpay for Gravity Forms | 21 | 411 | 47 | 600 | | | Exception output is not escaped |
| #8422 | Social Icon Widget | 42 | 90 | 6 | 500 | | | Output is not escaped |
| #8423 | Usermaven | 42 | 36 | 77 | 1k+ | | | Request data is not unslashed |
| #8424 | Zilla Portfolio | 41 | 139 | 15 | 400 | | | Text Domain Mismatch |
| #8425 | Was This Helpful? | 49 | 19 | 28 | 1k+ | | | Output is not escaped |
| #8426 | CWW connector Lite – Connect Contact Form 7 & ActiveCampaign | 42 | 39 | 21 | 400 | | | Output is not escaped |
| #8427 | View User Metadata | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #8428 | Better Badge – Custom Product Badges for WooCommerce | 47 | 22 | 47 | 500 | | | Non Singular String Literal Domain |
| #8429 | Signature field for Elementor Forms | 96 | 98 | 1 | 2k+ | | | wp function not compatible with requires wp |
| #8430 | Regen. Thumbs | 88 | 3 | 3 | 400 | | | Input is not sanitized |
| #8431 | Export Single Post Page | 87 | 3 | 6 | 3k+ | | | Nonce verification recommended |
| #8432 | Advanced Custom Fields: Widget Area Field | 74 | 29 | 4 | 400 | | | Text Domain Mismatch |
| #8433 | Style Contact Form 7 | 100 | | 1 | 1k+ | | | Discouraged text-domain loading |
| #8434 | Visual Bible Verse of the Day Widget | 71 | 27 | 1 | 900 | | | Output is not escaped |
| #8435 | CodePen Embed Block | 82 | 8 | 3 | 600 | | | Text Domain Mismatch |
| #8436 | ACF Galerie 4 | 77 | 16 | 23 | 2k+ | | | Text Domain Mismatch |
| #8437 | WP Category Order | 98 | 1 | 5 | 400 | | | trademarked term |
| #8438 | Simple Photo Feed | 87 | 4 | 48 | 1k+ | | | Non-prefixed global variable |
| #8439 | Ultimate Fonts | 92 | 6 | 3 | 400 | | | Missing Arg Domain |
| #8440 | iframe Wrapper | 97 | 3 | 3 | 500 | | | Missing Version |
| #8441 | Payment Integration Wompi – El Salvador | 55 | 50 | 27 | 800 | | | Text Domain Mismatch |
| #8442 | Force PclZip | 98 | 2 | 1 | 400 | | | mismatched plugin name |
| #8443 | GIF Master – Awesome GIFs with Giphy and Tenor | 81 | 7 | 6 | 3k+ | | | Output is not escaped |
| #8444 | WP Forms + Sprout Invoices – Easy Invoice & Quote Submissions | 67 | 40 | 12 | 400 | | | Text Domain Mismatch |
| #8445 | League Table – WordPress Table Plugin | 93 | 10 | 9 | 1k+ | | | Missing direct file access protection |
| #8446 | VARGAL – Additional Variation Gallery for WooCommerce | 97 | 3 | 26 | 1k+ | | | Non-prefixed hook name |
| #8447 | Antom Payments | 37 | 62 | 73 | 800 | | | badly named files |
| #8448 | Remove XML-RPC Methods | 100 | | 0 | 1k+ | | | No open findings |
| #8449 | Quform Mailchimp | 39 | 65 | 147 | 800 | | | Nonce verification recommended |
| #8450 | Visual Sitemap | 51 | 23 | 6 | 400 | | | Output is not escaped |