| #8651 | eCommerce Shipping Dashboard by UPS for WooCommerce | 81 | 6 | 35 | 1k+ | | | Non-prefixed constant |
| #8652 | Allow Numeric Slugs | 96 | 5 | 2 | 900 | | | Direct Query |
| #8653 | Livebeep – Chatbot, Live Chat, CRM & Digital Marketing | 87 | 7 | 4 | 400 | | | Output is not escaped |
| #8654 | Floating Publish Button | 84 | 5 | 4 | 1k+ | | | Unsafe printing function |
| #8655 | Block User Account | 35 | 280 | 143 | 1k+ | | | Unsafe printing function |
| #8656 | Append extensions on Pages | 84 | 7 | 3 | 800 | | | Missing direct file access protection |
| #8657 | External files in Media Library | 90 | 16 | 68 | 400 | | | Direct Query |
| #8658 | Simple Ticker | 99 | 1 | 7 | 500 | | | Non-prefixed global variable |
| #8659 | Gift Wrapping for WooCommerce | 72 | 2 | 16 | 1k+ | | | Missing nonce verification |
| #8660 | Content Widget | 41 | 72 | 9 | 400 | | | Output is not escaped |
| #8661 | Easy Font Resize | 54 | 33 | 6 | 700 | | | Setting is missing a sanitization callback |
| #8662 | SKU Label Changer For WooCommerce | 83 | 8 | 11 | 700 | | | Missing direct file access protection |
| #8663 | Fusion Page Builder : Extension – Image | 98 | 4 | 2 | 500 | | | Missing direct file access protection |
| #8664 | Site Lockdown Security | 100 | | 2 | 400 | | | Non-prefixed class |
| #8665 | Webling | 30 | 147 | 313 | 500 | | | Input is not validated |
| #8666 | Custom Permalink Editor | 62 | 4 | 51 | 3k+ | | | Non-prefixed hook name |
| #8667 | Simple HTML Sitemap | 42 | 42 | 20 | 1k+ | | | Text Domain Mismatch |
| #8668 | Blaze Ads – Fully Integrated Ads Solution | 99 | 1 | 2 | 7k+ | | | Non-prefixed global variable |
| #8669 | WPCasa Contact Form 7 | 88 | 4 | 5 | 500 | | | Output is not escaped |
| #8670 | WP Discord Invite | 40 | 73 | 42 | 400 | | | Unsafe printing function |
| #8671 | JSON-LD Breadcrumbs | 98 | 3 | 1 | 1k+ | | | application detected |
| #8672 | ACF to Custom Database Tables | 40 | 36 | 64 | 600 | | | Nonce verification recommended |
| #8673 | Offen | 33 | 313 | 115 | 500 | | | Output is not escaped |
| #8674 | Alert Box Block | 99 | | 6 | 500 | | | Non-prefixed constant |
| #8675 | Contact Form 7 Leads Tracking | 72 | 3 | 23 | 600 | | | Input is not sanitized |
| #8676 | Simple Image XML Sitemap | 37 | 119 | 16 | 1k+ | | | Output is not escaped |
| #8677 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #8678 | Sharespine Woocommerce Connector | 86 | 2 | 16 | 500 | | | error log error log |
| #8679 | Plugins Condition | 96 | 3 | 30 | 1k+ | | | Non-prefixed global variable |
| #8680 | Blockly – Gutenberg Blocks | 86 | 6 | 17 | 600 | | | Non-prefixed constant |
| #8681 | DeveloPress Sticky Footer Bar | 36 | 165 | 49 | 400 | | | Output is not escaped |
| #8682 | WP Permalink Translator | 41 | 34 | 21 | 2k+ | | | Unsafe printing function |
| #8683 | Auto Update Plugins | 98 | 1 | 6 | 1k+ | | | trademarked term |
| #8684 | Copy Move Posts | 98 | | 7 | 400 | | | Non-prefixed global variable |
| #8685 | Simple Expires | 38 | 32 | 39 | 500 | | | Non Singular String Literal Domain |
| #8686 | Most Popular Post Widget | 64 | 40 | 3 | 400 | | | Output is not escaped |
| #8687 | Moyasar | 32 | 539 | 221 | 700 | | | Text Domain Mismatch |
| #8688 | Cache Buster | 84 | 5 | 6 | 400 | | | Input is not sanitized |
| #8689 | LH Force Lowercase URLs | 90 | 4 | 3 | 2k+ | | | Input is not validated or sanitized |
| #8690 | Russian Currency | 54 | 52 | 6 | 400 | | | Output is not escaped |
| #8691 | Wavy Divider | 35 | 10 | 1 | 700 | | | Hidden files included |
| #8692 | Nested Ordered Lists | 98 | 2 | 0 | 800 | | | outdated tested upto header |
| #8693 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | | | Output is not escaped |
| #8694 | Cal.com | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #8695 | Rating Widget: Post Rating, 5 Star Rating, Reviews, Thumbs Up & Down, Reaction | 63 | 177 | 27 | 400 | | | Missing direct file access protection |
| #8696 | Star Rating Block | 98 | 4 | 2 | 1k+ | | | Missing direct file access protection |
| #8697 | Secondary Product Image for WooCommerce | 49 | 25 | 29 | 2k+ | | | Output is not escaped |
| #8698 | HTML Editor for Contact Form 7 | 100 | | 2 | 1k+ | | | Non-prefixed class |
| #8699 | Table for Divi | 35 | 5 | 2 | 2k+ | | | Hidden files included |
| #8700 | Bulk edit publish date | 62 | 11 | 16 | 1k+ | | | Nonce verification recommended |