| #8751 | TinyMCE Recover | 96 | 5 | 1 | 600 | | | Missing direct file access protection |
| #8752 | Sticky Banner | 91 | 2 | 17 | 700 | | | Non-prefixed global variable |
| #8753 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #8754 | NGG Smart Image Search | 35 | 298 | 155 | 400 | | | Output is not escaped |
| #8755 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | | | Text Domain Mismatch |
| #8756 | Eazy Login Logo | 91 | 4 | 2 | 400 | | | Missing direct file access protection |
| #8757 | Advanced Custom Fields Contact Form 7 | 86 | 10 | 4 | 700 | | | Short PHP open tag found |
| #8758 | Custom Fields Account Registration For Woocommerce | 64 | | 40 | 700 | | | Missing nonce verification |
| #8759 | Simple HTTPS Redirect | 64 | 19 | 5 | 900 | | | Output is not escaped |
| #8760 | Bootstrap Gravity Forms | 96 | 4 | 4 | 600 | | | trademarked term |
| #8761 | SmartSMTP | 71 | 8 | 42 | 2k+ | | | Nonce verification recommended |
| #8762 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #8763 | utm.codes | 43 | 34 | 33 | 400 | | | Missing nonce verification |
| #8764 | Before After Image | 99 | | 5 | 900 | | | Non-prefixed constant |
| #8765 | Deliver via Shipos for WooCommerce | 35 | 11 | 78 | 600 | | | Nonce verification recommended |
| #8766 | Quform Zapier | 39 | 60 | 123 | 1k+ | | | Nonce verification recommended |
| #8767 | Open Links In New Tab | 89 | 5 | 3 | 900 | | | Missing direct file access protection |
| #8768 | WP ImageViewer | 98 | 2 | 4 | 700 | | | trademarked term |
| #8769 | Jim Soft Swiss QR Invoice | 22 | 263 | 392 | 400 | | | Non-prefixed global variable |
| #8770 | Already Existing Tags | 82 | 8 | 1 | 500 | | | Setting is missing a sanitization callback |
| #8771 | commonWP | 71 | 18 | 33 | 400 | | | Non-prefixed hook name |
| #8772 | WP REST API – Pure Taxonomies | 96 | 5 | 3 | 400 | | | trademarked term |
| #8773 | Leadpages | 66 | 6 | 62 | 10k+ | | | Direct Query |
| #8774 | Easy Genesis Logo Uploader | 82 | 18 | 5 | 400 | | | Output is not escaped |
| #8775 | SCSS WP Editor | 38 | 111 | 40 | 900 | | | Exception output is not escaped |
| #8776 | Tag Cloud Shortcode | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #8777 | ShinyStat Widget | 72 | 14 | 2 | 800 | | | Output is not escaped |
| #8778 | Repeater Fields for WPForms | 71 | 173 | 18 | 500 | | | wp function not compatible with requires wp |
| #8779 | Sheet2Site | 78 | 21 | 3 | 400 | | | Output is not escaped |
| #8780 | User Last Login | 65 | 27 | 5 | 600 | | | Output is not escaped |
| #8781 | Accessibility Font Resizer | 61 | 54 | 1 | 800 | | | Text Domain Mismatch |
| #8782 | Gravity Forms Block Email Domains | 99 | 5 | 2 | 1k+ | | | Text Domain Mismatch |
| #8783 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | | | Nonce verification recommended |
| #8784 | Disable User Login | 89 | 1 | 20 | 500 | | | Direct Query |
| #8785 | Simple Google Photos Grid | 41 | 48 | 2 | 1k+ | | | Output is not escaped |
| #8786 | ActiveLayer Anti-Spam: Spam Protection for Forms & Comments | 96 | | 2 | 3k+ | | | Database parameter is not escaped |
| #8787 | Shipping by City for Woocommerce | 89 | 13 | 2 | 400 | | | Text Domain Mismatch |
| #8788 | Responsive Testimonials | 36 | 252 | 32 | 500 | | | Text Domain Mismatch |
| #8789 | Link Shortner | 99 | 2 | 0 | 700 | | | Missing direct file access protection |
| #8790 | Musician's Pack for Elementor – Music Website Widgets & Templates | 24 | 1,725 | 228 | 400 | | | Text Domain Mismatch |
| #8791 | Flamix: Bitrix24 and WooCommerce Orders integration | 39 | 81 | 31 | 500 | | | Output is not escaped |
| #8792 | Mass Ping Tool for SEO – WordPress ping list to get indexed faster on Google, Yandex, … | 34 | 77 | 96 | 400 | | | Output is not escaped |
| #8793 | Bookmark Card | 100 | 1 | 0 | 700 | | | Missing direct file access protection |
| #8794 | Today's Date Inserter | 70 | 32 | 1 | 700 | | | Output is not escaped |
| #8795 | Simply Excerpts | 74 | 12 | 1 | 500 | | | Setting is missing a sanitization callback |
| #8796 | KP Zip Downloader | 99 | 2 | 0 | 3k+ | | | file system operations readfile |
| #8797 | REST XML-RPC Data Checker | 54 | 14 | 45 | 900 | | | Input is not sanitized |
| #8798 | Embed Block for TikTok | 99 | 1 | 2 | 500 | | | Non-prefixed hook name |
| #8799 | FluentAffiliate – Affiliate Program Management Suite, Affiliates Manager | 41 | 115 | 14 | 1k+ | | | Exception output is not escaped |
| #8800 | تقویم فارسی – Persian Calendar | 79 | 2 | 8 | 2k+ | | | Nonce verification recommended |