| #851 | Big File Uploads – Increase Maximum File Upload Size | 31 | 101 | 92 | 100k+ | | | Output is not escaped |
| #852 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 633 | 8k+ | | | Non-prefixed constant |
| #853 | Better Find and Replace – AI-Powered Suggestions | 36 | 67 | 129 | 40k+ | | | Missing direct file access protection |
| #854 | To Top | 100 | | 1 | 60k+ | | | Non-prefixed class |
| #855 | Zendesk Chat | 37 | 44 | 67 | 10k+ | | | Output is not escaped |
| #856 | Social comments by WpDevArt | 66 | 9 | 19 | 8k+ | | | Missing Version |
| #857 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | | | Non-prefixed global variable |
| #858 | Participants Database | 24 | 950 | 894 | 7k+ | | | SQL query is not prepared |
| #859 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 488 | 1,161 | 5k+ | | | Non-prefixed global variable |
| #860 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | 23 | 694 | 2,439 | 20k+ | | | Non-prefixed hook name |
| #861 | Drag and Drop Multiple File Upload for Contact Form 7 | 36 | 82 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #862 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #863 | Quiz Maker, Poll Maker & Survey Maker by Opinion Stage | 35 | 42 | 32 | 6k+ | | | Output is not escaped |
| #864 | Price Based on Country for WooCommerce | 52 | 43 | 126 | 20k+ | | | Non-prefixed hook name |
| #865 | SEO SIMPLE PACK | 90 | 99 | 97 | 100k+ | | | Non-prefixed global variable |
| #866 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #867 | Wordfence Login Security | 25 | 248 | 418 | 60k+ | | | Output is not escaped |
| #868 | Brevo for WooCommerce | 35 | 116 | 67 | 30k+ | | | Output is not escaped |
| #869 | Add From Server | 37 | 52 | 20 | 60k+ | | | Output is not escaped |
| #870 | ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More | 38 | 20 | 89 | 30k+ | | | Direct Query |
| #871 | AntiVirus | 99 | 2 | 1 | 30k+ | | | Missing direct file access protection |
| #872 | Abandoned Cart Lite for WooCommerce | 35 | 84 | 161 | 20k+ | | | Non-prefixed global variable |
| #873 | Ultimate Dashboard – Custom WordPress Dashboard | 40 | 17 | 144 | 60k+ | | | Input is not sanitized |
| #874 | OptionTree | 93 | 165 | 2 | 50k+ | | | Text Domain Mismatch |
| #875 | WP Customer Reviews | 98 | | 11 | 20k+ | | | slow db query meta query |
| #876 | Custom Contact Forms | 40 | 13 | 106 | 6k+ | | | Missing nonce verification |
| #877 | Accordion FAQ – Compatible With All Page Builder (Elementor, Gutenberg) | 31 | 460 | 201 | 30k+ | | | Non Singular String Literal Domain |
| #878 | Welcart e-Commerce | 22 | 10,378 | 10,931 | 10k+ | | | Text Domain Mismatch |
| #879 | User Access Manager | 30 | 393 | 171 | 10k+ | | | Output is not escaped |
| #880 | WP Video Lightbox | 38 | 107 | 67 | 30k+ | | | Unsafe printing function |
| #881 | Advanced WordPress Reset – Debug, Recover & Reset WP | 25 | 475 | 464 | 20k+ | | | Output is not escaped |
| #882 | Crowdsignal Dashboard – Polls, Surveys & more | 26 | 481 | 491 | 200k+ | | | Unsafe printing function |
| #883 | Search Everything | 36 | 165 | 77 | 10k+ | | | Text Domain Mismatch |
| #884 | Show Current Template | 97 | 4 | 1 | 100k+ | | | Discouraged text-domain loading |
| #885 | BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress | 39 | 480 | 226 | 4k+ | | | Text Domain Mismatch |
| #886 | WP Lightbox 2 | 46 | 52 | 18 | 30k+ | | | Text Domain Mismatch |
| #887 | YOP Poll | 100 | | 0 | 10k+ | | | No open findings |
| #888 | Gravity Booster – Styles & Layouts for Gravity Forms | 33 | 277 | 87 | 40k+ | | | Missing Arg Domain |
| #889 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | | | Text Domain Mismatch |
| #890 | reGenerate Thumbnails Advanced | 24 | 220 | 122 | 70k+ | | | Unsafe printing function |
| #891 | WebberZone Top 10 — Popular Posts | 65 | 37 | 179 | 10k+ | | | Database parameter is not escaped |
| #892 | Display Posts – Easy lists, grids, navigation, and more | 92 | 11 | 23 | 80k+ | | | Non-prefixed function |
| #893 | WP Telegram (Auto Post and Notifications) | 95 | 8 | 15 | 30k+ | | | Non-prefixed function |
| #894 | Advanced Dynamic Pricing and Discount Rules for WooCommerce | 44 | 2 | 813 | 20k+ | | | Non-prefixed namespace |
| #895 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 33 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #896 | SecuPress with Simple SSL – Simple and Performant Security | 23 | 1,697 | 1,601 | 40k+ | | | Non-prefixed global variable |
| #897 | Postie | 23 | 408 | 259 | 10k+ | | | Output is not escaped |
| #898 | Privacy Policy Generator – WPLP Legal Pages | 32 | 26 | 409 | 10k+ | | | Non-prefixed global variable |
| #899 | Advanced Product Fields (Product Addons) for WooCommerce | 39 | 145 | 145 | 50k+ | | | Output is not escaped |
| #900 | Social Like Box and Page by WpDevArt | 40 | 62 | 24 | 5k+ | | | Output is not escaped |