| #9151 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | | | Output is not escaped |
| #9152 | WP REST API Meta Endpoints | 88 | 50 | 3 | 1k+ | | | Missing Arg Domain |
| #9153 | Product Image and Video Gallery Slider for WooCommerce | 65 | 13 | 7 | 700 | | | Output is not escaped |
| #9154 | Guestplan Booking Widget | 68 | 43 | 6 | 1k+ | | | Text Domain Mismatch |
| #9155 | RateMyAgent Official | 89 | 1 | 158 | 400 | | | Non-prefixed namespace |
| #9156 | Trust Payments Gateway for WooCommerce | 48 | 35 | 29 | 400 | | | Missing Translators Comment |
| #9157 | Easy Hide Admin Menu Items | 96 | 43 | 11 | 1k+ | | | Text Domain Mismatch |
| #9158 | Image Size Selection for Divi | 96 | 60 | 3 | 500 | | | Text Domain Mismatch |
| #9159 | Disable Admin Dashboard Notices – Get a distraction free WordPress backend | 97 | 1 | 7 | 1k+ | | | Discouraged text-domain loading |
| #9160 | Responsive Sidebar | 40 | 43 | 12 | 700 | | | Output is not escaped |
| #9161 | AMP Contact FORM 7 – AMPCF7 | 62 | 9 | 13 | 500 | | | Input is not validated |
| #9162 | Universal Google Analytics (GA3 and GA4) | 57 | 28 | 2 | 400 | | | Output is not escaped |
| #9163 | mypace Custom Title Tag | 88 | 3 | 6 | 500 | | | Input is not sanitized |
| #9164 | Block Temporary Email | 42 | 33 | 13 | 500 | | | Unsafe printing function |
| #9165 | Auto Update Post Date | 69 | 11 | 23 | 1k+ | | | Input is not validated |
| #9166 | LegalBlink for Aruba | 91 | 33 | 29 | 8k+ | | | Missing direct file access protection |
| #9167 | Nepali Date Utilities | 41 | 51 | 15 | 1k+ | | | date date |
| #9168 | Dashboard quick links widget | 49 | 22 | 16 | 700 | | | Output is not escaped |
| #9169 | Koalendar – Easy Appointment Scheduling & Booking Plugin | 97 | 8 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #9170 | Pattern Wrangler – Manage Block Patterns and Pattern Categories | 59 | 14 | 73 | 400 | | | Non-prefixed global variable |
| #9171 | Bulk Menu Edit | 82 | 4 | 9 | 700 | | | Direct Query |
| #9172 | MisterPlan – Booking Engines | 38 | 73 | 138 | 700 | | | Nonce verification recommended |
| #9173 | Fathom Analytics Conversions | 59 | 14 | 47 | 400 | | | Non-prefixed function |
| #9174 | Weight Based Pricing for WooCommerce | 40 | 167 | 86 | 600 | | | Text Domain Mismatch |
| #9175 | Internet Speed Test | 98 | 3 | 0 | 500 | | | outdated tested upto header |
| #9176 | WPAvatar | 36 | 425 | 45 | 700 | | | Unsafe printing function |
| #9177 | Flexible Invoices for WooCommerce – KSeF Add-on | 35 | 39 | 15 | 600 | | | Non-prefixed global variable |
| #9178 | Comments Shortcode | 98 | 3 | 1 | 900 | | | Missing direct file access protection |
| #9179 | Dadevarzan Beaver Builder Modules | 63 | 167 | 5 | 600 | | | Text Domain Mismatch |
| #9180 | Excerpts for Pages | 97 | 4 | 2 | 500 | | | Missing direct file access protection |
| #9181 | Live Shopping & Shoppable Videos For WooCommerce | 0 | 79 | 174 | 400 | | | Non-prefixed global variable |
| #9182 | Contact Form 7 Text CAPTCHA | 76 | 14 | 34 | 1k+ | | | Non-prefixed global variable |
| #9183 | Bolt CTA Button – Floating Call Button for WordPress | 99 | 1 | 2 | 1k+ | | | trademarked term |
| #9184 | Blazeo | 92 | 4 | 5 | 400 | | | Missing Version |
| #9185 | WP API Yoast SEO | 95 | 8 | 4 | 400 | | | trademarked term |
| #9186 | WebP Conversion | 82 | 1 | 33 | 3k+ | | | Non-prefixed global variable |
| #9187 | Emoji Autocomplete Gutenberg | 98 | 2 | 5 | 600 | | | trademarked term |
| #9188 | Noindex Attachment Pages | 98 | 3 | 1 | 600 | | | Missing direct file access protection |
| #9189 | Sidebar Shortcode | 98 | 2 | 1 | 1k+ | | | outdated tested upto header |
| #9190 | Paste As Plain Text By Default | 92 | 2 | 5 | 2k+ | | | Nonce verification recommended |
| #9191 | CSS Class Manager – An advanced autocomplete additional css class control for your blocks | 99 | 1 | 2 | 400 | | | Discouraged text-domain loading |
| #9192 | Flex Import | 39 | 15 | 132 | 500 | | | Non-prefixed global variable |
| #9193 | Smartwaiver Waiver Widget | 72 | 17 | 8 | 400 | | | Output is not escaped |
| #9194 | Calculation For Contact Form 7 | 74 | 21 | 5 | 1k+ | | | Text Domain Mismatch |
| #9195 | Simple Calendar – Advanced Custom Fields | 67 | 18 | 6 | 400 | | | Output is not escaped |
| #9196 | Easy Document Embedder – Embed Word, excel, Powerpoint, Pdf file and more.. | 40 | 55 | 27 | 500 | | | Output is not escaped |
| #9197 | WPBean Form Popup for WPForms and Contact Form 7 – Create Popup Forms Easily | 94 | | 22 | 600 | | | Direct Query |
| #9198 | VA Simple Expires | 43 | 25 | 31 | 800 | | | Output is not escaped |
| #9199 | Export Variable Products | 36 | 79 | 49 | 400 | | | Text Domain Mismatch |
| #9200 | Local Pickup for WooCommerce | 25 | 547 | 1,389 | 1k+ | | | Non-prefixed global variable |