| #9351 | Automatic Cache Flusher for W3 Total Cache | 100 | 1 | 0 | 4k+ | | | Missing direct file access protection |
| #9352 | Billbee – Auftragsabwicklung, Warenwirtschaft, Automatisierung | 90 | 8 | 7 | 500 | | | Non-prefixed function |
| #9353 | Make Disable Admin Email Verification Prompt| Aims Infosoft | 83 | 10 | 4 | 2k+ | | | Text Domain Mismatch |
| #9354 | Advanced Custom Order Status for WooCommerce | 55 | 44 | 33 | 500 | | | Text Domain Mismatch |
| #9355 | LinkCentral – URL shortener, Affiliate Links & Custom Link Shortener with Link Tracking | 89 | 10 | 1 | 400 | | | Missing Translators Comment |
| #9356 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 600 | | | Text Domain Mismatch |
| #9357 | Dr. Flex | 34 | 83 | 51 | 1k+ | | | Output is not escaped |
| #9358 | Simple calendar for Elementor | 31 | 125 | 270 | 500 | | | Direct Query |
| #9359 | Shortcode Preview Block | 97 | 5 | 3 | 1k+ | | | Missing Version |
| #9360 | List MixCloud | 99 | | 3 | 400 | | | Non-prefixed class |
| #9361 | CMB2 Field Type: Font Awesome | 86 | 10 | 1 | 400 | | | Offloaded Content |
| #9362 | Contact Form 7 Syntax Highlighting | 91 | 4 | 10 | 1k+ | | | Nonce verification recommended |
| #9363 | Feed For TikTok Shop | 93 | 11 | 4 | 500 | | | wp function not compatible with requires wp |
| #9364 | WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL | 90 | 26 | 19 | 500 | | | Text Domain Mismatch |
| #9365 | Query Loop Load More | 91 | 2 | 6 | 700 | | | Post Not In exclude |
| #9366 | SSL Certificate Manager | 61 | 14 | 7 | 600 | | | Output is not escaped |
| #9367 | ClickRank – Ai SEO Automation | 37 | 10 | 226 | 1k+ | | | Direct Query |
| #9368 | Simple Popup Block | 35 | 14 | 1 | 500 | | | Missing direct file access protection |
| #9369 | WP Mail SMTP SendGrid Edition | 38 | 102 | 19 | 500 | | | Text Domain Mismatch |
| #9370 | Bulk Page Stub Creator | 35 | 4 | 2 | 500 | | | Non-prefixed constant |
| #9371 | Storefront Online Ordering by DoorDash | 42 | 76 | 10 | 600 | | | Output is not escaped |
| #9372 | Comments Form Star Rating Plugin for WordPress | 84 | 3 | 10 | 2k+ | | | Missing nonce verification |
| #9373 | No Right Click, Content Copy Protection, Disable Right Click by RB | 66 | 23 | 2 | 600 | | | Unsafe printing function |
| #9374 | Empty P Tag | 97 | 4 | 1 | 800 | | | Missing direct file access protection |
| #9375 | Disable Lazy Load | 76 | 8 | 6 | 400 | | | Non-prefixed constant |
| #9376 | Application Passwords Enable | 100 | 1 | 0 | 800 | | | invalid tested upto minor |
| #9377 | Uptime Monitoring for WordPress – My Website is Online | 78 | 18 | 7 | 500 | | | Text Domain Mismatch |
| #9378 | Pay with LINE Pay | 84 | 12 | 10 | 700 | | | Missing Translators Comment |
| #9379 | Add .html Extension to Pages | 97 | 4 | 1 | 700 | | | Missing direct file access protection |
| #9380 | BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility | 93 | 7 | 36 | 1k+ | | | Non-prefixed global variable |
| #9381 | Simple Widget Title Links | 82 | 15 | 3 | 400 | | | Output is not escaped |
| #9382 | Post Update Add-On – Gravity Forms | 97 | 44 | 2 | 400 | | | Non Singular String Literal Domain |
| #9383 | Rapid URL Indexer for WP – Index Websites in Google | 90 | 6 | 28 | 900 | | | error log error log |
| #9384 | Datalogics Ecommerce Delivery – Datalogics | 39 | 13 | 115 | 500 | | | Nonce verification recommended |
| #9385 | WPS HTML Blocks | 91 | 23 | 4 | 1k+ | | | Text Domain Mismatch |
| #9386 | mypace Custom Meta Robots | 82 | 4 | 6 | 2k+ | | | Input is not sanitized |
| #9387 | Export Customers Data | 34 | 109 | 49 | 500 | | | Text Domain Mismatch |
| #9388 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #9389 | Simple Digital Clock 🕒 | 100 | | 0 | 500 | | | No open findings |
| #9390 | Select Post Export | 40 | 51 | 18 | 500 | | | Output is not escaped |
| #9391 | When Last Login – Export User Records | 61 | 18 | 13 | 500 | | | Output is not escaped |
| #9392 | Justify for Paragraph Block | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #9393 | Change Empty Trash Time | 91 | 5 | 3 | 1k+ | | | Missing direct file access protection |
| #9394 | GL Import External Images | 39 | 118 | 19 | 800 | | | wp function not compatible with requires wp |
| #9395 | Block Archive.org via WordPress robots.txt | 72 | 9 | 8 | 400 | | | Output is not escaped |
| #9396 | Disable WordPress Core Update Email | 98 | 2 | 3 | 2k+ | | | trademarked term |
| #9397 | Visual Admin Customizer | 38 | 20 | 51 | 500 | | | Input is not sanitized |
| #9398 | Admin Options Pages | 42 | 3 | 284 | 500 | | | Nonce verification recommended |
| #9399 | StoreAgent – WooCommerce AI Chatbot & AI Content Tools | 76 | | 202 | 500 | | | Non-prefixed global variable |
| #9400 | Central Connect | 35 | 7 | 21 | 400 | | | Nonce verification recommended |