| #9551 | Simple Note | 99 | 1 | 2 | 500 | | | Missing Version |
| #9552 | Filter Admin Published Default | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #9553 | Media Trash Button | 100 | 1 | 0 | 400 | | | Missing direct file access protection |
| #9554 | Serviceform Pixel | 40 | 18 | 22 | 400 | | | Output is not escaped |
| #9555 | Web Accessibility Toolkit – Accessibility Checker & ARIA for WCAG, Section 508 & ADA Compliance | 58 | 9 | 21 | 500 | | | Output is not escaped |
| #9556 | WP Revisions Manager | 45 | 47 | 19 | 700 | | | Non Singular String Literal Domain |
| #9557 | Show Me The Cookies | 100 | | 1 | 500 | | | Non-prefixed class |
| #9558 | Qodax Checkout Manager – Checkout Field Editor for WooCommerce | 43 | 17 | 27 | 400 | | | Interpolated SQL is not prepared |
| #9559 | involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups | 39 | 158 | 32 | 400 | | | Text Domain Mismatch |
| #9560 | Default Post Author | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #9561 | Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam | 41 | 21 | 53 | 500 | | | Missing nonce verification |
| #9562 | Scroll Down Arrow | 69 | 30 | 30 | 800 | | | Missing Arg Domain |
| #9563 | The Innovative Form Builder – IvyForms | 22 | 750 | 309 | 600 | | | Exception output is not escaped |
| #9564 | My Upload Images | 42 | 74 | 48 | 400 | | | Unsafe printing function |
| #9565 | Tiny Yardage Calculator | 72 | 23 | 1 | 300 | | | Output is not escaped |
| #9566 | Advanced Image Comparison for Elementor | 87 | 1 | 5 | 1k+ | | | Nonce verification recommended |
| #9567 | Featured image to All-Posts | 86 | 6 | 5 | 400 | | | Nonce verification recommended |
| #9568 | AI Builder | 83 | 3 | 5 | 400 | | | Output is not escaped |
| #9569 | Relative URL ShortCode | 96 | 4 | 2 | 600 | | | outdated tested upto header |
| #9570 | Andreani WooCommerce | 39 | 21 | 86 | 800 | | | Non-prefixed global variable |
| #9571 | Traffic Monitor | 39 | 6 | 143 | 1k+ | | | Direct Query |
| #9572 | Lenix scss compiler | 35 | 133 | 34 | 800 | | | Exception output is not escaped |
| #9573 | Affiliate Link Marker | 35 | 31 | 4 | 400 | | | Text Domain Mismatch |
| #9574 | If Modified Since | 91 | 2 | 4 | 1k+ | | | Request data is not unslashed |
| #9575 | Avacy CMP | 46 | 7 | 90 | 500 | | | Non-prefixed global variable |
| #9576 | Dual Currency Display | 77 | 1 | 24 | 900 | | | Direct Query |
| #9577 | LJ Multi Column Archive | 40 | 17 | 25 | 1k+ | | | Output is not escaped |
| #9578 | Gutenbye | 98 | 4 | 0 | 700 | | | Missing direct file access protection |
| #9579 | Hide Admin Bar For User Roles | 61 | 38 | 10 | 500 | | | Output is not escaped |
| #9580 | Robots & Sitemap | 37 | 199 | 28 | 500 | | | Text Domain Mismatch |
| #9581 | BB Delete cache | 72 | 3 | 15 | 900 | | | Input is not sanitized |
| #9582 | Addon Elementor Container Link | 99 | 1 | 1 | 2k+ | | | Discouraged text-domain loading |
| #9583 | Admin filter posts by year | 64 | 8 | 32 | 400 | | | Non-prefixed function |
| #9584 | Recently Viewed Products for WooCommerce – Carousel, Widget, Block & Email | 87 | 2 | 18 | 1k+ | | | Database parameter is not escaped |
| #9585 | Antispam | 41 | 11 | 41 | 400 | | | Missing nonce verification |
| #9586 | Contact Information Widget | 51 | 69 | 5 | 400 | | | Output is not escaped |
| #9587 | Omnisend for Contact Form 7 Add-On | 99 | | 21 | 500 | | | Non-prefixed global variable |
| #9588 | Webhook for Discord | 71 | 119 | 20 | 400 | | | Text Domain Mismatch |
| #9589 | Plugin Memory Usage | 99 | | 4 | 500 | | | trademarked term |
| #9590 | Freetobook Responsive Widget | 73 | 5 | 14 | 500 | | | Input is not sanitized |
| #9591 | Property Hive Rental Yield Calculator | 82 | 16 | 2 | 400 | | | Text Domain Mismatch |
| #9592 | Teachable | 93 | 19 | 75 | 500 | | | Non-prefixed global variable |
| #9593 | Reusable Blocks Admin Menu Option | 98 | 2 | 3 | 400 | | | Non-prefixed global variable |
| #9594 | Blogify-AI | 88 | 6 | 12 | 400 | | | Non-prefixed global variable |
| #9595 | Shortcode for OpenTable Widget | 98 | 3 | 2 | 400 | | | Missing direct file access protection |
| #9596 | Send email to customer on cancelled order in WooCommerce | 98 | 2 | 4 | 400 | | | trademarked term |
| #9597 | Lead Generation Form | 35 | 21 | 63 | 600 | | | Non-prefixed global variable |
| #9598 | Post/Page Import Export – Migrate Content with Custom Fields & Taxonomies | 61 | 12 | 27 | 400 | | | Input is not sanitized |
| #9599 | Datareporter Webcare | 74 | 12 | 21 | 700 | | | Non-prefixed global variable |
| #9600 | Text Changer for Welcart | 55 | 477 | 43 | 500 | | | Text Domain Mismatch |
