| #9701 | Signature Field For Contact Form 7 – CF7Sign | 74 | 9 | 12 | 700 | | | Missing Translators Comment |
| #9702 | Security Headers | 88 | 2 | 6 | 700 | | | Nonce verification recommended |
| #9703 | Comment Form WP – Customize Default Comment Form | 61 | 39 | 7 | 600 | | | Output is not escaped |
| #9704 | Remove Archive Label | 98 | 3 | 1 | 400 | | | Missing direct file access protection |
| #9705 | Default Image Settings | 97 | 25 | 3 | 500 | | | Missing Arg Domain |
| #9706 | LH Page Links To | 42 | 25 | 38 | 500 | | | Output is not escaped |
| #9707 | Read More WP | 23 | 570 | 1,311 | 1k+ | | | Non-prefixed global variable |
| #9708 | Gifty | 75 | 38 | 7 | 400 | | | wp function not compatible with requires wp |
| #9709 | External Thumbnail | 81 | 6 | 5 | 20k+ | | | Missing nonce verification |
| #9710 | Telephone Input For Contact Form 7 | 76 | 18 | 10 | 600 | | | Text Domain Mismatch |
| #9711 | WP Anywhere Widgets | 89 | 16 | 14 | 700 | | | wp function not compatible with requires wp |
| #9712 | Prepare New Version | 42 | 53 | 24 | 6k+ | | | Output is not escaped |
| #9713 | SportsPress for Volleyball | 58 | 107 | 34 | 500 | | | Text Domain Mismatch |
| #9714 | Waves Block | 98 | 4 | 0 | 700 | | | Missing direct file access protection |
| #9715 | payOS | 62 | 19 | 26 | 500 | | | Request data is not unslashed |
| #9716 | FPG – Endereço automático por Cep no Checkout | 97 | 3 | 2 | 900 | | | outdated tested upto header |
| #9717 | Visual Slider | 92 | 3 | 266 | 600 | | | Non-prefixed function |
| #9718 | Easy Actions Scheduler Cleaner | 99 | 2 | 3 | 700 | | | wp function not compatible with requires wp |
| #9719 | Unlimited Elements Blocks Library | 22 | 708 | 1,822 | 400 | | | Non-prefixed global variable |
| #9720 | Simple Regenerate Slug | 48 | 18 | 6 | 400 | | | Unsafe printing function |
| #9721 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #9722 | Stop Pinging Yourself | 49 | 47 | 8 | 600 | | | Non Singular String Literal Domain |
| #9723 | RiskPay Gateway: USDC Payouts for WooCommerce | 72 | 20 | 2 | 700 | | | Output is not escaped |
| #9724 | Taxonomy Tags to Checkboxes | 35 | 2 | 0 | 1k+ | | | Hidden files included |
| #9725 | Noted! | 35 | 5 | 22 | 1k+ | | | Non-prefixed global variable |
| #9726 | Simple Auto-Poster for Bluesky | 90 | 3 | 2 | 700 | | | Setting is missing a sanitization callback |
| #9727 | Slider and Carousel Block – Responsive, Accessible | 100 | | 0 | 600 | | | No open findings |
| #9728 | Copy/Paste FlexContent Blocks for ACF | 99 | 1 | 1 | 1k+ | | | Non-prefixed hook name |
| #9729 | Taxonomy CSV Import Export | 35 | 5 | 30 | 700 | | | Missing nonce verification |
| #9730 | BtW Importer – Free Blogger/Blogspot Migration | 97 | | 2 | 400 | | | Database parameter is not escaped |
| #9731 | ProvenExpert | 98 | 8 | 10 | 900 | | | wp function not compatible with requires wp |
| #9732 | Media Sweep – WordPress Media Cleaner | 37 | 56 | 137 | 1k+ | | | Interpolated SQL is not prepared |
| #9733 | Image Captcha For Gravity Forms | 80 | 20 | 10 | 400 | | | Text Domain Mismatch |
| #9734 | Free Customer Service Tools by OpenWidget | 95 | 2 | 1 | 400 | | | Request data is not unslashed |
| #9735 | Static 404 | 85 | 1 | 7 | 3k+ | | | Input is not sanitized |
| #9736 | Gulf currencies Symbols for WooCommerce – رمز الريال السعودي والدرهم الإماراتي | 94 | | 6 | 900 | | | Nonce verification recommended |
| #9737 | JAMP Notes (Just Another Memo Plugin) | 85 | 170 | 183 | 400 | | | Text Domain Mismatch |
| #9738 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 244 | 1,266 | 7k+ | | | Non-prefixed global variable |
| #9739 | Multilingual Forms for Fluent Forms with WPML | 67 | 52 | 16 | 1k+ | | | Text Domain Mismatch |
| #9740 | Animate Blocks | 99 | 1 | 2 | 400 | | | Discouraged text-domain loading |
| #9741 | Save and Continue Link Recovery for Gravity Forms | 85 | 16 | 5 | 400 | | | Text Domain Mismatch |
| #9742 | User Role for Flamingo | 89 | 2 | 4 | 700 | | | Non-prefixed function |
| #9743 | Charla Live Chat | 43 | 33 | 13 | 500 | | | Output is not escaped |
| #9744 | Product Sync for WooCommerce | 28 | 158 | 375 | 400 | | | Direct Query |
| #9745 | Sticky Elementor – Sticky Header, Menu Color After Sticky, Logo Swap & Back to Top Button | 94 | 1 | 0 | 500 | | | Output is not escaped |
| #9746 | Advanced Posts/Page | 91 | 16 | 2 | 3k+ | | | Text Domain Mismatch |
| #9747 | Payhip Integration for WP | 99 | | 4 | 400 | | | trademarked term |
| #9748 | Automatik Blog | 97 | 5 | 23 | 1k+ | | | Non-prefixed global variable |
| #9749 | Auto Image Title & Alt | 68 | 13 | 4 | 400 | | | Missing direct file access protection |
| #9750 | PayKeeper Payment Gateway for WooCommerce | 31 | 113 | 44 | 500 | | | Non Singular String Literal Domain |