| #9751 | AIKTP | 99 | 1 | 1 | 3k+ | | | Mixed line endings |
| #9752 | Post slider elementor addons | 78 | 168 | 13 | 2k+ | | | Text Domain Mismatch |
| #9753 | Biteship Shipping | 78 | 25 | 16 | 500 | | | wp function not compatible with requires wp |
| #9754 | ElementCamp | 94 | 1 | 178 | 1k+ | | | Post Not In exclude |
| #9755 | Admin Sticky Sidebar | 98 | 2 | 3 | 800 | | | Missing direct file access protection |
| #9756 | Honeypot Anti Spam for Forminator Forms | 75 | 4 | 7 | 1k+ | | | Missing nonce verification |
| #9757 | aapanel WP Toolkit | 71 | 20 | 18 | 2k+ | | | wp function not compatible with requires wp |
| #9758 | Collapsible Categories in the Dashboard | 98 | 3 | 0 | 600 | | | Missing direct file access protection |
| #9759 | My-Plugins | 72 | 24 | 6 | 30k+ | | | Missing Arg Domain |
| #9760 | Change Currency Symbol for WooCommerce | 97 | 6 | 1 | 600 | | | Text Domain Mismatch |
| #9761 | Disable CSS JS Cache | 93 | | 9 | 400 | | | Non-prefixed function |
| #9762 | Menu Backup & Restore + Import/Export | 99 | 7 | 0 | 400 | | | wp function not compatible with requires wp |
| #9763 | Export Media as ZIP | 100 | | 0 | 1k+ | | | No open findings |
| #9764 | Flodesk for Elementor Pro | 90 | 3 | 0 | 800 | | | Exception output is not escaped |
| #9765 | Embed STL | 93 | 5 | 1 | 400 | | | Missing Arg Domain |
| #9766 | Nimbata Call Tracking | 62 | 13 | 11 | 400 | | | Non-prefixed function |
| #9767 | BeGateway Payment Gateway for WooCommerce | 39 | 57 | 44 | 400 | | | Unsafe printing function |
| #9768 | WEDOS OnLine monitoring | 35 | 36 | 15 | 700 | | | Output is not escaped |
| #9769 | sCode (Easy Shortcodes) | 35 | 157 | 97 | 400 | | | Text Domain Mismatch |
| #9770 | Background Music Manager | 98 | 2 | 0 | 1k+ | | | outdated tested upto header |
| #9771 | Meta Keywords for Each Page | 100 | | 0 | 800 | | | No open findings |
| #9772 | Accordion Block Lite | 95 | 6 | 57 | 400 | | | Non-prefixed global variable |
| #9773 | Flipbox Addon for Elementor | 100 | 1 | 0 | 400 | | | Missing Translators Comment |
| #9774 | Post reading times | 81 | 10 | 1 | 700 | | | Output is not escaped |
| #9775 | NEX-Forms ADD ON – Form Themes | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #9776 | WP Compiler | 35 | 33 | 20 | 1k+ | | | Output is not escaped |
| #9777 | Add link on copied text | 79 | 11 | 3 | 400 | | | Output is not escaped |
| #9778 | IranDargah Payment Gateway for Woocommerce | 66 | 66 | 26 | 400 | | | Text Domain Mismatch |
| #9779 | XML Feed for Skroutz & BestPrice for WooCommerce | 57 | 12 | 50 | 600 | | | Input is not sanitized |
| #9780 | Mentions Legales Par Webdeclic | 61 | 82 | 39 | 500 | | | Non Singular String Literal Domain |
| #9781 | Rox Appointment Booking – Appointment Booking Scheduling Solution | 92 | 3 | 7 | 1k+ | | | Nonce verification recommended |
| #9782 | Endora | 36 | 53 | 72 | 1k+ | | | Output is not escaped |
| #9783 | Fast Speed Index | 74 | 9 | 12 | 500 | | | Direct Query |
| #9784 | AI for Home Services | 86 | 8 | 5 | 700 | | | Setting is missing a sanitization callback |
| #9785 | Real Time Validation For Gravity Forms | 99 | 41 | 1 | 500 | | | Text Domain Mismatch |
| #9786 | DOKU Payment | 69 | 53 | 46 | 500 | | | wp function not compatible with requires wp |
| #9787 | SKP WP Admin Login Captcha | 39 | 77 | 18 | 1k+ | | | Output is not escaped |
| #9788 | Khattat – Arabic Fonts | 100 | | 2 | 500 | | | Discouraged text-domain loading |
| #9789 | Eventer | 40 | 61 | 55 | 1k+ | | | Output is not escaped |
| #9790 | Hide Prices for WooCommerce | 98 | 4 | 3 | 800 | | | Missing direct file access protection |
| #9791 | Autoload Optimizer | 92 | | 13 | 500 | | | Direct Query |
| #9792 | Shamor | 53 | 55 | 12 | 400 | | | wp function not compatible with requires wp |
| #9793 | Image Automatic Height Width | 97 | 6 | 0 | 400 | | | Missing direct file access protection |
| #9794 | LLMagnet – AI Visibility & AI SEO for Claude, ChatGPT & More | 23 | 627 | 1,798 | 400 | | | Non-prefixed global variable |
| #9795 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #9796 | Dynamic Fields Engine – Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations | 87 | | 15 | 1k+ | | | slow db query meta key |
| #9797 | Login Timeout Sessions | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #9798 | WPDevDesign – Oxygen – Essentials | 98 | 3 | 3 | 600 | | | trademarked term |
| #9799 | WP Login Door | 64 | 19 | 11 | 400 | | | Output is not escaped |
| #9800 | Easy Demo Import for Omega Themes | 42 | 33 | 41 | 400 | | | Output is not escaped |