| #9801 | Yandex Pay and Split | 97 | 2 | 16 | 400 | | | Non-prefixed global variable |
| #9802 | Replace Protected Password | 56 | 6 | 18 | 600 | | | Input is not sanitized |
| #9803 | Admin Bar Fix | 56 | 40 | 18 | 400 | | | Text Domain Mismatch |
| #9804 | Change Product Author For WooCommerce | 98 | 3 | 2 | 400 | | | license mismatch |
| #9805 | Elementic | 66 | 22 | 9 | 900 | | | Text Domain Mismatch |
| #9806 | Fast Smooth Scroll | 99 | 1 | 0 | 800 | | | license mismatch |
| #9807 | Referrer Input for Contact Form 7 | 85 | 39 | 2 | 500 | | | wp function not compatible with requires wp |
| #9808 | Convert WPBakery to Elementor | 92 | 1 | 16 | 500 | | | Non-prefixed global variable |
| #9809 | wetracked.io for WooCommerce | 89 | 4 | 9 | 700 | | | Non-prefixed constant |
| #9810 | Fancy Elements for Avada | 35 | 371 | 10 | 400 | | | Text Domain Mismatch |
| #9811 | Elmo | 91 | 6 | 2 | 900 | | | Missing direct file access protection |
| #9812 | Simple Keyword to Link | 38 | 90 | 49 | 3k+ | | | Non Singular String Literal Domain |
| #9813 | Hide WP Admin Login | 41 | 23 | 39 | 500 | | | Nonce verification recommended |
| #9814 | PDF Smart Viewer for Elementor | 77 | 18 | 16 | 1k+ | | | Non-prefixed global variable |
| #9815 | Sch.gr Commons | 94 | 6 | 5 | 1k+ | | | Discouraged text-domain loading |
| #9816 | Display your Checkatrade | 72 | 19 | 3 | 400 | | | Output is not escaped |
| #9817 | AC Advanced Flamingo Settings | 66 | 6 | 32 | 700 | | | Nonce verification recommended |
| #9818 | My Story | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #9819 | Tiny gtag.js Analytics | 51 | 39 | 0 | 400 | | | Output is not escaped |
| #9820 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | | | Non-prefixed function |
| #9821 | BBH Custom Schema – Add Custom JSON-LD to Your Website | 100 | | 1 | 500 | | | Non-prefixed class |
| #9822 | Block Permissions | 91 | 7 | 1 | 400 | | | Non Singular String Literal Domain |
| #9823 | EU Withdrawal Compliance | 100 | | 0 | 1k+ | | | No open findings |
| #9824 | Kitgenix CAPTCHA for Cloudflare Turnstile | 100 | | 0 | 600 | | | No open findings |
| #9825 | Rox Appointment Booking – Appointment Booking Scheduling Solution | 92 | 3 | 7 | 1k+ | | | Nonce verification recommended |
| #9826 | Clear Cache Everywhere | 76 | 7 | 17 | 700 | | | Nonce verification recommended |
| #9827 | Repeaters & Relationships Connector with ACF for Elementor | 35 | 6 | 3 | 700 | | | Missing direct file access protection |
| #9828 | Glow: maintenance & support management for agencies | 99 | | 3 | 700 | | | Non-prefixed constant |
| #9829 | Movylo Marketing Automation | 35 | 38 | 88 | 700 | | | error log print r |
| #9830 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | | | Input is not validated |
| #9831 | Integrate GA4 Google Analytics | 63 | 33 | 3 | 500 | | | Text Domain Mismatch |
| #9832 | Library | 70 | 14 | 3 | 700 | | | Output is not escaped |
| #9833 | iCount Payment Gateway | 41 | 153 | 22 | 500 | | | Text Domain Mismatch |
| #9834 | Azigen | 95 | 12 | 0 | 1k+ | | | Missing Arg Domain |
| #9835 | Footer Copyright | 98 | 1 | 2 | 500 | | | outdated tested upto header |
| #9836 | Load Combined Core Block Assets | 100 | | 0 | 1k+ | | | No open findings |
| #9837 | Hide Price Until User Login For Woocommerce | 99 | 1 | 1 | 800 | | | Discouraged text-domain loading |
| #9838 | Repeaterly – ACF Repeater, Flexible Content & Dynamic Tags for Elementor | 99 | | 7 | 400 | | | Dynamic hook name |
| #9839 | Date Published Shortcode | 98 | 3 | 1 | 500 | | | Missing direct file access protection |
| #9840 | pretix widget | 53 | 25 | 39 | 400 | | | Non-prefixed global variable |
| #9841 | Contact Form DB for Enfold | 58 | 21 | 14 | 700 | | | Output is not escaped |
| #9842 | Shore Booking Widget | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #9843 | Card Transfer Gateway | 98 | 2 | 2 | 600 | | | Discouraged text-domain loading |
| #9844 | Block for Embed Google Maps | 96 | 5 | 2 | 400 | | | block api version too low |
| #9845 | Custom Alt Text for Elementor Images | 97 | 8 | 2 | 1k+ | | | Text Domain Mismatch |
| #9846 | Phone Validator with Flags for WooCommerce | 92 | 3 | 2 | 900 | | | badly named files |
| #9847 | SiteEase Bulk Delete Manager | 49 | 50 | 72 | 900 | | | Direct Query |
| #9848 | Metadata Viewer | 35 | 2 | 11 | 400 | | | Non-prefixed global variable |
| #9849 | WP Disable Site Health | 93 | 4 | 4 | 1k+ | | | trademarked term |
| #9850 | Pay with PAYUNi | 77 | 9 | 13 | 500 | | | Input is not sanitized |