| #9951 | FluentPlayer – Video Player With Forms & Lead Capture | 75 | 10 | 40 | 1k+ | | | Database parameter is not escaped |
| #9952 | Product categories search admin for woocommerce | 99 | 3 | 1 | 400 | | | Missing direct file access protection |
| #9953 | Certify – Certificate Management & Verification | 94 | 2 | 2 | 500 | | | Database parameter is not escaped |
| #9954 | Animation Builder – An interface for adding scroll-triggered animations | 43 | 7 | 67 | 900 | | | Missing Version |
| #9955 | Eli's PHP Compatibility Scanner | 80 | 1 | 22 | 400 | | | Missing nonce verification |
| #9956 | Disclaimify – Affiliate Disclosure / Disclaimer for WordPress | 72 | 2 | 19 | 1k+ | | | Missing nonce verification |
| #9957 | Email Marketing for WordPress and WooCommerce – Retainful | 100 | | 2 | 500 | | | trademarked term |
| #9958 | Integrate Ecomail and Elementor Forms | 96 | 28 | 4 | 600 | | | Text Domain Mismatch |
| #9959 | Rutube Embed | 100 | | 0 | 500 | | | No open findings |
| #9960 | Latin Now! | 98 | 2 | 1 | 400 | | | outdated tested upto header |
| #9961 | Record of Consent Extension for Complianz | 100 | | 2 | 400 | | | Schema Change |
| #9962 | Remove invalid menu items | 98 | 3 | 2 | 1k+ | | | Missing Version |
| #9963 | Advanced Datepicker – Restricts Date for Contact Form 7 | 72 | 228 | 11 | 400 | | | wp function not compatible with requires wp |
| #9964 | LLM Bot Tracker – AI Crawler Detection & Analytics | 40 | 18 | 90 | 700 | | | Database parameter is not escaped |
| #9965 | Unnotifier — disable admin notices individually | 87 | 5 | 11 | 700 | | | Missing Translators Comment |
| #9966 | FlexiType Lite | 97 | 2 | 14 | 1k+ | | | Non-prefixed global variable |
| #9967 | Geo Blocker – Control Site Access by Region and IP | 42 | 10 | 64 | 800 | | | Direct Query |
| #9968 | Hide Google reCAPTCHA Logo | 97 | 3 | 2 | 500 | | | Non-prefixed global variable |
| #9969 | Bloginfo Shortcode | 97 | 5 | 0 | 700 | | | Missing direct file access protection |
| #9970 | OXY Re-Login Window | 75 | 5 | 7 | 500 | | | Missing Version |
| #9971 | Classic Visual Editor Options | 100 | | 0 | 1k+ | | | No open findings |
| #9972 | Custom Currency Sign | 99 | 3 | 0 | 600 | | | Text Domain Mismatch |
| #9973 | Hotline & Zalo Setting | 81 | 13 | 2 | 500 | | | Output is not escaped |
| #9974 | PipraPay Gateway | 70 | 11 | 6 | 400 | | | Output is not escaped |
| #9975 | Trust Badges | 98 | 1 | 4 | 1k+ | | | Direct Query |
| #9976 | Hide Text Shortcode | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #9977 | Usercentrics Privacy Policy Generator | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #9978 | Fastest Age Verification | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #9979 | Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights | 95 | | 5 | 400 | | | Nonce verification recommended |
| #9980 | Merchant Center Reviews for WooCommerce | 89 | 2 | 11 | 500 | | | Missing Version |
| #9981 | ATR Cookie Notice | 85 | 7 | 2 | 800 | | | Output is not escaped |
| #9982 | Simple Honeypot for Contact Form 7 | 91 | 1 | 6 | 500 | | | Missing nonce verification |
| #9983 | WebToffee EU Order Withdrawal Button for WooCommerce | 100 | | 0 | 500 | | | No open findings |
| #9984 | Classic Menus for Block Themes | 99 | 2 | 0 | 500 | | | Missing direct file access protection |
| #9985 | Star Addons for Elementor | 30 | 236 | 255 | 1k+ | | | Non-prefixed global variable |
| #9986 | DataFeedWatch Connector for WooCommerce | 64 | 16 | 112 | 600 | | | Non-prefixed hook name |
| #9987 | Language Switcher for Elementor & Polylang | 100 | | 0 | 400 | | | No open findings |
| #9988 | Mobile Call Buttons | 97 | 1 | 1 | 500 | | | Input is not validated |
| #9989 | FZ-152 RF | 100 | | 0 | 600 | | | No open findings |
| #9990 | Edit Image Thumbnails Separately | 98 | 2 | 1 | 400 | | | Missing direct file access protection |
| #9991 | HHG for TranslatePress | 84 | 43 | 18 | 800 | | | curl curl setopt |
| #9992 | Nút Bấm Liên Hệ Dibrother | 91 | 5 | 2 | 900 | | | Missing Arg Domain |
| #9993 | Customize My Account Page | 35 | 4 | 10 | 1k+ | | | Dynamic hook name |
| #9994 | RS Template Builder For Elementor – Complete Control Over Headers, Footers & More | 76 | 11 | 56 | 1k+ | | | Post Not In exclude |
| #9995 | Iconic Copy Text Blocks | 99 | 1 | 1 | 600 | | | Non-prefixed class |
| #9996 | Zalomení řádků v češtině a slovenčine | 97 | 3 | 0 | 600 | | | outdated tested upto header |
| #9997 | Slider Pro | 37 | 78 | 260 | 1k+ | | | Non-prefixed global variable |
| #9998 | MediaMan – Where is this Image Used? | 92 | 2 | 12 | 500 | | | Direct Query |
| #9999 | Contador de Visitas | 42 | 37 | 25 | 500 | | | SQL query is not prepared |
| #10000 | Sublium Subscriptions – Subscriptions for WooCommerce – Recurring Payments, Subscription Plans & Installments | 74 | 35 | 22 | 400 | | | wp function not compatible with requires wp |