| #6551 | RSS Feed Pro | 33 | 484 | 16 | 500 | | | Output is not escaped |
| #6552 | RSS Feed Widget | 38 | 207 | 89 | 2k+ | | | Unsafe printing function |
| #6553 | RSS for Yandex Turbo | 32 | 687 | 307 | 20k+ | | | Unsafe printing function |
| #6554 | RSS for Yandex Zen | 37 | 240 | 100 | 4k+ | | | Unsafe printing function |
| #6555 | RSS Image Feed | 37 | 147 | 16 | 2k+ | | | Output is not escaped |
| #6556 | RSS Importer | 70 | 14 | 2 | 30k+ | | | Output is not escaped |
| #6557 | RSS Includes Pages | 78 | 4 | 8 | 10k+ | | | Output is not escaped |
| #6558 | RSS Just Better | 42 | 136 | 2 | 400 | | | Output is not escaped |
| #6559 | RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | 99 | | 3 | 8k+ | | | Non-prefixed class |
| #6560 | RT Slider | 89 | 9 | 2 | 800 | | | Missing direct file access protection |
| #6561 | RTL Tester | 92 | 6 | 2 | 1k+ | | | Nonce verification recommended |
| #6562 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #6563 | RumbleTalk Live Group Chat – HTML5 | 83 | 9 | 13 | 700 | | | Missing direct file access protection |
| #6564 | Run SQL Query | 78 | 13 | 8 | 600 | | | Non-prefixed global variable |
| #6565 | Taxonomy Tags to Checkboxes | 35 | 2 | 0 | 1k+ | | | Hidden files included |
| #6566 | rus to lat advanced | 97 | 3 | 3 | 7k+ | | | Deprecated function: seems_utf8 |
| #6567 | Russian Currency | 54 | 52 | 6 | 400 | | | Output is not escaped |
| #6568 | Russian Post and EMS for WooCommerce | 68 | 16 | 47 | 1k+ | | | Non-prefixed global variable |
| #6569 | Rut Chileno con Validación para WooCommerce | 43 | 35 | 16 | 1k+ | | | Text Domain Mismatch |
| #6570 | Rutube Embed | 100 | | 0 | 500 | | | No open findings |
| #6571 | RV Embed PDF | 97 | 5 | 0 | 900 | | | Missing direct file access protection |
| #6572 | Optimize Database after Deleting Revisions | 36 | 644 | 127 | 60k+ | | | Output is not escaped |
| #6573 | RY City Select for WooCommerce | 100 | | 1 | 2k+ | | | trademarked term |
| #6574 | RY Tools for WooCommerce | 46 | | 295 | 5k+ | | | Non-prefixed class |
| #6575 | Ryviu – Review Importer & Product Reviews | 37 | 72 | 95 | 1k+ | | | Output is not escaped |
| #6576 | Razorpay Payment Links for WooCommerce | 50 | 16 | 34 | 1k+ | | | Nonce verification recommended |
| #6577 | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | 35 | 24 | 5 | 8k+ | | | Missing direct file access protection |
| #6578 | SaasPricing – Advanced Pricing & Comparison Tables for Elementor | 99 | 1 | 4 | 400 | | | Non-prefixed hook name |
| #6579 | Safe Redirect Manager | 66 | 9 | 60 | 40k+ | | | Non-prefixed hook name |
| #6580 | Safe SVG | 98 | 7 | 4 | 1m+ | | | Missing Arg Domain |
| #6581 | Safelayout Cute Preloader – CSS3 WordPress Preloader | 84 | 3 | 14 | 10k+ | | | Input is not validated |
| #6582 | Safelayout Elegant Icons – WordPress icons | 67 | 3 | 17 | 700 | | | Input is not validated |
| #6583 | Safety Exit | 58 | 52 | 26 | 1k+ | | | Text Domain Mismatch |
| #6584 | Sailthru for WordPress | 24 | 239 | 266 | 2k+ | | | Non-prefixed global variable |
| #6585 | Easy SSL Plugin for SAKURA Rental Server | 62 | 23 | 17 | 50k+ | | | Input is not sanitized |
| #6586 | SALERT – Fake Sales Notification WooCommerce | 42 | 41 | 67 | 8k+ | | | Non-prefixed global variable |
| #6587 | Sales Countdown Timer | 60 | 107 | 150 | 6k+ | | | Missing Arg Domain |
| #6588 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #6589 | Sales Report for WooCommerce | 24 | 659 | 451 | 1k+ | | | Output is not escaped |
| #6590 | Sales Tax Reports For WooCommerce | 40 | 50 | 65 | 800 | | | Output is not escaped |
| #6591 | Brilliant Web-to-Lead for Salesforce | 28 | 247 | 244 | 2k+ | | | Text Domain Mismatch |
| #6592 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #6593 | Salt Shaker | 85 | 15 | 13 | 6k+ | | | Interpolated SQL is not prepared |
| #6594 | Same Category Posts | 40 | 183 | 8 | 3k+ | | | Output is not escaped |
| #6595 | SamedayCourier Shipping | 29 | 336 | 269 | 4k+ | | | Non Singular String Literal Domain |
| #6596 | SameSite Cookies | 98 | 3 | 2 | 700 | | | Missing direct file access protection |
| #6597 | Clean Filenames | 94 | 2 | 4 | 3k+ | | | Missing nonce verification |
| #6598 | Saphali Woocommerce Lite | 34 | 376 | 313 | 10k+ | | | Non-prefixed global variable |
| #6599 | SAR Friendly SMTP | 98 | 2 | 11 | 2k+ | | | Non-prefixed function |
| #6600 | Social Sharing Plugin – Sassy Social Share | 22 | 1,689 | 233 | 100k+ | | | wp function not compatible with requires wp |