| #6851 | Showcase IDX Real Estate Search & Lead Capture | 32 | 123 | 52 | 2k+ | | | Output is not escaped |
| #6852 | Showcase Payment Options (icons) | 93 | 2 | 3 | 1k+ | | | trademarked term |
| #6853 | Showeblogin Social Plugin | 47 | 59 | 5 | 400 | | | Output is not escaped |
| #6854 | ShowID for Post/Page/Category/Tag/Comment | 97 | 5 | 1 | 8k+ | | | Missing direct file access protection |
| #6855 | Shutter Reloaded | 38 | 194 | 95 | 1k+ | | | Text Domain Mismatch |
| #6856 | Side Menu Lite – Sticky Floating Side Menu | 59 | 9 | 123 | 7k+ | | | Non-prefixed global variable |
| #6857 | Sidebar Content Clone | 100 | | 1 | 400 | | | Discouraged text-domain loading |
| #6858 | Sidebar Login | 97 | 2 | 6 | 10k+ | | | Non-prefixed global variable |
| #6859 | Lightweight Sidebar Manager | 83 | 13 | 36 | 80k+ | | | Non-prefixed class |
| #6860 | Sidebar Manager Light | 31 | 221 | 76 | 1k+ | | | Text Domain Mismatch |
| #6861 | Sidebars for Hello Elementor Theme | 98 | 2 | 2 | 1k+ | | | outdated tested upto header |
| #6862 | SideMenu | 100 | | 1 | 900 | | | Dynamic hook name |
| #6863 | Orphans | 81 | 1 | 43 | 50k+ | | | Dynamic hook name |
| #6864 | Sight – Professional Image Gallery and Portfolio | 97 | 30 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #6865 | Sign-up Sheets | 27 | 325 | 363 | 1k+ | | | Output is not escaped |
| #6866 | Signature field for Elementor Forms | 96 | 98 | 1 | 2k+ | | | wp function not compatible with requires wp |
| #6867 | Simpaisa Wallet (Jazzcash & Easypaisa) Payment Services | 39 | 67 | 74 | 1k+ | | | Interpolated Variable Text |
| #6868 | Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More | 41 | 43 | 61 | 100k+ | | | Request data is not unslashed |
| #6869 | Simple Admin Language Change | 98 | 4 | 2 | 10k+ | | | Missing direct file access protection |
| #6870 | Simple ads.txt | 82 | 8 | 6 | 1k+ | | | Missing direct file access protection |
| #6871 | Simple Ajax Chat – Add a Fast, Secure Chat Box | 32 | 108 | 266 | 2k+ | | | Output is not escaped |
| #6872 | Simple Analytics – Tag Manager | 67 | 19 | 2 | 1k+ | | | Output is not escaped |
| #6873 | Simple Analytics | 97 | 6 | 3 | 1k+ | | | Missing Translators Comment |
| #6874 | Simple Author Box | 94 | 12 | 61 | 90k+ | | | Non-prefixed global variable |
| #6875 | Simple Auto-Poster for Bluesky | 90 | 3 | 2 | 700 | | | Setting is missing a sanitization callback |
| #6876 | Simple Automatic Updates | 85 | 18 | 1 | 2k+ | | | Missing Translators Comment |
| #6877 | Simple Back To Top | 58 | 15 | 43 | 3k+ | | | Non-prefixed global variable |
| #6878 | Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website | 36 | 216 | 50 | 50k+ | | | Output is not escaped |
| #6879 | Simple Block Gallery | 100 | | 0 | 1k+ | | | No open findings |
| #6880 | Simple Blog Card | 97 | 6 | 18 | 3k+ | | | Non-prefixed global variable |
| #6881 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #6882 | Simple Cache | 41 | 33 | 59 | 1k+ | | | Input is not sanitized |
| #6883 | Simple Calendar – Advanced Custom Fields | 67 | 18 | 6 | 400 | | | Output is not escaped |
| #6884 | Simple calendar for Elementor | 31 | 125 | 270 | 500 | | | Direct Query |
| #6885 | Simple Catalog for WooCommerce | 87 | 2 | 4 | 1k+ | | | wp redirect wp redirect |
| #6886 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 82 | 148 | 100k+ | | | Output is not escaped |
| #6887 | Simple Colorbox | 90 | 11 | 1 | 1k+ | | | Missing Arg Domain |
| #6888 | Comment Edit Core – Simple Comment Editing | 73 | 27 | 85 | 2k+ | | | Non-prefixed hook name |
| #6889 | Contact Info Widget | 40 | 184 | 3 | 1k+ | | | Output is not escaped |
| #6890 | Contact Information Widget | 51 | 69 | 5 | 500 | | | Output is not escaped |
| #6891 | Simple Cookie Notice | 98 | 4 | 2 | 2k+ | | | Text Domain Mismatch |
| #6892 | Simple Cookie Notification Bar | 51 | 49 | 6 | 1k+ | | | Text Domain Mismatch |
| #6893 | Simple Copy Post Button | 53 | 14 | 24 | 400 | | | Input is not sanitized |
| #6894 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | | | Missing Arg Domain |
| #6895 | Simple CPT | 41 | 280 | 60 | 4k+ | | | Unsafe printing function |
| #6896 | Simple CSS | 57 | 22 | 13 | 80k+ | | | Missing Version |
| #6897 | Simple CSS for widgets | 58 | 11 | 15 | 1k+ | | | Missing nonce verification |
| #6898 | Simple Custom CSS Plugin | 88 | 17 | 5 | 100k+ | | | wp function not compatible with requires wp |
| #6899 | Simple Custom Post Order | 48 | 10 | 77 | 300k+ | | | Direct Query |
| #6900 | Simple Definition List Blocks | 35 | 11 | 2 | 1k+ | | | Hidden files included |