| #6901 | Sidebar Manager Light | 31 | 221 | 76 | 1k+ | | | Text Domain Mismatch |
| #6902 | Sidebars for Hello Elementor Theme | 98 | 2 | 2 | 1k+ | | | outdated tested upto header |
| #6903 | SideMenu | 100 | | 1 | 1k+ | | | Dynamic hook name |
| #6904 | Orphans | 81 | 1 | 43 | 50k+ | | | Dynamic hook name |
| #6905 | Sight – Professional Image Gallery and Portfolio | 97 | 30 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #6906 | Sign-up Sheets | 27 | 325 | 363 | 1k+ | | | Output is not escaped |
| #6907 | Signature field for Elementor Forms | 96 | 98 | 1 | 2k+ | | | wp function not compatible with requires wp |
| #6908 | Simpaisa Wallet (Jazzcash & Easypaisa) Payment Services | 39 | 67 | 74 | 1k+ | | | Interpolated Variable Text |
| #6909 | Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More | 41 | 43 | 61 | 100k+ | | | Request data is not unslashed |
| #6910 | Simple Admin Language Change | 98 | 4 | 2 | 10k+ | | | Missing direct file access protection |
| #6911 | Simple ads.txt | 82 | 8 | 6 | 1k+ | | | Missing direct file access protection |
| #6912 | Simple Ajax Chat – Add a Fast, Secure Chat Box | 32 | 108 | 266 | 2k+ | | | Output is not escaped |
| #6913 | Simple Analytics | 97 | 6 | 3 | 1k+ | | | Missing Translators Comment |
| #6914 | Simple Author Box | 94 | 12 | 61 | 90k+ | | | Non-prefixed global variable |
| #6915 | Simple Auto-Poster for Bluesky | 90 | 3 | 2 | 700 | | | Setting is missing a sanitization callback |
| #6916 | Simple Automatic Updates | 85 | 18 | 1 | 2k+ | | | Missing Translators Comment |
| #6917 | Simple Back To Top | 58 | 15 | 43 | 3k+ | | | Non-prefixed global variable |
| #6918 | Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website | 36 | 216 | 50 | 50k+ | | | Output is not escaped |
| #6919 | Simple Block Gallery | 100 | | 0 | 1k+ | | | No open findings |
| #6920 | Simple Blog Card | 97 | 6 | 18 | 3k+ | | | Non-prefixed global variable |
| #6921 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #6922 | Simple Cache | 41 | 33 | 59 | 1k+ | | | Input is not sanitized |
| #6923 | Simple Calendar – Advanced Custom Fields | 67 | 18 | 6 | 400 | | | Output is not escaped |
| #6924 | Simple calendar for Elementor | 31 | 125 | 270 | 500 | | | Direct Query |
| #6925 | Simple Catalog for WooCommerce | 87 | 2 | 4 | 1k+ | | | wp redirect wp redirect |
| #6926 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 82 | 148 | 100k+ | | | Output is not escaped |
| #6927 | Simple Colorbox | 90 | 11 | 1 | 1k+ | | | Missing Arg Domain |
| #6928 | Comment Edit Core – Simple Comment Editing | 73 | 27 | 85 | 2k+ | | | Non-prefixed hook name |
| #6929 | Contact Info Widget | 40 | 184 | 3 | 1k+ | | | Output is not escaped |
| #6930 | Contact Information Widget | 51 | 69 | 5 | 400 | | | Output is not escaped |
| #6931 | Simple Cookie Notice | 98 | 4 | 2 | 2k+ | | | Text Domain Mismatch |
| #6932 | Simple Cookie Notification Bar | 51 | 49 | 6 | 1k+ | | | Text Domain Mismatch |
| #6933 | Simple Copy Post Button | 53 | 14 | 24 | 400 | | | Input is not sanitized |
| #6934 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | | | Missing Arg Domain |
| #6935 | Simple CPT | 41 | 280 | 60 | 4k+ | | | Unsafe printing function |
| #6936 | Simple CSS | 57 | 22 | 13 | 80k+ | | | Missing Version |
| #6937 | Simple CSS for widgets | 58 | 11 | 15 | 1k+ | | | Missing nonce verification |
| #6938 | Simple Custom CSS Plugin | 88 | 17 | 5 | 100k+ | | | wp function not compatible with requires wp |
| #6939 | Simple Definition List Blocks | 35 | 11 | 2 | 1k+ | | | Hidden files included |
| #6940 | Simple Digital Clock 🕒 | 100 | | 0 | 500 | | | No open findings |
| #6941 | Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks | 99 | 1 | 1 | 1k+ | | | mismatched plugin name |
| #6942 | Simple Divi Shortcode | 89 | 5 | 0 | 10k+ | | | Output is not escaped |
| #6943 | Simple Download Counter | 42 | 58 | 46 | 2k+ | | | Output is not escaped |
| #6944 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #6945 | Simple Event Planner | 27 | 149 | 346 | 1k+ | | | Non-prefixed global variable |
| #6946 | Simple Expires | 38 | 32 | 39 | 500 | | | Non Singular String Literal Domain |
| #6947 | Simple Export Import for ACF Data | 35 | 19 | 64 | 1k+ | | | Request data is not unslashed |
| #6948 | Simple Like Page – Fast & Privacy-Friendly Page Embeds | 41 | 145 | 31 | 10k+ | | | Output is not escaped |
| #6949 | Simple Statistics for Feeds | 40 | 64 | 131 | 800 | | | Nonce verification recommended |
| #6950 | Simple File List | 93 | 1 | 525 | 3k+ | | | Non-prefixed global variable |