| #7201 | SMK Sidebar Generator | 64 | 19 | 5 | 10k+ | | | Output is not escaped |
| #7202 | SMNTCS Custom Logo Link | 35 | 48 | 1 | 3k+ | | | badly named files |
| #7203 | SMNTCS Deactivate image compression | 35 | 6 | 1 | 1k+ | | | Hidden files included |
| #7204 | SMNTCS Disable REST API User Endpoints | 35 | 8 | 0 | 7k+ | | | Hidden files included |
| #7205 | SMNTCS Google Webmaster Tools | 35 | 8 | 0 | 6k+ | | | Hidden files included |
| #7206 | SMNTCS Quantity Increment Buttons for WooCommerce | 35 | 15 | 2 | 2k+ | | | Hidden files included |
| #7207 | Smooth Back To Top Button | 56 | 41 | 7 | 40k+ | | | Output is not escaped |
| #7208 | Smooth Page Scroll Up/Down Buttons | 91 | 1 | 5 | 2k+ | | | Non-prefixed function |
| #7209 | Smooth Scroll Up | 41 | 61 | 10 | 6k+ | | | Output is not escaped |
| #7210 | Smooth scrolling with Lenis | 97 | 3 | 0 | 3k+ | | | outdated tested upto header |
| #7211 | Smoothscroller | 85 | 9 | 2 | 500 | | | Output is not escaped |
| #7212 | Smoove connector for Elementor forms | 41 | 22 | 60 | 600 | | | Nonce verification recommended |
| #7213 | SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | 24 | 832 | 1,891 | 3k+ | | | Non-prefixed global variable |
| #7214 | SMTP | 39 | 54 | 15 | 700 | | | Non Singular String Literal Domain |
| #7215 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #7216 | SMTP Mailer | 42 | 51 | 49 | 70k+ | | | Unsafe printing function |
| #7217 | SMTP for SendGrid – YaySMTP | 36 | 27 | 96 | 1k+ | | | Non-prefixed global variable |
| #7218 | Yandex Mail SMTP Server for WordPress | 78 | 16 | 5 | 2k+ | | | Text Domain Mismatch |
| #7219 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #7220 | Snapchat Pixel for WooCommerce | 98 | 2 | 1 | 800 | | | outdated tested upto header |
| #7221 | Snapchat for WooCommerce | 98 | 1 | 12 | 60k+ | | | Dynamic hook name |
| #7222 | snappify | 99 | 1 | 1 | 800 | | | outdated tested upto header |
| #7223 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | | | Output is not escaped |
| #7224 | SnapWidget Social Photo Feed Widget | 82 | 9 | 9 | 600 | | | Output is not escaped |
| #7225 | Snazzy Maps | 43 | 9 | 62 | 30k+ | | | Request data is not unslashed |
| #7226 | Snitch | 87 | 5 | 19 | 800 | | | Nonce verification recommended |
| #7227 | Snow Monkey Blocks | 92 | 87 | 173 | 30k+ | | | Non-prefixed global variable |
| #7228 | Snow Monkey Editor | 99 | 2 | 3 | 30k+ | | | Non-prefixed global variable |
| #7229 | Snow Monkey Forms | 91 | 36 | 41 | 30k+ | | | Non-prefixed global variable |
| #7230 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #7231 | SiteOrigin CSS | 35 | 61 | 84 | 100k+ | | | Not In Footer |
| #7232 | Masonry Widget | 41 | 58 | 11 | 500 | | | Output is not escaped |
| #7233 | SO Page Builder Animate | 99 | 2 | 0 | 4k+ | | | Missing direct file access protection |
| #7234 | Pinyin Slugs | 97 | | 1 | 3k+ | | | Plugin menu slug uses __FILE__ |
| #7235 | SiteOrigin Widgets Bundle | 24 | 605 | 455 | 400k+ | | | Output is not escaped |
| #7236 | Social Comments | 37 | 59 | 32 | 400 | | | Output is not escaped |
| #7237 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 63 | 30 | 134 | 3k+ | | | Direct Query |
| #7238 | Social Divi | 86 | 15 | 8 | 1k+ | | | Missing direct file access protection |
| #7239 | Social Fabric Analytics From Collective Bias | 71 | 17 | 0 | 1k+ | | | Output is not escaped |
| #7240 | Social Icon Widget | 42 | 90 | 6 | 500 | | | Output is not escaped |
| #7241 | Social Icons | 38 | 72 | 83 | 10k+ | | | Output is not escaped |
| #7242 | WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat | 35 | 28 | 31 | 90k+ | | | Input is not sanitized |
| #7243 | Social Integration for BlueSky | 34 | 98 | 147 | 700 | | | Non-prefixed global variable |
| #7244 | Link in Bio Creator – Social | 46 | 52 | 36 | 2k+ | | | Non Singular String Literal Domain |
| #7245 | Social Media Auto Publish | 24 | 1,468 | 713 | 6k+ | | | Unsafe printing function |
| #7246 | Social Media Feather | 99 | | 4 | 10k+ | | | Non-prefixed constant |
| #7247 | Social Media Icons Widget | 72 | 181 | 10 | 1k+ | | | badly named files |
| #7248 | Social Media Widget | 53 | 90 | 21 | 30k+ | | | Text Domain Mismatch |
| #7249 | Social Media Widget | 47 | 51 | 3 | 400 | | | Output is not escaped |
| #7250 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | | | Output is not escaped |