| #7301 | Specific Content For Mobile – Customize the mobile version without redirections | 40 | 26 | 155 | 4k+ | | | Nonce verification recommended |
| #7302 | Specify Missing Image Dimensions | 45 | 21 | 12 | 1k+ | | | Unsafe printing function |
| #7303 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 244 | 1,266 | 7k+ | | | Non-prefixed global variable |
| #7304 | Spectre Icons | 97 | | 1 | 500 | | | Input is not sanitized |
| #7305 | Speculative Loading | 99 | | 7 | 70k+ | | | Non-prefixed global variable |
| #7306 | BeyondWords – Text-to-Speech | 99 | 2 | 0 | 800 | | | outdated tested upto header |
| #7307 | Speed Booster Pack ⚡ PageSpeed Optimization Suite | 27 | 108 | 187 | 9k+ | | | Missing Translators Comment |
| #7308 | Speed Contact Bar | 42 | 53 | 20 | 4k+ | | | Output is not escaped |
| #7309 | Speed Up – Browser Caching | 95 | 13 | 2 | 700 | | | file system operations is writable |
| #7310 | Speed up Contact Form 7 | 97 | 11 | 0 | 400 | | | wp function not compatible with requires wp |
| #7311 | Speed Up – JavaScript To Footer | 89 | 4 | 1 | 1k+ | | | Output is not escaped |
| #7312 | Speed Up – Lazy Load | 99 | 1 | 1 | 500 | | | outdated tested upto header |
| #7313 | Speed Up – Optimize CSS Delivery | 89 | 4 | 1 | 600 | | | Output is not escaped |
| #7314 | SpeedSize Image & Video AI-Optimizer | 54 | 98 | 17 | 400 | | | Text Domain Mismatch |
| #7315 | Speedy Page Redirect | 35 | 6 | 10 | 1k+ | | | Output is not escaped |
| #7316 | SpeedyCache – Cache, Optimization, Performance | 31 | 65 | 118 | 600k+ | | | Input is not validated |
| #7317 | Spice Blocks | 25 | 536 | 1,300 | 1k+ | | | Non-prefixed global variable |
| #7318 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | | | Non-prefixed global variable |
| #7319 | Spice Social Share | 99 | 1 | 1 | 4k+ | | | Discouraged text-domain loading |
| #7320 | SpiceBox | 24 | 828 | 1,816 | 20k+ | | | Non-prefixed global variable |
| #7321 | Spider Elements – Premium Elementor Widgets & Addons Library | 24 | 542 | 1,555 | 500 | | | Non-prefixed global variable |
| #7322 | Spider Blocker | 78 | 19 | 9 | 20k+ | | | Missing Translators Comment |
| #7323 | Spiffy Calendar | 33 | 473 | 243 | 3k+ | | | Output is not escaped |
| #7324 | Spin Wheel – Interactive spinning wheel that offers coupons | 33 | 680 | 313 | 500 | | | Unsafe printing function |
| #7325 | SpinupWP | 49 | 43 | 38 | 30k+ | | | Non-prefixed function |
| #7326 | Spiraclethemes Site Library | 97 | | 28 | 1k+ | | | Non-prefixed global variable |
| #7327 | Splide Carousel Block | 100 | 1 | 0 | 3k+ | | | Missing direct file access protection |
| #7328 | Split Test For Elementor | 32 | 98 | 132 | 3k+ | | | Non-prefixed global variable |
| #7329 | Spocket ‑ US & EU Dropshipping | 70 | 15 | 31 | 1k+ | | | Direct Query |
| #7330 | Spoki – Chat Buttons and WooCommerce Notifications | 32 | 1,074 | 260 | 700 | | | Unsafe printing function |
| #7331 | SportsPress for Baseball | 47 | 113 | 34 | 900 | | | Text Domain Mismatch |
| #7332 | SportsPress for Basketball | 58 | 104 | 34 | 1k+ | | | Text Domain Mismatch |
| #7333 | SportsPress for Cricket | 40 | 122 | 34 | 500 | | | Text Domain Mismatch |
| #7334 | SportsPress for Football (Soccer) | 58 | 107 | 34 | 6k+ | | | Text Domain Mismatch |
| #7335 | SportsPress for Volleyball | 58 | 107 | 34 | 500 | | | Text Domain Mismatch |
| #7336 | TechGasp Music Master | 41 | 143 | 4 | 500 | | | Output is not escaped |
| #7337 | Sp*tify Play Button for WordPress | 54 | 21 | 15 | 3k+ | | | Text Domain Mismatch |
| #7338 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #7339 | Spots | 35 | 195 | 49 | 800 | | | Output is not escaped |
| #7340 | Spreadr Woocommerce Plugin – Amazon Importer for Dropshipping and Affiliate | 39 | 42 | 226 | 500 | | | Request data is not unslashed |
| #7341 | Spreadshop Plugin | 35 | 145 | 44 | 4k+ | | | wp function not compatible with requires wp |
| #7342 | Spreaker Shortcode | 95 | 23 | 3 | 4k+ | | | Text Domain Mismatch |
| #7343 | Sprout Invoices – Client Invoicing & Estimates | 35 | 40 | 1,800 | 1k+ | | | Non-prefixed hook name |
| #7344 | WP Forms + Sprout Invoices – Easy Invoice & Quote Submissions | 67 | 40 | 12 | 400 | | | Text Domain Mismatch |
| #7345 | SQL Buddy – Database Management Made Easy | 65 | 12 | 16 | 5k+ | | | SQL query is not prepared |
| #7346 | SQL Executioner | 70 | 18 | 17 | 2k+ | | | Non-prefixed global variable |
| #7347 | SQLite Database Integration | 29 | 161 | 89 | 3k+ | | | Exception output is not escaped |
| #7348 | SQLite Object Cache | 99 | 6 | 2 | 10k+ | | | wp function not compatible with requires wp |
| #7349 | Squad Modules Lite – Free Divi 5 & Divi 4 Modules for Divi Builder | 24 | 605 | 1,472 | 1k+ | | | Non-prefixed global variable |
| #7350 | Square Thumbnails | 35 | 43 | 317 | 800 | | | error log error log |