| #7401 | Sticky Posts – Switch | 41 | 84 | 5 | 6k+ | | | Output is not escaped |
| #7402 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #7403 | Sticky Social Link | 35 | 49 | 2 | 1k+ | | | Output is not escaped |
| #7404 | Combine Social Photos | Still BE | 42 | 33 | 281 | 700 | | | Non-prefixed global variable |
| #7405 | Stitch Express | 70 | 10 | 6 | 400 | | | Output is not escaped |
| #7406 | Stock Exporter for WooCommerce | 98 | 2 | 14 | 1k+ | | | Non-prefixed hook name |
| #7407 | Stock Locations for WooCommerce | 32 | 549 | 360 | 1k+ | | | Output is not escaped |
| #7408 | Stock market charts from finviz | 85 | 8 | 1 | 400 | | | Missing Arg Domain |
| #7409 | Stock Market News | 38 | 71 | 11 | 500 | | | Output is not escaped |
| #7410 | Stock Market Overview | 38 | 86 | 14 | 1k+ | | | Output is not escaped |
| #7411 | Stock Market Ticker | 38 | 69 | 14 | 3k+ | | | Output is not escaped |
| #7412 | Stock Quotes List | 38 | 72 | 13 | 600 | | | Output is not escaped |
| #7413 | Stock Sync for WooCommerce | 32 | 362 | 232 | 1k+ | | | Text Domain Mismatch |
| #7414 | Stock Ticker | 39 | 92 | 49 | 2k+ | | | Output is not escaped |
| #7415 | Stockdio Historical Chart | 39 | 65 | 16 | 800 | | | Output is not escaped |
| #7416 | StockPack – Stock photos from Unsplash, Adobe Stock and more | 46 | 35 | 51 | 6k+ | | | Nonce verification recommended |
| #7417 | Events Manager – OpenStreetMaps | 20 | 559 | 444 | 700 | | | Output is not escaped |
| #7418 | Stop Emails | 82 | 9 | 3 | 5k+ | | | Missing direct file access protection |
| #7419 | Stop Media Comment Spamming | 99 | 2 | 0 | 800 | | | Missing direct file access protection |
| #7420 | Stop Pinging Yourself | 49 | 47 | 8 | 600 | | | Non Singular String Literal Domain |
| #7421 | Stop Spammers Classic | 94 | 185 | 1 | 30k+ | | | wp function not compatible with requires wp |
| #7422 | Stop User Enumeration | 99 | 1 | 1 | 50k+ | | | Dynamic hook name |
| #7423 | Stop WP Emails Going to Spam | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #7424 | Stop XML-RPC Attacks | 100 | | 1 | 6k+ | | | Non-prefixed class |
| #7425 | Easy Updates Manager | 48 | 13 | 182 | 300k+ | | | Non-prefixed global variable |
| #7426 | Store file uploads for Contact Form 7 | 76 | 5 | 6 | 1k+ | | | Output is not escaped |
| #7427 | eMagicOne Store Manager for WooCommerce | 91 | 6 | 19 | 500 | | | Non-prefixed class |
| #7428 | StoreAgent – WooCommerce AI Chatbot & AI Content Tools | 76 | | 202 | 500 | | | Non-prefixed global variable |
| #7429 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 35 | | 524 | 600 | | | Non-prefixed global variable |
| #7430 | Storefront Add Slider | 92 | 11 | 1 | 800 | | | Text Domain Mismatch |
| #7431 | Storefront Blog Excerpts | 82 | 24 | 2 | 700 | | | Text Domain Mismatch |
| #7432 | Storefront Footer Bar | 91 | 6 | 2 | 3k+ | | | Missing Arg Domain |
| #7433 | Storefront Hamburger Menu | 85 | 9 | 1 | 2k+ | | | Output is not escaped |
| #7434 | Storefront Homepage Contact Section | 82 | 26 | 2 | 1k+ | | | Output is not escaped |
| #7435 | Storefront Product Sharing | 72 | 13 | 3 | 4k+ | | | Output is not escaped |
| #7436 | Title Toggle for Storefront Theme | 68 | 16 | 9 | 3k+ | | | Output is not escaped |
| #7437 | Storefront Top Bar | 77 | 20 | 13 | 2k+ | | | Non-prefixed hook name |
| #7438 | StoreOne Extension | 85 | 68 | 7 | 400 | | | Text Domain Mismatch |
| #7439 | StoryChief | 51 | 12 | 55 | 1k+ | | | Input is not sanitized |
| #7440 | Stratum Widgets for Elementor | 60 | 66 | 366 | 20k+ | | | Non-prefixed global variable |
| #7441 | Stream | 81 | 5 | 80 | 80k+ | | | Direct Query |
| #7442 | StreamWeasels Online Status Bar | 24 | 555 | 1,349 | 500 | | | Non-prefixed global variable |
| #7443 | Stream Video Player | 27 | 220 | 135 | 600 | | | Output is not escaped |
| #7444 | StreamCast – Live Radio Streaming Player | 100 | | 0 | 1k+ | | | No open findings |
| #7445 | StreamWeasels Twitch Integration | 23 | 555 | 1,465 | 1k+ | | | Non-prefixed global variable |
| #7446 | StreamWeasels YouTube Integration | 24 | 544 | 1,384 | 1k+ | | | Non-prefixed global variable |
| #7447 | String locator | 35 | 52 | 319 | 100k+ | | | Non-prefixed global variable |
| #7448 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #7449 | Accept Stripe Payments | 21 | 373 | 884 | 20k+ | | | Missing nonce verification |
| #7450 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |