| #7901 | Tumult Hype Animations | 32 | 56 | 117 | 1k+ | | | Output is not escaped |
| #7902 | Turbo Addons Elementor | 100 | | 2 | 2k+ | | | No PHP code found |
| #7903 | turboSMTP | 40 | 114 | 112 | 400 | | | Unsafe printing function |
| #7904 | Turn Comments Off | 100 | | 0 | 1k+ | | | No open findings |
| #7905 | Turn Off Comments — Hide Comment Box and Stop Spam | 89 | 3 | 4 | 1k+ | | | Non-prefixed function |
| #7906 | Turn Rank Math FAQ Block to Accordion | 99 | 1 | 0 | 5k+ | | | outdated tested upto header |
| #7907 | Tutor LMS – eLearning and online course solution | 24 | 328 | 4,409 | 100k+ | | | Non-prefixed global variable |
| #7908 | Tutor LMS BunnyNet Integration | 97 | 2 | 13 | 1k+ | | | Non-prefixed global variable |
| #7909 | Tutor LMS Divi Modules | 30 | 420 | 722 | 1k+ | | | Non-prefixed global variable |
| #7910 | Tutor LMS Elementor Addons | 31 | 227 | 453 | 30k+ | | | Non-prefixed global variable |
| #7911 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | | | Direct Query |
| #7912 | TutorMate | 98 | 3 | 2 | 10k+ | | | Missing Translators Comment |
| #7913 | Big File Uploads – Increase Maximum File Upload Size | 31 | 101 | 92 | 100k+ | | | Output is not escaped |
| #7914 | Tuxedo Responsive Widget Columns | 78 | 19 | 3 | 400 | | | Output is not escaped |
| #7915 | TW Pagination | 41 | 90 | 23 | 1k+ | | | Non Singular String Literal Domain |
| #7916 | TW Recent Posts Widget | 40 | 97 | 14 | 1k+ | | | Output is not escaped |
| #7917 | TWB Woocommerce Reviews | 99 | | 5 | 600 | | | trademarked term |
| #7918 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 256 | 431 | 20k+ | | | Non-prefixed hook name |
| #7919 | Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio | 97 | 12 | 70 | 20k+ | | | Text Domain Mismatch |
| #7920 | Twenty Eleven Theme Extensions | 38 | 35 | 30 | 3k+ | | | Output is not escaped |
| #7921 | Twenty20 Image Before-After | 78 | 104 | 14 | 20k+ | | | Text Domain Mismatch |
| #7922 | Twiget Twitter Widget | 38 | 147 | 36 | 500 | | | Output is not escaped |
| #7923 | Twitter | 64 | 27 | 23 | 9k+ | | | Missing Translators Comment |
| #7924 | WP Twitter Auto Publish | 33 | 442 | 171 | 4k+ | | | Output is not escaped |
| #7925 | Twitter for WordPress | 38 | 47 | 24 | 1k+ | | | Output is not escaped |
| #7926 | BestWebSoft's Twitter | 50 | 477 | 174 | 900 | | | Text Domain Mismatch |
| #7927 | Tools for Twitter | 34 | 135 | 87 | 1k+ | | | Output is not escaped |
| #7928 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | | Non-prefixed global variable |
| #7929 | Two Factor | 42 | 18 | 70 | 100k+ | | | Nonce verification recommended |
| #7930 | Two Factor (2FA) Authentication via Email | 61 | 12 | 27 | 9k+ | | | Request data is not unslashed |
| #7931 | Two Factor Authentication | 35 | 108 | 139 | 20k+ | | | Output is not escaped |
| #7932 | WebAuthn Provider for Two Factor | 91 | 6 | 14 | 1k+ | | | Missing Arg Domain |
| #7933 | TWST Login Block | 98 | 4 | 1 | 1k+ | | | Missing Translators Comment |
| #7934 | Typebot | 59 | 17 | 9 | 3k+ | | | Output is not escaped |
| #7935 | Adobe Fonts (formerly Typekit) for WordPress | 97 | 3 | 5 | 10k+ | | | trademarked term |
| #7936 | TypePad emoji for TinyMCE | 38 | 100 | 24 | 8k+ | | | Text Domain Mismatch |
| #7937 | Typing Text | 81 | 15 | 16 | 600 | | | file system operations mkdir |
| #7938 | TZ Flickr Widget | 40 | 67 | 7 | 500 | | | Output is not escaped |
| #7939 | ingenidev, UAE – AED Currency Symbol Changer | مغير رمز عملة الدرهم الإماراتي | 99 | | 3 | 900 | | | plugin header nonexistent domain path |
| #7940 | Bob Go smart shipping solution for WooCommerce | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #7941 | Uber Login Logo | 62 | 16 | 5 | 10k+ | | | Unsafe printing function |
| #7942 | Uber reCaptcha | 43 | 129 | 45 | 1k+ | | | Text Domain Mismatch |
| #7943 | Ubigeo de Perú para Woocommerce y WordPress | 36 | 191 | 235 | 4k+ | | | Non-prefixed function |
| #7944 | uCalc | 35 | 78 | 8 | 600 | | | Text Domain Mismatch |
| #7945 | UF Health Require Image Alt Tags | 98 | 3 | 1 | 500 | | | Missing direct file access protection |
| #7946 | UiChemy — Figma Converter for Elementor, Gutenberg and Bricks | 39 | 8 | 100 | 9k+ | | | Nonce verification recommended |
| #7947 | UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks | 49 | 34 | 38 | 40k+ | | | Missing direct file access protection |
| #7948 | UiCore Blocks – Free WordPress Gutenberg Blocks | 32 | 59 | 394 | 500 | | | Non-prefixed global variable |
| #7949 | UiCore Elements – Free widgets and templates for Elementor | 58 | 29 | 30 | 40k+ | | | Output is not escaped |
| #7950 | Uix Shortcodes | 33 | 246 | 444 | 400 | | | Non-prefixed global variable |