| #8401 | Website Article Monetization By MageNet | 47 | 17 | 24 | 10k+ | | | Output is not escaped |
| #8402 | Draft – Tailwind CSS for WordPress. | 88 | 10 | 5 | 600 | | | Text Domain Mismatch |
| #8403 | Website Chat Button: Kommo integration | 97 | 1 | 43 | 1k+ | | | Non-prefixed global variable |
| #8404 | Melapress File Monitor | 80 | 16 | 90 | 6k+ | | | Non-prefixed global variable |
| #8405 | Website Monetization by MageNet | 33 | 60 | 87 | 20k+ | | | Output is not escaped |
| #8406 | Website Open/Closed Toggle | 44 | 14 | 33 | 500 | | | Output is not escaped |
| #8407 | Websitescanner Custom Schema | 65 | 28 | 19 | 600 | | | wp function not compatible with requires wp |
| #8408 | WProofreader spell & grammar check plugin for WordPress | 64 | 12 | 43 | 4k+ | | | Non-prefixed global variable |
| #8409 | Textmetrics | 33 | 324 | 163 | 400 | | | Output is not escaped |
| #8410 | WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More | 67 | 178 | 2,899 | 2k+ | | | Non-prefixed hook name |
| #8411 | WebwinkelKeur: Webshop keurmerk & reviews for WordPress | 32 | 200 | 47 | 4k+ | | | Short PHP open tag found |
| #8412 | Webyx for Gutenberg – Fullpage Fullscreen Scrolling Websites | 72 | 14 | 11 | 600 | | | Output is not escaped |
| #8413 | Webyx for Elementor – Fullpage Fullscreen Scrolling Websites | 67 | 684 | 10 | 500 | | | Non Singular String Literal Domain |
| #8414 | WEDOS OnLine monitoring | 35 | 36 | 15 | 700 | | | Output is not escaped |
| #8415 | Remove XML-RPC Methods | 100 | | 0 | 1k+ | | | No open findings |
| #8416 | WeeConnectPay – Clover Payment Gateway for WooCommerce | 28 | 179 | 171 | 500 | | | Exception output is not escaped |
| #8417 | Weer | 56 | 54 | 6 | 400 | | | Output is not escaped |
| #8418 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #8419 | Weight Based Pricing for WooCommerce | 40 | 167 | 86 | 600 | | | Text Domain Mismatch |
| #8420 | Weight Based Shipping for WooCommerce | 53 | 48 | 41 | 60k+ | | | Missing direct file access protection |
| #8421 | Swift SMTP (formerly Welcome Email Editor) | 51 | 12 | 62 | 7k+ | | | Missing nonce verification |
| #8422 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #8423 | Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring | 32 | 196 | 160 | 900 | | | Text Domain Mismatch |
| #8424 | WEN Featured Image | 76 | 1 | 18 | 3k+ | | | Input is not validated |
| #8425 | WEN Logo Slider | 46 | 6 | 46 | 1k+ | | | Non-prefixed global variable |
| #8426 | WEN Responsive Columns | 78 | 13 | 6 | 800 | | | Unsafe printing function |
| #8427 | WEN Skill Charts | 73 | | 23 | 600 | | | Request data is not unslashed |
| #8428 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | | | Exception output is not escaped |
| #8429 | Wenprise Pinyin Slug | 52 | 30 | 34 | 4k+ | | | Text Domain Mismatch |
| #8430 | Wenprise WeChatPay Payment Gateway For WooCommerce | 22 | 443 | 178 | 400 | | | Exception output is not escaped |
| #8431 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 2k+ | | | Output is not escaped |
| #8432 | Werk aan de Muur | 64 | 48 | 20 | 900 | | | Non Singular String Literal Domain |
| #8433 | Wettervorhersage | 58 | 49 | 7 | 1k+ | | | Output is not escaped |
| #8434 | Wetterwarner | 90 | 5 | 12 | 500 | | | Non-prefixed function |
| #8435 | WF Cookie Consent | 100 | | 0 | 10k+ | | | No open findings |
| #8436 | What Template | 97 | 6 | 0 | 1k+ | | | Missing Arg Domain |
| #8437 | What Template File Am I Viewing? | 96 | 7 | 0 | 1k+ | | | wp function not compatible with requires wp |
| #8438 | What The File | 35 | 9 | 12 | 40k+ | | | Input is not sanitized |
| #8439 | What Would Seth Godin Do | 100 | | 0 | 900 | | | No open findings |
| #8440 | WhatConverts | 74 | 10 | 10 | 7k+ | | | Non-prefixed function |
| #8441 | Chat Button & Custom ChatGPT-Powered Bot by GetButton.io | 58 | 26 | 8 | 20k+ | | | Non-prefixed function |
| #8442 | whatwedo ACF Cleaner | 61 | 8 | 20 | 800 | | | Input is not validated |
| #8443 | Wheel of Life: Coaching and Assessment Tool for Life Coach | 78 | 3 | 113 | 3k+ | | | Non-prefixed global variable |
| #8444 | When Last Login | 36 | 52 | 123 | 50k+ | | | Non-prefixed global variable |
| #8445 | When Last Login – Export User Records | 61 | 18 | 13 | 500 | | | Output is not escaped |
| #8446 | MediaMan – Where is this Image Used? | 92 | 2 | 12 | 500 | | | Direct Query |
| #8447 | Which Elementor Addon | 35 | 26 | 3 | 500 | | | Text Domain Mismatch |
| #8448 | Which Template | 98 | 4 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #8449 | which template file | 52 | 19 | 12 | 4k+ | | | Output is not escaped |
| #8450 | White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard | 38 | 205 | 31 | 10k+ | | | Output is not escaped |