| #3051 | Email Marketing by EmailOctopus | 39 | 43 | 62 | 3k+ | | | Non-prefixed global variable |
| #3052 | Emails Catch All | 99 | | 10 | 600 | | | Non-prefixed constant |
| #3053 | Emalls Extraction API – Official | 97 | 3 | 3 | 7k+ | | | Non-prefixed class |
| #3054 | Embed Block for GitHub | 98 | 5 | 2 | 400 | | | Missing Translators Comment |
| #3055 | Embed Block for TikTok | 99 | 1 | 2 | 500 | | | Non-prefixed hook name |
| #3056 | EMC – Easily Embed Calendly Scheduling | 100 | | 0 | 10k+ | | | No open findings |
| #3057 | Embed Chessboard | 41 | 103 | 9 | 600 | | | Text Domain Mismatch |
| #3058 | Embed Code – Headers & Footers by DesignBombs | 70 | 19 | 5 | 4k+ | | | Output is not escaped |
| #3059 | Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more | 35 | 102 | 92 | 400 | | | Non-prefixed global variable |
| #3060 | Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform | 99 | 1 | 0 | 20k+ | | | outdated tested upto header |
| #3061 | Embed Google Fonts | 64 | 28 | 7 | 5k+ | | | Output is not escaped |
| #3062 | Gallery for Google Photos – Import and Display Photo Albums | 100 | | 1 | 1k+ | | | upgrade notice limit |
| #3063 | Embed Google Photos album | 97 | 5 | 2 | 3k+ | | | Missing direct file access protection |
| #3064 | Embed Iframe | 69 | 25 | 6 | 2k+ | | | wp function not compatible with requires wp |
| #3065 | Embed Lottie Player – Add Interactive Lottie Animations with Block Support | 99 | 1 | 1 | 4k+ | | | mismatched plugin name |
| #3066 | Block for Embed Google Maps | 96 | 5 | 2 | 400 | | | block api version too low |
| #3067 | Document Viewer – Embed and Display Office and PDF Files | 100 | | 0 | 2k+ | | | No open findings |
| #3068 | Embed Optimizer | 100 | | 4 | 50k+ | | | Text Domain Mismatch |
| #3069 | Embed PDF Viewer | 35 | 1 | 2 | 20k+ | | | Hidden files included |
| #3070 | PowerBI Embed Reports | 72 | 3 | 20 | 500 | | | Nonce verification recommended |
| #3071 | Embed Privacy | 35 | 10 | 41 | 10k+ | | | slow db query meta key |
| #3072 | Twice Commerce – Easy Rental Booking System | 86 | 9 | 1 | 400 | | | Output is not escaped |
| #3073 | miniOrange Embed Files for SharePoint/OneDrive | 100 | | 4 | 800 | | | Non-prefixed constant |
| #3074 | Player for SoundCloud – Embed and Play Audio Tracks | 78 | 17 | 24 | 1k+ | | | Text Domain Mismatch |
| #3075 | Embed STL | 93 | 5 | 1 | 400 | | | Missing Arg Domain |
| #3076 | EmbedSocial – Social Media Feeds, Reviews and Galleries | 98 | 2 | 2 | 4k+ | | | mismatched plugin name |
| #3077 | CanadaHelps Embedded Donation Form | 99 | 2 | 0 | 400 | | | Missing direct file access protection |
| #3078 | Embedly | 42 | 17 | 38 | 2k+ | | | Output is not escaped |
| #3079 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #3080 | Emergency password reset | 73 | 56 | 14 | 800 | | | wp function not compatible with requires wp |
| #3081 | EMI Calculator | 63 | 37 | 1 | 400 | | | Setting is missing a sanitization callback |
| #3082 | Emoji Autocomplete Gutenberg | 98 | 2 | 5 | 600 | | | trademarked term |
| #3083 | Emoji Settings | 88 | 4 | 5 | 2k+ | | | Input is not sanitized |
| #3084 | Emoji Toolbar | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #3085 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #3086 | Empty P Tag | 97 | 4 | 1 | 800 | | | Missing direct file access protection |
| #3087 | En Spam | 75 | 21 | 6 | 500 | | | wp function not compatible with requires wp |
| #3088 | Enable Abilities for MCP | 87 | | 48 | 1k+ | | | Direct Query |
| #3089 | Enable All Font Uploads | 99 | 1 | 1 | 500 | | | Non-prefixed class |
| #3090 | Enable Classic Editor & Widgets | 42 | 106 | 6 | 2k+ | | | Non Singular String Literal Domain |
| #3091 | Enable CORS | 98 | 10 | 2 | 6k+ | | | Missing direct file access protection |
| #3092 | Enable Mastodon Apps | 93 | 13 | 75 | 600 | | | Non-prefixed global variable |
| #3093 | Enable Media Replace | 24 | 212 | 276 | 600k+ | | | Output is not escaped |
| #3094 | Enable Responsive Image | 35 | 1 | 1 | 1k+ | | | Hidden files included |
| #3095 | Enable Standard PayPal for WooCommerce | 98 | 2 | 0 | 4k+ | | | outdated tested upto header |
| #3096 | Enable SVG, WebP, and ICO Upload | 96 | 12 | 16 | 10k+ | | | Non-prefixed global variable |
| #3097 | Enable Turnstile (Cloudflare) for Gravity Forms | 84 | 8 | 7 | 700 | | | Missing direct file access protection |
| #3098 | Enable vCard Upload | 97 | 3 | 1 | 2k+ | | | outdated tested upto header |
| #3099 | Enable virtual card upload – vcf,vcard | 98 | 2 | 2 | 7k+ | | | mismatched plugin name |
| #3100 | Encyclopedia / Glossary / Wiki | 37 | 263 | 48 | 1k+ | | | Output is not escaped |