| #4701 | Lucky Orange | 76 | 56 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #4702 | LuckyWP ACF Menu Field | 53 | 46 | 9 | 5k+ | | | Short PHP open tag found |
| #4703 | LuckyWP Scripts Control | 38 | 186 | 23 | 3k+ | | | Output is not escaped |
| #4704 | LuckyWP Table of Contents | 39 | 438 | 62 | 100k+ | | | Output is not escaped |
| #4705 | LWS Affiliation | 86 | 8 | 23 | 800 | | | Missing nonce verification |
| #4706 | LWS Cleaner | 38 | 81 | 129 | 20k+ | | | Direct Query |
| #4707 | LWS Hide Login | 45 | 5 | 58 | 20k+ | | | Request data is not unslashed |
| #4708 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 25 | 430 | 764 | 20k+ | | | Non-prefixed global variable |
| #4709 | LWS Tools | 31 | 104 | 134 | 10k+ | | | Request data is not unslashed |
| #4710 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #4711 | Lazy Blocks: Select Dynamic Control | 99 | 1 | 2 | 500 | | | Discouraged text-domain loading |
| #4712 | M Chart | 25 | 561 | 1,465 | 3k+ | | | Non-prefixed global variable |
| #4713 | m1.DownloadList | 89 | 2 | 6 | 400 | | | Nonce verification recommended |
| #4714 | Machete | 99 | | 7 | 7k+ | | | Direct Query |
| #4715 | Madquick WP Legal Pages – One Click, 100% Free | 85 | 5 | 55 | 600 | | | Non-prefixed global variable |
| #4716 | Maestro Connector | 97 | 7 | 4 | 500 | | | Missing direct file access protection |
| #4717 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 39 | 65 | 72 | 6k+ | | | block api version too low |
| #4718 | Magazine Columns | 96 | 6 | 3 | 600 | | | wp function not compatible with requires wp |
| #4719 | Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | 24 | 968 | 2,122 | 7k+ | | | Non-prefixed global variable |
| #4720 | Magic Content & CTA Box Builder – Advanced Gutenberg Blocks for Flexible Page Sections, Headers, Buttons, Shape Dividers, and Layout Options | 97 | 2 | 7 | 6k+ | | | Missing Version |
| #4721 | Magic Liquidizer Responsive Table | 41 | 114 | 38 | 6k+ | | | Text Domain Mismatch |
| #4722 | Magic Login – Passwordless Authentication for WordPress – Login Without Password | 35 | 23 | 53 | 3k+ | | | Missing nonce verification |
| #4723 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | | | Non-prefixed global variable |
| #4724 | Magic robots.txt | 100 | | 0 | 1k+ | | | No open findings |
| #4725 | Magic Tooltips For Contact Form 7 | 61 | 37 | 21 | 700 | | | Text Domain Mismatch |
| #4726 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 273 | 127 | 5k+ | | | Output is not escaped |
| #4727 | Magical Blocks – Elementor Style Blocks for Gutenberg | 98 | 7 | 3 | 900 | | | Localhost URL found |
| #4728 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 117 | 48 | 3k+ | | | Output is not escaped |
| #4729 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #4730 | Magni Image Flip For WooCommerce | 86 | 24 | 8 | 700 | | | Text Domain Mismatch |
| #4731 | Magnify – Suggestive Search Plugin | 100 | | 2 | 3k+ | | | trademarked term |
| #4732 | Magyar Video Embed | 94 | 5 | 9 | 1k+ | | | Non-prefixed function |
| #4733 | Mail Baby SMTP | 22 | 385 | 699 | 600 | | | SQL query is not prepared |
| #4734 | MBE eShip | 20 | 527 | 740 | 1k+ | | | Non-prefixed global variable |
| #4735 | WPO365 | Mail Integration for Office 365 / Outlook | 40 | 59 | 27 | 2k+ | | | Output is not escaped |
| #4736 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | | | Text Domain Mismatch |
| #4737 | Mail Queue | 35 | 22 | 77 | 900 | | | Direct Query |
| #4738 | Mail Subscribe List | 39 | 17 | 94 | 3k+ | | | Input is not validated |
| #4739 | Mailchimp List Subscribe Form | 86 | 22 | 156 | 60k+ | | | Non-prefixed global variable |
| #4740 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | | | curl curl setopt |
| #4741 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #4742 | Mailmunch Forms for Mailchimp | 34 | 120 | 53 | 10k+ | | | Output is not escaped |
| #4743 | MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 21 | 1,133 | 3,011 | 2k+ | | | Non-prefixed global variable |
| #4744 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #4745 | Featured Image in RSS Feed by MailerLite | 72 | 12 | 7 | 1k+ | | | Output is not escaped |
| #4746 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | | | Direct Query |
| #4747 | MailerSend – Official SMTP Integration | 40 | 39 | 25 | 2k+ | | | Unsafe printing function |
| #4748 | Mailgun for WordPress | 31 | 144 | 78 | 80k+ | | | Unsafe printing function |
| #4749 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #4750 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | | | Output is not escaped |