| #6501 | SEUR Oficial | 35 | 25 | 298 | 1k+ | | | Non-prefixed global variable |
| #6502 | Sezzle Woocommerce Payment | 37 | 108 | 105 | 1k+ | | | Text Domain Mismatch |
| #6503 | SF Author Url Control | 68 | 29 | 4 | 1k+ | | | Output is not escaped |
| #6504 | Shadowbox JS | 36 | 246 | 14 | 1k+ | | | Unsafe printing function |
| #6505 | Social Share Buttons | 31 | 462 | 156 | 1k+ | | | Text Domain Mismatch |
| #6506 | Share on Mastodon | 96 | 24 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #6507 | Social Icons Sticky | 100 | | 0 | 1k+ | | | No open findings |
| #6508 | Share This Image | 24 | 744 | 1,582 | 1k+ | | | Non-prefixed global variable |
| #6509 | Sharpen Resized Images | 97 | 4 | 3 | 1k+ | | | Non-prefixed hook name |
| #6510 | ShayanWeb Admin FontChanger | افزونهی تغییر فونت پیشخوان وردپرس شایان وب | 45 | 42 | 8 | 1k+ | | | Output is not escaped |
| #6511 | ShinyStat Analytics | 43 | 65 | 8 | 1k+ | | | Output is not escaped |
| #6512 | Shipmondo for WooCommerce | 98 | 2 | 6 | 1k+ | | | Dynamic hook name |
| #6513 | Shore Booking Widget | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6514 | ShortBuild | 95 | 26 | 4 | 1k+ | | | Missing direct file access protection |
| #6515 | Shortcode Preview Block | 97 | 5 | 3 | 1k+ | | | Missing Version |
| #6516 | Web Stories Widgets For Elementor | 99 | 1 | 3 | 1k+ | | | Non-prefixed class |
| #6517 | Shoutcast Icecast HTML5 Radio Player | 67 | 17 | 10 | 1k+ | | | Input is not validated |
| #6518 | Show Pages URL List | 40 | 29 | 234 | 1k+ | | | Non-prefixed global variable |
| #6519 | Show IP address | 70 | 6 | 20 | 1k+ | | | Input is not sanitized |
| #6520 | Show Page URL | 90 | 6 | 3 | 1k+ | | | Missing direct file access protection |
| #6521 | Show User Registration Date | 96 | 4 | 4 | 1k+ | | | Non-prefixed function |
| #6522 | Showcase Payment Options (icons) | 93 | 2 | 3 | 1k+ | | | trademarked term |
| #6523 | Shutter Reloaded | 38 | 194 | 95 | 1k+ | | | Text Domain Mismatch |
| #6524 | Sidebar Manager Light | 31 | 221 | 76 | 1k+ | | | Text Domain Mismatch |
| #6525 | Sidebars for Hello Elementor Theme | 98 | 2 | 2 | 1k+ | | | outdated tested upto header |
| #6526 | SideMenu | 100 | | 1 | 1k+ | | | Dynamic hook name |
| #6527 | Sign-up Sheets | 27 | 325 | 363 | 1k+ | | | Output is not escaped |
| #6528 | Simpaisa Wallet (Jazzcash & Easypaisa) Payment Services | 39 | 67 | 74 | 1k+ | | | Interpolated Variable Text |
| #6529 | Simple ads.txt | 82 | 8 | 6 | 1k+ | | | Missing direct file access protection |
| #6530 | Simple Google Analytics Tag Manager | 99 | 33 | 0 | 1k+ | | | Non Singular String Literal Domain |
| #6531 | Simple Analytics | 97 | 6 | 3 | 1k+ | | | Missing Translators Comment |
| #6532 | Simple Block Gallery | 100 | | 0 | 1k+ | | | No open findings |
| #6533 | Simple Cache | 41 | 33 | 59 | 1k+ | | | Input is not sanitized |
| #6534 | Simple Catalog for WooCommerce | 87 | 2 | 4 | 1k+ | | | wp redirect wp redirect |
| #6535 | Simple Colorbox | 90 | 11 | 1 | 1k+ | | | Missing Arg Domain |
| #6536 | Contact Info Widget | 40 | 184 | 3 | 1k+ | | | Output is not escaped |
| #6537 | Simple Cookie Notification Bar | 51 | 49 | 6 | 1k+ | | | Text Domain Mismatch |
| #6538 | Simple Countdown Timer | 37 | 110 | 113 | 1k+ | | | Missing Arg Domain |
| #6539 | Simple CSS for widgets | 58 | 11 | 15 | 1k+ | | | Missing nonce verification |
| #6540 | Simple Definition List Blocks | 35 | 11 | 2 | 1k+ | | | Hidden files included |
| #6541 | Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks | 99 | 1 | 1 | 1k+ | | | mismatched plugin name |
| #6542 | Simple Event Planner | 27 | 149 | 346 | 1k+ | | | Non-prefixed global variable |
| #6543 | Simple Export Import for ACF Data | 35 | 19 | 64 | 1k+ | | | Request data is not unslashed |
| #6544 | Simple Google Analytics Tracking | 91 | 6 | 2 | 1k+ | | | Missing direct file access protection |
| #6545 | Simple Google Calendar Outlook Events Widget | 99 | | 3 | 1k+ | | | error log error log |
| #6546 | Simple Google Photos Grid | 41 | 48 | 2 | 1k+ | | | Output is not escaped |
| #6547 | Simple Googlebot Visit | 42 | 32 | 67 | 1k+ | | | Non Singular String Literal Domain |
| #6548 | Simple Image Popup | 73 | 21 | 5 | 1k+ | | | Output is not escaped |
| #6549 | Simple Image XML Sitemap | 37 | 119 | 16 | 1k+ | | | Output is not escaped |
| #6550 | Simple LDAP Login | 38 | 65 | 33 | 1k+ | | | Output is not escaped |