| #7151 | Cryptex | E-Mail Address Protection | 35 | 62 | 10 | 900 | | | Output is not escaped |
| #7152 | WPCS – WordPress Currency Switcher Professional | 29 | 84 | 358 | 900 | | | Non-prefixed global variable |
| #7153 | Current Year Shortcode VICT | 100 | | 0 | 900 | | | No open findings |
| #7154 | Custom CSS and JS | 83 | 11 | 1 | 900 | | | Output is not escaped |
| #7155 | Custom Field For WP Job Manager | 69 | 16 | 54 | 900 | | | Non-prefixed global variable |
| #7156 | Custom Highlight Color | 94 | 1 | 1 | 900 | | | Output is not escaped |
| #7157 | Custom Post Type Parents | 39 | 75 | 18 | 900 | | | Output is not escaped |
| #7158 | Custom Posts Per Page | 66 | 20 | 2 | 900 | | | Unsafe printing function |
| #7159 | Custom Search by BestWebSoft – WordPress Custom Search Plugin | 30 | 454 | 228 | 900 | | | Text Domain Mismatch |
| #7160 | Customizer Reset – Export & Import | 88 | 6 | 9 | 900 | | | wp function not compatible with requires wp |
| #7161 | DarkLooks – Dark Mode Switcher For WordPress | 35 | 195 | 21 | 900 | | | Text Domain Mismatch |
| #7162 | Dashboard Commander | 69 | 13 | 2 | 900 | | | Output is not escaped |
| #7163 | Dashify: WooCommerce admin dashboard theme | 40 | 16 | 131 | 900 | | | Nonce verification recommended |
| #7164 | Delay Redirects | 75 | 5 | 8 | 900 | | | Request data is not unslashed |
| #7165 | Device Mockups | 97 | 7 | 3 | 900 | | | Missing direct file access protection |
| #7166 | Nút Bấm Liên Hệ Dibrother | 91 | 5 | 2 | 900 | | | Missing Arg Domain |
| #7167 | Disable Administration Email Verification Prompt | 99 | 1 | 0 | 900 | | | outdated tested upto header |
| #7168 | Disable Media Permalink by Hardweb.it | 99 | 1 | 0 | 900 | | | outdated tested upto header |
| #7169 | Variation Price Display For WooCommerce | 77 | 87 | 16 | 900 | | | Text Domain Mismatch |
| #7170 | Disable Yoast's Structured Data | 97 | 4 | 3 | 900 | | | trademarked term |
| #7171 | Disabler | 64 | 212 | 38 | 900 | | | Text Domain Mismatch |
| #7172 | Display Tweets | 29 | 135 | 135 | 900 | | | Non-prefixed global variable |
| #7173 | Dropdown multisite selector | 41 | 82 | 13 | 900 | | | Unsafe printing function |
| #7174 | Dual Currency Display | 77 | 1 | 24 | 900 | | | Direct Query |
| #7175 | Dublin Core Metadata Generator | 39 | 74 | 15 | 900 | | | Output is not escaped |
| #7176 | Duplicate TEC Event | 67 | 12 | 10 | 900 | | | date date |
| #7177 | Dynamic AJAX Product Filters for WooCommerce | 100 | | 0 | 900 | | | No open findings |
| #7178 | Easy Flash Embed | 83 | 9 | 1 | 900 | | | Output is not escaped |
| #7179 | Easy Share Solution For WordPress | 48 | 15 | 33 | 900 | | | Output is not escaped |
| #7180 | Easy Yandex Metrica | 38 | 97 | 48 | 900 | | | Output is not escaped |
| #7181 | Elementic | 66 | 22 | 9 | 900 | | | Text Domain Mismatch |
| #7182 | ELEX WooCommerce USPS Shipping Method | 74 | 139 | 45 | 900 | | | Text Domain Mismatch |
| #7183 | Elmo | 91 | 6 | 2 | 900 | | | Missing direct file access protection |
| #7184 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 900 | | | Non-prefixed global variable |
| #7185 | Exchange Rates | 100 | | 0 | 900 | | | No open findings |
| #7186 | Expandable Row for Beaver Builder | 54 | 116 | 9 | 900 | | | Text Domain Mismatch |
| #7187 | Expiring Posts | 40 | 52 | 20 | 900 | | | Missing Arg Domain |
| #7188 | Export to Blogger | 38 | 47 | 117 | 900 | | | Non-prefixed global variable |
| #7189 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | | | Non-prefixed global variable |
| #7190 | Awesome FAQ – Modern Accordion, Tabs, Responsive & Super Fast FAQ Builder | 99 | | 7 | 900 | | | Non-prefixed class |
| #7191 | 胖鼠采集(Fat Rat Collect) | 25 | 630 | 190 | 900 | | | Missing Arg Domain |
| #7192 | Featured Image Zoom | 97 | 4 | 1 | 900 | | | Missing direct file access protection |
| #7193 | FG PrestaShop to WooCommerce | 26 | 254 | 94 | 900 | | | Unsafe printing function |
| #7194 | First Order Coupon Manager for WooCommerce | 95 | 10 | 3 | 900 | | | Text Domain Mismatch |
| #7195 | Flowplayer Video Player | 86 | 8 | 7 | 900 | | | Output is not escaped |
| #7196 | Formsite | Embed online forms to collect orders, registrations, leads, and surveys | 98 | 3 | 2 | 900 | | | Missing direct file access protection |
| #7197 | ForumWP – Forum & Discussion Board | 82 | 22 | 444 | 900 | | | Non-prefixed global variable |
| #7198 | FPG – Endereço automático por Cep no Checkout | 97 | 3 | 2 | 900 | | | outdated tested upto header |
| #7199 | Freshdesk (official) | 23 | 194 | 386 | 900 | | | Non-prefixed function |
| #7200 | FV Antispam | 26 | 332 | 239 | 900 | | | Output is not escaped |
