| #8501 | PHP Info | 84 | 8 | 5 | 600 | | | Output is not escaped |
| #8502 | پینوا | Pinova | 33 | 171 | 75 | 600 | | | Output is not escaped |
| #8503 | Pinterest Verify Meta Tag | 68 | 20 | 6 | 600 | | | Output is not escaped |
| #8504 | PixelCraft with WebP | 100 | | 0 | 600 | | | No open findings |
| #8505 | Pixelonetry Companion | 28 | 427 | 147 | 600 | | | Text Domain Mismatch |
| #8506 | Pofily – WooCommerce Product Filters | 86 | 1 | 322 | 600 | | | Non-prefixed global variable |
| #8507 | Popupsmart | 79 | 28 | 2 | 600 | | | Output is not escaped |
| #8508 | Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | 26 | 525 | 240 | 600 | | | Text Domain Mismatch |
| #8509 | Portfolio Toolkit | 98 | 3 | 3 | 600 | | | Non-prefixed function |
| #8510 | Portugal CTT Tracking for WooCommerce | 98 | 1 | 5 | 600 | | | Non-prefixed function |
| #8511 | Post Password Token | 35 | 132 | 38 | 600 | | | Text Domain Mismatch |
| #8512 | Post Ratings | 40 | 160 | 32 | 600 | | | Output is not escaped |
| #8513 | Postname Permalink Auto Redirect | 95 | 2 | 3 | 600 | | | Missing direct file access protection |
| #8514 | Posts and Users Stats | 82 | | 183 | 600 | | | Non-prefixed global variable |
| #8515 | Premmerce User Roles | 26 | 597 | 1,357 | 600 | | | Non-prefixed global variable |
| #8516 | Preserved HTML Editor Markup | 53 | 12 | 22 | 600 | | | Output is not escaped |
| #8517 | Press Release Distribution | 100 | 1 | 0 | 600 | | | Missing direct file access protection |
| #8518 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 600 | | | Non-prefixed global variable |
| #8519 | Privilege Widget | 40 | 139 | 52 | 600 | | | Text Domain Mismatch |
| #8520 | Product Badges For WooCommerce | 98 | | 16 | 600 | | | Non-prefixed global variable |
| #8521 | Product Bundles – Bulk Discounts | 73 | 31 | 7 | 600 | | | Text Domain Mismatch |
| #8522 | Product Bundles – Variation Bundles | 52 | 23 | 13 | 600 | | | Output is not escaped |
| #8523 | Product Table For WooCommerce | 26 | 191 | 858 | 600 | | | Non-prefixed global variable |
| #8524 | Product Size Chart for Woocommerce | 39 | 20 | 169 | 600 | | | Non-prefixed global variable |
| #8525 | Protect Login | 100 | | 0 | 600 | | | No open findings |
| #8526 | Publish Post Email Notification | 61 | 16 | 18 | 600 | | | Output is not escaped |
| #8527 | PVB Contact Form 7 Calculator | 99 | 4 | 3 | 600 | | | Missing direct file access protection |
| #8528 | QuadMenu – Astra Mega Menu | 81 | 10 | 2 | 600 | | | Text Domain Mismatch |
| #8529 | Flutterwave Payments | 79 | 8 | 39 | 600 | | | Non-prefixed global variable |
| #8530 | Razorpay for Gravity Forms | 21 | 411 | 47 | 600 | | | Exception output is not escaped |
| #8531 | Razorpay Subscriptions for WooCommerce | 44 | 28 | 35 | 600 | | | Exception output is not escaped |
| #8532 | RDFa Breadcrumb | 53 | 27 | 13 | 600 | | | Output is not escaped |
| #8533 | Real Estate Manager – Property Listing and Agent Management | 23 | 606 | 2,301 | 600 | | | Non-prefixed global variable |
| #8534 | Recapture for Easy Digital Downloads | 99 | | 4 | 600 | | | Non-prefixed hook name |
| #8535 | Recent & Featured Posts Widget | 40 | 124 | 2 | 600 | | | Output is not escaped |
| #8536 | Recent Products Block | 80 | 11 | 0 | 600 | | | Output is not escaped |
| #8537 | Redirect by Custom Field | 81 | 5 | 6 | 600 | | | Nonce verification recommended |
| #8538 | wpSUBpages Redirect | 41 | 24 | 27 | 600 | | | Output is not escaped |
| #8539 | Relative URL ShortCode | 96 | 4 | 2 | 600 | | | outdated tested upto header |
| #8540 | Relevanssi Light | 83 | 3 | 23 | 600 | | | Direct Query |
| #8541 | Remove Admin Toolbar | 35 | 13 | 7 | 600 | | | Missing direct file access protection |
| #8542 | Remove Comment Website/URL Box | 98 | 2 | 1 | 600 | | | outdated tested upto header |
| #8543 | Rename default post Labels | 40 | 54 | 36 | 600 | | | Text Domain Mismatch |
| #8544 | Reoon Email Verifier | 50 | 19 | 43 | 600 | | | Missing nonce verification |
| #8545 | Replace Protected Password | 56 | 6 | 18 | 600 | | | Input is not sanitized |
| #8546 | Responsify WP | 39 | 90 | 11 | 600 | | | Unsafe printing function |
| #8547 | Responsive Mobile-Friendly Tooltip | 79 | 25 | 14 | 600 | | | Missing Arg Domain |
| #8548 | RestaurantPress | 26 | 265 | 518 | 600 | | | Output is not escaped |
| #8549 | Run SQL Query | 78 | 13 | 8 | 600 | | | Non-prefixed global variable |
| #8550 | Russian Date by Axelnsk | 96 | 5 | 1 | 600 | | | Missing direct file access protection |