| #8701 | WPFomo | 42 | 45 | 9 | 600 | | | Output is not escaped |
| #8702 | WPFrom Email | 51 | 44 | 12 | 600 | | | Output is not escaped |
| #8703 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | | | Non-prefixed global variable |
| #8704 | Memory Meter | 35 | 2 | 3 | 600 | | | Request data is not unslashed |
| #8705 | WSW – Shopify WooCommerce / WordPress Integration and Migration | 23 | 1,449 | 1,612 | 600 | | | Non-prefixed global variable |
| #8706 | xili-language | 24 | 1,501 | 523 | 600 | | | Output is not escaped |
| #8707 | XML Feed for Skroutz & BestPrice for WooCommerce | 57 | 12 | 50 | 600 | | | Input is not sanitized |
| #8708 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,242 | 4,047 | 600 | | | Non-prefixed global variable |
| #8709 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #8710 | Yoo Slider – Image Slider & Video Slider | 32 | 744 | 209 | 600 | | | Output is not escaped |
| #8711 | Zalomení řádků v češtině a slovenčine | 97 | 3 | 0 | 600 | | | outdated tested upto header |
| #8712 | Zapper Payments | 69 | 11 | 11 | 600 | | | Output is not escaped |
| #8713 | Algori 360 Video | 35 | 6 | 6 | 500 | | | Hidden files included |
| #8714 | AAM Protected Media Files | 62 | 13 | 10 | 500 | | | Direct Query |
| #8715 | AccessibleWP – ALT Detector | 40 | 55 | 14 | 500 | | | Text Domain Mismatch |
| #8716 | Accounting for WooCommerce | 39 | 87 | 115 | 500 | | | Unsafe printing function |
| #8717 | ACF Recent Posts Widget | 39 | 260 | 16 | 500 | | | Output is not escaped |
| #8718 | WP Sessions Time Monitoring Full Automatic | 22 | 869 | 1,529 | 500 | | | Non-prefixed global variable |
| #8719 | Add New Default Avatar | 82 | 21 | 0 | 500 | | | Output is not escaped |
| #8720 | Add WPGraphql Send Mail | 99 | 1 | 3 | 500 | | | trademarked term |
| #8721 | Address Geocoder | 51 | 12 | 18 | 500 | | | Output is not escaped |
| #8722 | Admin Dashboard RSS Feed | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #8723 | Admin Help Docs | 97 | 9 | 31 | 500 | | | Non-prefixed global variable |
| #8724 | Admin Options Pages | 42 | 3 | 284 | 500 | | | Nonce verification recommended |
| #8725 | Admin Robots.txt Editor | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #8726 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #8727 | Advanced Custom Fields – Widget Relationship Field add-on | 73 | 18 | 7 | 500 | | | Output is not escaped |
| #8728 | Advanced Custom Order Status for WooCommerce | 55 | 44 | 33 | 500 | | | Text Domain Mismatch |
| #8729 | reCaptcha for WooCommerce | 91 | 116 | 9 | 500 | | | Text Domain Mismatch |
| #8730 | Affilia – Affiliate Program | 34 | 80 | 170 | 500 | | | Nonce verification recommended |
| #8731 | Affiliate Link Tracker | 42 | 24 | 49 | 500 | | | Request data is not unslashed |
| #8732 | AffiliateWP – Allow Own Referrals | 78 | 37 | 10 | 500 | | | Text Domain Mismatch |
| #8733 | AffiliateWP – Force Pending Referrals | 79 | 35 | 12 | 500 | | | Text Domain Mismatch |
| #8734 | Age Verification for your checkout page. Verify your customer's identity | 36 | 155 | 238 | 500 | | | Output is not escaped |
| #8735 | Agoda Affiliate Partners Text Link Generator | 42 | 4 | 40 | 500 | | | Interpolated SQL is not prepared |
| #8736 | AI Builder – Generate pages, blocks, images & translate with AI | 31 | 101 | 194 | 500 | | | Non-prefixed global variable |
| #8737 | AI Content Creator – Easy ChatGPT powered article generator | 89 | 15 | 33 | 500 | | | Non-prefixed global variable |
| #8738 | AI Content Signals | 100 | | 0 | 500 | | | No open findings |
| #8739 | Ajax Load More for Relevanssi | 98 | 2 | 0 | 500 | | | license mismatch |
| #8740 | Alert Box Block | 99 | | 6 | 500 | | | Non-prefixed constant |
| #8741 | All Embed – Multi-Source Embed Widgets for Elementor | 24 | 729 | 1,310 | 500 | | | Non-prefixed global variable |
| #8742 | All in One SEO Pack Importer | 56 | 17 | 25 | 500 | | | Direct Query |
| #8743 | Allow Only 1 Product in Cart | 99 | 1 | 1 | 500 | | | mismatched plugin name |
| #8744 | Alphabetic Pagination | 38 | 144 | 117 | 500 | | | Unsafe printing function |
| #8745 | AlphaListing | 98 | | 18 | 500 | | | Non-prefixed function |
| #8746 | Already Existing Tags | 82 | 8 | 1 | 500 | | | Setting is missing a sanitization callback |
| #8747 | Always Use Open Graph with Jetpack | 98 | 2 | 1 | 500 | | | Missing direct file access protection |
| #8748 | Amedea – Unique Design Elements for Elementor | 89 | 1 | 25 | 500 | | | Mixed line endings |
| #8749 | Amelia Calendar Essential Shortcodes | 96 | 2 | 9 | 500 | | | Not In Footer |
| #8750 | AMP Contact FORM 7 – AMPCF7 | 62 | 9 | 13 | 500 | | | Input is not validated |