| #9151 | Simply Excerpts | 74 | 12 | 1 | 500 | | | Setting is missing a sanitization callback |
| #9152 | Sitepact's Contact Form 7 Extension For Klaviyo | 24 | 541 | 1,412 | 500 | | | Non-prefixed global variable |
| #9153 | Slash Admin | 39 | 116 | 38 | 500 | | | Output is not escaped |
| #9154 | Slash Edit: Admin Shortcuts to Edit Posts and Pages Faster | 90 | 3 | 3 | 500 | | | Output is not escaped |
| #9155 | Slimbox Plugin | 89 | 9 | 2 | 500 | | | Non Enqueued Script |
| #9156 | Slope Widgets | 35 | 5 | 49 | 500 | | | Non-prefixed global variable |
| #9157 | Smoothscroller | 85 | 9 | 2 | 500 | | | Output is not escaped |
| #9158 | Masonry Widget | 41 | 58 | 11 | 500 | | | Output is not escaped |
| #9159 | Social Icon Widget | 42 | 90 | 6 | 500 | | | Output is not escaped |
| #9160 | Social Web Suite – Social Media Auto Post, Social Media Auto Publish | 27 | 74 | 164 | 500 | | | Non-prefixed global variable |
| #9161 | Cart links for WooCommerce | 67 | 13 | 16 | 500 | | | Text Domain Mismatch |
| #9162 | Solid Post Likes | 41 | 25 | 63 | 500 | | | Direct Query |
| #9163 | Free customer chat solution | 55 | 18 | 10 | 500 | | | Output is not escaped |
| #9164 | Songkick Concerts and Festivals | 49 | 9 | 48 | 500 | | | Input is not sanitized |
| #9165 | Sopro | 97 | 4 | 4 | 500 | | | Non-prefixed function |
| #9166 | Ray | 35 | 3 | 2 | 500 | | | Hidden files included |
| #9167 | Spectre Icons | 97 | | 1 | 500 | | | Input is not sanitized |
| #9168 | Speed Up – Lazy Load | 100 | | 1 | 500 | | | readme parser warnings too many tags |
| #9169 | Spider Elements – Premium Elementor Widgets & Addons Library | 24 | 542 | 1,555 | 500 | | | Non-prefixed global variable |
| #9170 | SportsPress for Cricket | 40 | 122 | 34 | 500 | | | Text Domain Mismatch |
| #9171 | SportsPress for Volleyball | 58 | 107 | 34 | 500 | | | Text Domain Mismatch |
| #9172 | TechGasp Music Master | 41 | 143 | 4 | 500 | | | Output is not escaped |
| #9173 | Spreadr Woocommerce Plugin – Amazon Importer for Dropshipping and Affiliate | 39 | 42 | 226 | 500 | | | Request data is not unslashed |
| #9174 | ST Elementor Addons | 28 | 224 | 374 | 500 | | | Non-prefixed global variable |
| #9175 | Standout CSS3 Buttons | 38 | 183 | 15 | 500 | | | Output is not escaped |
| #9176 | StaticPress | 36 | 88 | 79 | 500 | | | Output is not escaped |
| #9177 | Stax Addons for Elementor | 40 | 143 | 81 | 500 | | | Output is not escaped |
| #9178 | Sticky Add To Cart Bar For WooCommerce | 42 | 46 | 54 | 500 | | | Output is not escaped |
| #9179 | Sticky Custom Post Types | 74 | 15 | 0 | 500 | | | Missing Arg Domain |
| #9180 | Sticky Elementor – Sticky Header, Menu Color After Sticky, Logo Swap & Back to Top Button | 94 | 1 | 0 | 500 | | | Output is not escaped |
| #9181 | Stock Market News | 38 | 71 | 11 | 500 | | | Output is not escaped |
| #9182 | eMagicOne Store Manager for WooCommerce | 91 | 6 | 19 | 500 | | | Non-prefixed class |
| #9183 | StoreAgent – WooCommerce AI Chatbot & AI Content Tools | 76 | | 202 | 500 | | | Non-prefixed global variable |
| #9184 | StreamWeasels Online Status Bar | 24 | 555 | 1,349 | 500 | | | Non-prefixed global variable |
| #9185 | Sublium Subscriptions – Subscriptions for WooCommerce – Recurring Payments, Subscription Plans & Installments | 74 | 35 | 22 | 500 | | | wp function not compatible with requires wp |
| #9186 | Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress | 35 | 106 | 145 | 500 | | | Non-prefixed global variable |
| #9187 | Surbma | GDPR Proof Cookie Consent & Notice Bar | 24 | 825 | 1,309 | 500 | | | Non-prefixed global variable |
| #9188 | SureCookie – Cookie Consent Banner, Cookie Scanner & Script Blocking | 88 | 44 | 46 | 500 | | | Missing Arg Domain |
| #9189 | SurveyJS: Drag & Drop Form Builder | 36 | 12 | 134 | 500 | | | Missing Version |
| #9190 | SweepPress: Website Cleanup and Optimization | 35 | 71 | 176 | 500 | | | Non-prefixed global variable |
| #9191 | Tabify Edit Screen | 39 | 83 | 27 | 500 | | | Output is not escaped |
| #9192 | Taboola Pixel | 92 | 1 | 5 | 500 | | | Missing nonce verification |
| #9193 | Tabs in Post Editor | 82 | 4 | 7 | 500 | | | Input is not validated |
| #9194 | Tada: Instant Webpage Loading, Fast Website Browsing | 94 | 8 | 1 | 500 | | | Missing direct file access protection |
| #9195 | Tag Cloud Shortcode | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #9196 | Tagging | 40 | 33 | 37 | 500 | | | Output is not escaped |
| #9197 | TailPress – Tailwind for WordPress | 35 | 23 | 22 | 500 | | | Output is not escaped |
| #9198 | Tainacan Support for Blocksy | 32 | 244 | 526 | 500 | | | Non-prefixed global variable |
| #9199 | Taxonomy Converter | 41 | 54 | 24 | 500 | | | Output is not escaped |
| #9200 | Taxonomy List | 97 | 2 | 6 | 500 | | | Missing Version |