| #9701 | Login Timeout Sessions | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #9702 | Logo or Image Replace by mycore.global | 59 | 30 | 12 | 400 | | | Text Domain Mismatch |
| #9703 | Logo Showcase – Carousel, Slider, Grid & List for WordPress | 39 | 123 | 160 | 400 | | | Unsafe printing function |
| #9704 | m1.DownloadList | 89 | 2 | 6 | 400 | | | Nonce verification recommended |
| #9705 | Mailster Cool Captcha | 42 | 65 | 28 | 400 | | | Text Domain Mismatch |
| #9706 | Manage Enrollment for LearnDash | 39 | 48 | 79 | 400 | | | Unsafe printing function |
| #9707 | Manage Upload Types | 67 | 7 | 13 | 400 | | | Output is not escaped |
| #9708 | Manager for IcoMoon | 32 | 270 | 68 | 400 | | | Short PHP open tag found |
| #9709 | Manage/View Your Posts Only | 87 | 5 | 3 | 400 | | | Input is not sanitized |
| #9710 | Maps for WP | 39 | 169 | 73 | 400 | | | Output is not escaped |
| #9711 | Muslim Prayer Time-Salah/Iqamah | 32 | 155 | 179 | 400 | | | date date |
| #9712 | Mass Ping Tool for SEO – WordPress ping list to get indexed faster on Google, Yandex, … | 34 | 77 | 96 | 400 | | | Output is not escaped |
| #9713 | Master QR Code Generator – Fast & Easy QR Code Creator | 77 | 21 | 59 | 400 | | | Non-prefixed global variable |
| #9714 | MD5 Media Renamer | 85 | 8 | 19 | 400 | | | Non-prefixed global variable |
| #9715 | Media Trash Button | 100 | 1 | 0 | 400 | | | Missing direct file access protection |
| #9716 | MeetingHub – Webinar & Meeting Plugin for Zoom, Google Meet, Webex, Microsoft Teams, & Jitsi Meet | 35 | 33 | 289 | 400 | | | Non-prefixed global variable |
| #9717 | Memory Limit Manager | 100 | | 0 | 400 | | | No open findings |
| #9718 | Menu Backup & Restore + Import/Export | 99 | 7 | 0 | 400 | | | wp function not compatible with requires wp |
| #9719 | Meow Analytics (Google Analytics) | 34 | 80 | 54 | 400 | | | Output is not escaped |
| #9720 | Meta Description | 73 | 5 | 9 | 400 | | | Input is not validated |
| #9721 | Metadata Viewer | 35 | 2 | 11 | 400 | | | Non-prefixed global variable |
| #9722 | Add post thumbnail to wp-admin list view | 86 | 5 | 5 | 400 | | | Nonce verification recommended |
| #9723 | Zen Feed | 39 | 39 | 22 | 400 | | | Output is not escaped |
| #9724 | WP Mobile Redirect | 40 | 44 | 20 | 400 | | | Text Domain Mismatch |
| #9725 | MobileMonkey X-Ray Installer | 94 | 4 | 3 | 400 | | | Missing direct file access protection |
| #9726 | Modern Images WP | 35 | 10 | 3 | 400 | | | Missing Translators Comment |
| #9727 | Modular Custom CSS | 88 | 7 | 1 | 400 | | | Output is not escaped |
| #9728 | Molongui Post Contributors: Multi-Role Contributor Attribution | 33 | 240 | 162 | 400 | | | Output is not escaped |
| #9729 | Most Popular Post Widget | 64 | 40 | 3 | 400 | | | Output is not escaped |
| #9730 | AI Product Search for WooCommerce – Motive Commerce Search | 35 | 70 | 82 | 400 | | | Missing direct file access protection |
| #9731 | Motors VIN Decoder | 36 | 87 | 88 | 400 | | | Output is not escaped |
| #9732 | morkva Liqpay Extended | 98 | 3 | 4 | 400 | | | Non-prefixed class |
| #9733 | morkva Plata by Mono Extended | 95 | 112 | 14 | 400 | | | Text Domain Mismatch |
| #9734 | 코드엠샵 소셜톡 | 40 | 47 | 36 | 400 | | | Output is not escaped |
| #9735 | Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce | 25 | 492 | 216 | 400 | | | Text Domain Mismatch |
| #9736 | Multiple external product URLs for WooCommerce | 53 | 28 | 17 | 400 | | | Text Domain Mismatch |
| #9737 | MWW Disclaimer Buttons | 48 | 21 | 16 | 400 | | | Output is not escaped |
| #9738 | My Post Order | 37 | 100 | 114 | 400 | | | Output is not escaped |
| #9739 | My Social Feeds – Social Feeds Embedder Plugin for WP | 40 | 8 | 77 | 400 | | | Request data is not unslashed |
| #9740 | My Story | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #9741 | My Upload Images | 42 | 74 | 48 | 400 | | | Unsafe printing function |
| #9742 | myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards | 22 | 2,344 | 1,320 | 400 | | | Output is not escaped |
| #9743 | Netgíró Payment Gateway for WooCommerce | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #9744 | Neve Hooks | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #9745 | Never Let Me Go | 35 | 34 | 47 | 400 | | | Non-prefixed global variable |
| #9746 | News Element Elementor Blog Magazine | 85 | 174 | 695 | 400 | | | Non-prefixed global variable |
| #9747 | NewsmanApp | 94 | 747 | 4 | 400 | | | Text Domain Mismatch |
| #9748 | NewsPlugin | 35 | 84 | 53 | 400 | | | Text Domain Mismatch |
| #9749 | NextGenThemes jsDelivr CDN | 96 | 27 | 0 | 400 | | | wp function not compatible with requires wp |
| #9750 | NGG Smart Image Search | 35 | 298 | 155 | 400 | | | Output is not escaped |