| #7001 | Яндекс.ПДС Пингер / Yandex Site search pinger | 64 | 21 | 5 | 800 | | | Output is not escaped |
| #7002 | Advanced Custom Fields: Accordion Tab Field | 74 | 14 | 11 | 800 | | | Missing Version |
| #7003 | ACF Repeater & Flexible Content Collapser | 83 | 21 | 4 | 3k+ | | | Text Domain Mismatch |
| #7004 | Advanced Custom Fields – Widget Relationship Field add-on | 73 | 18 | 7 | 500 | | | Output is not escaped |
| #7005 | Astra Widgets | 86 | 10 | 15 | 200k+ | | | Missing direct file access protection |
| #7006 | Cache External Scripts | 76 | 21 | 4 | 900 | | | Output is not escaped |
| #7007 | cbnet Multi Author Comment Notification | 63 | 18 | 7 | 1k+ | | | Output is not escaped |
| #7008 | Christmasify! | 63 | 18 | 7 | 2k+ | | | Output is not escaped |
| #7009 | Confirm Plus Contact Form 7 | 82 | 10 | 15 | 7k+ | | | Non Singular String Literal Domain |
| #7010 | Cresta Social Share Counter | 57 | 12 | 13 | 2k+ | | | Output is not escaped |
| #7011 | Customization for WP SEO | 58 | 15 | 10 | 2k+ | | | Unsafe printing function |
| #7012 | Helpful – Article Feedback Plugin | 86 | 8 | 17 | 600 | | | Database parameter is not escaped |
| #7013 | Dashboard Widget Sidebar | 62 | 9 | 16 | 400 | | | Input is not validated |
| #7014 | Gutenberg Blocks Templates – 50+ Free Gutenberg Block Designs | 70 | 2 | 23 | 700 | | | Request data is not unslashed |
| #7015 | No Right Click, Content Copy Protection, Disable Right Click by RB | 66 | 23 | 2 | 600 | | | Unsafe printing function |
| #7016 | Dual Currency Display | 77 | 1 | 24 | 900 | | | Direct Query |
| #7017 | etracker analytics | 59 | 16 | 9 | 1k+ | | | Exception output is not escaped |
| #7018 | Ever Compare – Products Compare Plugin for WooCommerce | 35 | 2 | 23 | 600 | | | Non-prefixed global variable |
| #7019 | Featured Galleries | 65 | 15 | 10 | 3k+ | | | Output is not escaped |
| #7020 | FormFacade – Embed Google Forms in your website | 83 | 8 | 17 | 1k+ | | | Nonce verification recommended |
| #7021 | Genesis Portfolio Pro | 97 | 9 | 16 | 5k+ | | | Non-prefixed global variable |
| #7022 | Gravity Forms: Notification Attachments | 59 | 18 | 7 | 500 | | | Output is not escaped |
| #7023 | Hide Admin Bar From Front End | 63 | 8 | 17 | 1k+ | | | Input is not validated |
| #7024 | Hide Admin Notices | 57 | 9 | 16 | 20k+ | | | Input is not sanitized |
| #7025 | Hot Random Image | 91 | 24 | 1 | 2k+ | | | Text Domain Mismatch |
| #7026 | Image Sitemap | 63 | 11 | 14 | 400 | | | Output is not escaped |
| #7027 | SpreadsheetConverter Calculator | 99 | 24 | 1 | 600 | | | Text Domain Mismatch |
| #7028 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | | | Output is not escaped |
| #7029 | Lightbox with PhotoSwipe | 88 | 1 | 24 | 20k+ | | | Non-prefixed global variable |
| #7030 | Log HTTP Requests | 35 | 7 | 18 | 2k+ | | | Interpolated SQL is not prepared |
| #7031 | Mailster WordPress Newsletter Plugin | 69 | 14 | 11 | 8k+ | | | Output is not escaped |
| #7032 | Multi Image Metabox | 65 | 17 | 8 | 6k+ | | | Output is not escaped |
| #7033 | Multisite Language Switcher | 98 | 4 | 21 | 4k+ | | | Dynamic hook name |
| #7034 | MW WP Form reCAPTCHA | 65 | 11 | 14 | 2k+ | | | Input is not sanitized |
| #7035 | Uptime Monitoring for WordPress – My Website is Online | 78 | 18 | 7 | 500 | | | Text Domain Mismatch |
| #7036 | Parallax Section Block – Add Parallax Scrolling Effects to Sections. | 87 | 3 | 22 | 3k+ | | | Non-prefixed global variable |
| #7037 | Piwik PRO | 35 | 22 | 3 | 3k+ | | | Output is not escaped |
| #7038 | Reading Position Indicator | 90 | 2 | 23 | 800 | | | Dynamic hook name |
| #7039 | Remove Taxonomy Slug | 77 | 23 | 2 | 400 | | | Output is not escaped |
| #7040 | REST API Toolbox | 91 | 25 | 0 | 1k+ | | | Missing Arg Domain |
| #7041 | Restricted Site Access | 91 | 14 | 11 | 10k+ | | | Missing Arg Domain |
| #7042 | Search box on Navigation Menu | 82 | 22 | 3 | 500 | | | Text Domain Mismatch |
| #7043 | SearchIQ – The Search Solution | 84 | 7 | 18 | 1k+ | | | Database parameter is not escaped |
| #7044 | seQura | 89 | 2 | 23 | 1k+ | | | Non-prefixed global variable |
| #7045 | Shipping Rate By Cities | 72 | 4 | 21 | 700 | | | Direct Query |
| #7046 | Smartwaiver Waiver Widget | 72 | 17 | 8 | 400 | | | Output is not escaped |
| #7047 | SteadFast API | 80 | 2 | 23 | 8k+ | | | Non-prefixed global variable |
| #7048 | Sticky Header by ThematoSoup | 83 | 20 | 5 | 1k+ | | | Non Singular String Literal Domain |
| #7049 | eMagicOne Store Manager for WooCommerce | 91 | 6 | 19 | 500 | | | Non-prefixed class |
| #7050 | Title Toggle for Storefront Theme | 68 | 16 | 9 | 3k+ | | | Output is not escaped |