| #6651 | Subscribers – Free Web Push Notifications | 59 | 15 | 11 | 1k+ | | | Output is not escaped |
| #6652 | Substack Importer | 39 | 33 | 33 | 1k+ | | | Missing nonce verification |
| #6653 | Suffice Toolkit | 98 | 2 | 25 | 1k+ | | | Non-prefixed class |
| #6654 | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | 24 | 360 | 1,472 | 1k+ | | | Nonce verification recommended |
| #6655 | Super Emoji Plus+ | 97 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #6656 | Super Simple Slider | 38 | 55 | 55 | 1k+ | | | Non-prefixed global variable |
| #6657 | SuperFrete | 34 | 84 | 242 | 1k+ | | | Request data is not unslashed |
| #6658 | SuperSaaS – online appointment scheduling | 42 | 79 | 10 | 1k+ | | | Text Domain Mismatch |
| #6659 | WP Click to Chat – Email, Live Chat, Call & Book Now Buttons | 94 | 43 | 47 | 1k+ | | | wp function not compatible with requires wp |
| #6660 | Supreme Google Webfonts | 77 | 12 | 7 | 1k+ | | | Text Domain Mismatch |
| #6661 | Surbma | Divi Extras | 99 | 1 | 2 | 1k+ | | | Discouraged text-domain loading |
| #6662 | SureDash – Community, Courses & Member Dashboard | 25 | 422 | 808 | 1k+ | | | Non-prefixed global variable |
| #6663 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #6664 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #6665 | SVGator | 97 | 15 | 0 | 1k+ | | | Missing direct file access protection |
| #6666 | SX No Homepage Pagination | 95 | 2 | 2 | 1k+ | | | outdated tested upto header |
| #6667 | Syncee Premium Dropshipping & Wholesale | 97 | 50 | 3 | 1k+ | | | Text Domain Mismatch |
| #6668 | Syntax-highlighting Code Block (with Server-side Rendering) | 99 | 1 | 1 | 1k+ | | | Missing direct file access protection |
| #6669 | System Dashboard | 32 | 91 | 205 | 1k+ | | | Request data is not unslashed |
| #6670 | Széchenyi 2020 Logo | 89 | 140 | 9 | 1k+ | | | Text Domain Mismatch |
| #6671 | Tab – Accordion, FAQ | 28 | 104 | 542 | 1k+ | | | Non-prefixed global variable |
| #6672 | Tablentor – Smart Table Builder for Elementor | 98 | 6 | 7 | 1k+ | | | Post Not In exclude |
| #6673 | Taboola | 30 | 89 | 147 | 1k+ | | | Output is not escaped |
| #6674 | Tab Ultimate | 34 | 107 | 138 | 1k+ | | | Output is not escaped |
| #6675 | Taxonomy List Widget | 96 | 6 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #6676 | Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC | 77 | 23 | 113 | 1k+ | | | Direct Query |
| #6677 | TagPages | 76 | 13 | 4 | 1k+ | | | Missing Arg Domain |
| #6678 | Tainacan | 24 | 138 | 592 | 1k+ | | | Direct Query |
| #6679 | Tako Movable Comments | 48 | 18 | 39 | 1k+ | | | Input is not sanitized |
| #6680 | Logo Slider , Logo Carousel , Logo showcase , Client Logo | 38 | 72 | 22 | 1k+ | | | Output is not escaped |
| #6681 | Team Showcase | 61 | 1 | 125 | 1k+ | | | slow db query meta key |
| #6682 | Team Builder Member Showcase | 43 | 14 | 127 | 1k+ | | | Non-prefixed global variable |
| #6683 | Team Member Block | 81 | 15 | 14 | 1k+ | | | file system operations mkdir |
| #6684 | Team Section Block – Showcase Team Members with Layout Options | 83 | 1 | 21 | 1k+ | | | Non-prefixed namespace |
| #6685 | Templ Optimizer | 72 | 6 | 63 | 1k+ | | | Direct Query |
| #6686 | Terms and Conditions Popup for WooCommerce | 24 | 633 | 438 | 1k+ | | | Text Domain Mismatch |
| #6687 | Terms descriptions | 28 | 222 | 423 | 1k+ | | | Non-prefixed function |
| #6688 | Testerwp ecommerce companion | 21 | 811 | 436 | 1k+ | | | Text Domain Mismatch |
| #6689 | Testimonial Customer Feedback | 79 | 3 | 6 | 1k+ | | | Nonce verification recommended |
| #6690 | Contact Form 7 Text CAPTCHA | 76 | 14 | 34 | 1k+ | | | Non-prefixed global variable |
| #6691 | Text Hover | 41 | 44 | 13 | 1k+ | | | Output is not escaped |
| #6692 | Text Spinner | 96 | 6 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #6693 | The Cache Purger | 51 | 16 | 16 | 1k+ | | | Non Singular String Literal Text |
| #6694 | The Future Is Now | 76 | 3 | 10 | 1k+ | | | Input is not sanitized |
| #6695 | The Moneytizer | 22 | 751 | 271 | 1k+ | | | Text Domain Mismatch |
| #6696 | Theme Blvd Widget Pack | 38 | 240 | 17 | 1k+ | | | Output is not escaped |
| #6697 | Easy Mega Menu for WordPress – ThemeHunk | 34 | 480 | 256 | 1k+ | | | Text Domain Mismatch |
| #6698 | ThemeRain Core | 35 | 69 | 61 | 1k+ | | | Text Domain Mismatch |
| #6699 | Themes Artist Demo Importer | 97 | 75 | 6 | 1k+ | | | Text Domain Mismatch |
| #6700 | Themx Maximum Upload File Size | Increase Maximum Upload File Size | 93 | 17 | 14 | 1k+ | | | Text Domain Mismatch |