| #7051 | WPCOM Member | 26 | 432 | 638 | 1k+ | | | Non Singular String Literal Domain |
| #7052 | WPComplete | 29 | 383 | 333 | 1k+ | | | Output is not escaped |
| #7053 | wpDataTables integration for Forminator Forms | 45 | 62 | 38 | 1k+ | | | Text Domain Mismatch |
| #7054 | WPDevDesign – Oxygen – Navigator | 98 | 8 | 4 | 1k+ | | | Missing Arg Domain |
| #7055 | WPDevDesign – Oxygen – Rank Math Integration | 98 | 3 | 3 | 1k+ | | | trademarked term |
| #7056 | WPFrank Companion | 26 | 2,356 | 865 | 1k+ | | | Text Domain Mismatch |
| #7057 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | | | Text Domain Mismatch |
| #7058 | WPHindi – Type in Hindi in WordPress | 95 | 7 | 9 | 1k+ | | | Not In Footer |
| #7059 | WPInterface Add-ons | 100 | | 3 | 1k+ | | | trademarked term |
| #7060 | WPLMS CoAuthors Plus | 92 | 3 | 4 | 1k+ | | | trademarked term |
| #7061 | WPLMS H5P | 36 | 111 | 106 | 1k+ | | | Text Domain Mismatch |
| #7062 | mb.YTPlayer for background videos | 38 | 80 | 29 | 1k+ | | | Unsafe printing function |
| #7063 | WPoperation Elementor Addons | 33 | 891 | 52 | 1k+ | | | Text Domain Mismatch |
| #7064 | WPPerformanceTester | 35 | 94 | 44 | 1k+ | | | Output is not escaped |
| #7065 | WPPizza – A Restaurant Plugin | 18 | 4,689 | 2,703 | 1k+ | | | Text Domain Mismatch |
| #7066 | Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor | 97 | 2 | 14 | 1k+ | | | Dynamic hook name |
| #7067 | WPS HTML Blocks | 91 | 23 | 4 | 1k+ | | | Text Domain Mismatch |
| #7068 | School Management System – WPSchoolPress | 20 | 353 | 5,275 | 1k+ | | | Non-prefixed global variable |
| #7069 | Follow Us Badges | 96 | 7 | 9 | 1k+ | | | Non-prefixed global variable |
| #7070 | Post Status Notifications | 47 | 98 | 41 | 1k+ | | | Text Domain Mismatch |
| #7071 | Video Popup for Elementor – WPTD | 66 | 33 | 13 | 1k+ | | | Output is not escaped |
| #7072 | WP Telegram Login & Register | 95 | 11 | 21 | 1k+ | | | Non-prefixed global variable |
| #7073 | Database Snapshots – WPvivid | 36 | 66 | 108 | 1k+ | | | Direct Query |
| #7074 | Wrap form fields in Gravity Forms | 84 | 22 | 3 | 1k+ | | | Text Domain Mismatch |
| #7075 | Writesonic | 35 | 14 | 16 | 1k+ | | | Non-prefixed global variable |
| #7076 | WSB HUB3 | 35 | 36 | 109 | 1k+ | | | Missing nonce verification |
| #7077 | WT GeoTargeting | 32 | 89 | 43 | 1k+ | | | Output is not escaped |
| #7078 | WebToffee Gift Cards for WooCommerce | 95 | 92 | 4 | 1k+ | | | wp function not compatible with requires wp |
| #7079 | X-Currency – The Ultimate WooCommerce currency switcher for a smoother shopping experience | 77 | 17 | 77 | 1k+ | | | Non-prefixed global variable |
| #7080 | xili-tidy-tags | 35 | 224 | 157 | 1k+ | | | Output is not escaped |
| #7081 | XLTab – Accordions and Tabs for Elementor Page Builder | 40 | 317 | 65 | 1k+ | | | Text Domain Mismatch |
| #7082 | XO Post Background | 98 | 2 | 2 | 1k+ | | | Discouraged text-domain loading |
| #7083 | XPS Ship Integration | 91 | 58 | 20 | 1k+ | | | Text Domain Mismatch |
| #7084 | XT Ajax Add To Cart for WooCommerce | 24 | 985 | 1,665 | 1k+ | | | Non-prefixed global variable |
| #7085 | YAHMAN Add-ons | 31 | 468 | 141 | 1k+ | | | Output is not escaped |
| #7086 | YayExtra – WooCommerce Extra Product Options | 36 | 11 | 472 | 1k+ | | | Non-prefixed global variable |
| #7087 | YaySwatches – Variation Swatches for WooCommerce | 68 | 281 | 14 | 1k+ | | | Text Domain Mismatch |
| #7088 | Yektanet Ecommerce | 40 | 45 | 103 | 1k+ | | | Request data is not unslashed |
| #7089 | YITH PayPal Express Checkout for WooCommerce | 23 | 387 | 1,443 | 1k+ | | | Non-prefixed global variable |
| #7090 | YITH Proteo Toolkit | 54 | 130 | 64 | 1k+ | | | Text Domain Mismatch |
| #7091 | YITH Slider for page builders | 75 | 13 | 22 | 1k+ | | | Nonce verification recommended |
| #7092 | Yivic Easy Live Chat | 91 | 22 | 8 | 1k+ | | | Non Singular String Literal Domain |
| #7093 | YLabs Connector for WPWriter | 95 | 5 | 7 | 1k+ | | | Forbidden PHP function found |
| #7094 | Year Make Model Search for WooCommerce | 35 | 188 | 162 | 1k+ | | | Output is not escaped |
| #7095 | YT Player – Embed and Customize Video Players | 97 | 3 | 14 | 1k+ | | | Non-prefixed constant |
| #7096 | Yumpu E-Paper publishing | 98 | 2 | 2 | 1k+ | | | Missing direct file access protection |
| #7097 | Zeffy Donate Button | 90 | 3 | 0 | 1k+ | | | Output is not escaped |
| #7098 | Zen Addons for SiteOrigin Page Builder | 90 | 1,488 | 129 | 1k+ | | | Text Domain Mismatch |
| #7099 | Zen Menu Logic | 62 | 19 | 3 | 1k+ | | | Output is not escaped |
| #7100 | Zephyr Project Manager | 23 | 667 | 2,454 | 1k+ | | | Non-prefixed global variable |