| #7101 | ZI Hide price and add to cart for WooCommerce | 87 | 15 | 7 | 1k+ | | | wp function not compatible with requires wp |
| #7102 | Zion Builder – Website Builder for Speed & Creativity | 74 | 4 | 29 | 1k+ | | | Non-prefixed hook name |
| #7103 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | | Non-prefixed global variable |
| #7104 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | | | Text Domain Mismatch |
| #7105 | Zoho Marketing Automation | 37 | 24 | 194 | 1k+ | | | Non-prefixed global variable |
| #7106 | ZoloBlocks – Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit | 99 | 3 | 2 | 1k+ | | | Missing direct file access protection |
| #7107 | 12 Step Meeting List | 22 | 156 | 593 | 900 | | | Non-prefixed global variable |
| #7108 | 2C2P Redirect API for WooCommerce | 36 | 136 | 62 | 900 | | | wp function not compatible with requires wp |
| #7109 | 404 Simple Redirect | 76 | 19 | 4 | 900 | | | Text Domain Mismatch |
| #7110 | Advanced coupon for WooCommerce | 29 | 472 | 242 | 900 | | | Text Domain Mismatch |
| #7111 | Subscribe Button by AddToAny | 40 | 93 | 47 | 900 | | | Output is not escaped |
| #7112 | Address Autocomplete Anything | 40 | 94 | 32 | 900 | | | Unsafe printing function |
| #7113 | Address Validation and Autocomplete for WooCommerce | Addressfinder | 89 | 85 | 15 | 900 | | | Text Domain Mismatch |
| #7114 | AdminPad | 100 | | 0 | 900 | | | No open findings |
| #7115 | Portfolio Grid – Filterable Gallery, Grid & Slider Showcase | 96 | 3 | 50 | 900 | | | Non-prefixed function |
| #7116 | Advanced Custom Fields: Limiter Field | 49 | 57 | 12 | 900 | | | Output is not escaped |
| #7117 | Advanced Custom Fields – Location Field add-on | 48 | 51 | 6 | 900 | | | Output is not escaped |
| #7118 | Advanced Custom Fields: oEmbed Field | 44 | 36 | 13 | 900 | | | Text Domain Mismatch |
| #7119 | AJAX Hits Counter + Popular Posts Widget | 37 | 247 | 44 | 900 | | | Output is not escaped |
| #7120 | Allow Numeric Slugs | 96 | 5 | 2 | 900 | | | Direct Query |
| #7121 | Ambrosite Next/Previous Page Link Plus | 70 | 11 | 21 | 900 | | | Interpolated SQL is not prepared |
| #7122 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | | | Non Singular String Literal Domain |
| #7123 | All-in-one Chat Button by anychat.one | 37 | 119 | 69 | 900 | | | Text Domain Mismatch |
| #7124 | Attachment Taxonomies | 89 | 1 | 8 | 900 | | | Input is not sanitized |
| #7125 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #7126 | Auto Ping Booster Free | 50 | 18 | 21 | 900 | | | Setting is missing a sanitization callback |
| #7127 | Autocomplete For Relevanssi | 35 | 30 | 9 | 900 | | | Unsafe printing function |
| #7128 | Password Reset with Code for WordPress REST API | 66 | 24 | 8 | 900 | | | Exception output is not escaped |
| #7129 | BH Custom CSS3 Preloader – Just play and play | 40 | 439 | 26 | 900 | | | Text Domain Mismatch |
| #7130 | Blank | 96 | 6 | 0 | 900 | | | Missing direct file access protection |
| #7131 | Block Editor Bootstrap Blocks | 39 | 173 | 50 | 900 | | | Text Domain Mismatch |
| #7132 | Block Guide Lines | 91 | 6 | 3 | 900 | | | Non-prefixed function |
| #7133 | Branded Social Images – Open Graph Images with logo and extra text layer | 29 | 254 | 91 | 900 | | | Non Singular String Literal Domain |
| #7134 | BT iPay Payments | 98 | 2 | 13 | 900 | | | Non-prefixed global variable |
| #7135 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | 20 | 736 | 2,112 | 900 | | | Non-prefixed global variable |
| #7136 | SiteEase Bulk Delete Manager | 49 | 50 | 72 | 900 | | | Direct Query |
| #7137 | Contact Zalo Report SW | 37 | 44 | 39 | 900 | | | Missing Arg Domain |
| #7138 | Cache External Scripts | 76 | 21 | 4 | 900 | | | Output is not escaped |
| #7139 | CashBill.pl – Płatności WooCommerce | 31 | 181 | 101 | 900 | | | Output is not escaped |
| #7140 | wModes – Catalog Mode, Product Pricing, Enquiry Forms & Promotions | for WooCommerce | 80 | | 465 | 900 | | | Non-prefixed global variable |
| #7141 | Category Archives Block | 98 | 14 | 5 | 900 | | | Missing Arg Domain |
| #7142 | CBX Map for Google Map & OpenStreetMap | 99 | 2 | 0 | 900 | | | Missing direct file access protection |
| #7143 | Change Permalink Helper | 81 | 5 | 5 | 900 | | | Direct Query |
| #7144 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #7145 | Church Admin | 24 | 1,554 | 4,207 | 900 | | | Direct Query |
| #7146 | Click To Copy – Copy Text or Code to Clipboard Instantly | 79 | 9 | 8 | 900 | | | Text Domain Mismatch |
| #7147 | Clone Woo Orders – Free by WP Masters | 73 | 13 | 8 | 900 | | | Output is not escaped |
| #7148 | Codeless Page Builder | 31 | 415 | 258 | 900 | | | Text Domain Mismatch |
| #7149 | Columns Reordering For Elementor | 97 | 4 | 2 | 900 | | | Missing direct file access protection |
| #7150 | Comments Shortcode | 98 | 3 | 1 | 900 | | | Missing direct file access protection |