| #7451 | Append extensions on Pages | 84 | 7 | 3 | 800 | | | Missing direct file access protection |
| #7452 | Append Link on Copy | 74 | 23 | 5 | 800 | | | Output is not escaped |
| #7453 | Application Passwords Enable | 100 | 1 | 0 | 800 | | | invalid tested upto minor |
| #7454 | ATR Cookie Notice | 85 | 7 | 2 | 800 | | | Output is not escaped |
| #7455 | Attendance Manager | 85 | 93 | 21 | 800 | | | date date |
| #7456 | Auto Post Expiration | 81 | 12 | 4 | 800 | | | Text Domain Mismatch |
| #7457 | Auto Subpage Menu | 85 | 5 | 6 | 800 | | | Database parameter is not escaped |
| #7458 | Mastodon Autopost | 40 | 41 | 50 | 800 | | | Output is not escaped |
| #7459 | Autover | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #7460 | Backup Bolt | 22 | 580 | 1,313 | 800 | | | Non-prefixed global variable |
| #7461 | SEO合集(支持百度/Google/Bing/头条推送) | 31 | 13 | 1,407 | 800 | | | Direct Query |
| #7462 | BASE Item List | 35 | 4 | 13 | 800 | | | error log error log |
| #7463 | BinancePay Checkout for WooCommerce | 84 | 5 | 14 | 800 | | | Input is not validated |
| #7464 | Black Widgets For Elementor | 36 | 2,608 | 19 | 800 | | | Text Domain Mismatch |
| #7465 | Blimply | 37 | 172 | 43 | 800 | | | Text Domain Mismatch |
| #7466 | Block Comment Spam Bots | 35 | 31 | 17 | 800 | | | Output is not escaped |
| #7467 | Block Patterns for Food Bloggers | 96 | 21 | 14 | 800 | | | Missing direct file access protection |
| #7468 | Blog-in-Blog | 34 | 64 | 93 | 800 | | | Non-prefixed function |
| #7469 | Bloglovin Button | 52 | 33 | 1 | 800 | | | Output is not escaped |
| #7470 | Booster for WPForms | 50 | 79 | 45 | 800 | | | Text Domain Mismatch |
| #7471 | BOX NOW Delivery Croatia | 39 | 64 | 99 | 800 | | | Missing nonce verification |
| #7472 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #7473 | BuddyCommerce: WooCommerce and BuddyPress Integration | 56 | 29 | 19 | 800 | | | Output is not escaped |
| #7474 | BuddyPress Edit Activity | 41 | 28 | 26 | 800 | | | Output is not escaped |
| #7475 | Bulk Actions Select All | 53 | 26 | 22 | 800 | | | Text Domain Mismatch |
| #7476 | Bulk Add Terms | 40 | 74 | 27 | 800 | | | Text Domain Mismatch |
| #7477 | Bulk Featured Image | 40 | 69 | 117 | 800 | | | Output is not escaped |
| #7478 | Bulk Post Importer | 84 | 1 | 38 | 800 | | | Missing nonce verification |
| #7479 | Bus Ticket Booking with Seat Reservation | 36 | 145 | 192 | 800 | | | Non-prefixed global variable |
| #7480 | Category Archive Widget | 51 | 54 | 2 | 800 | | | Output is not escaped |
| #7481 | CBX User Online & Last Login | 86 | 3 | 87 | 800 | | | Non-prefixed global variable |
| #7482 | CC BMI Calculator | 40 | 135 | 7 | 800 | | | Output is not escaped |
| #7483 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #7484 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | | | Short PHP open tag found |
| #7485 | Child Theme Check | 100 | | 1 | 800 | | | Non-prefixed class |
| #7486 | CiviCRM Member Sync | 76 | 8 | 70 | 800 | | | Non-prefixed global variable |
| #7487 | Clean My Archives | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #7488 | Plugin de Clip para WooCommerce | 93 | 13 | 29 | 800 | | | Non-prefixed global variable |
| #7489 | CM E-Mail Blacklist – Simple email filtering for safer registration | 35 | 269 | 205 | 800 | | | Output is not escaped |
| #7490 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #7491 | CodePen Embedded Pens Shortcode | 97 | 17 | 0 | 800 | | | wp function not compatible with requires wp |
| #7492 | Coldbox Addons | 97 | 11 | 2 | 800 | | | Missing direct file access protection |
| #7493 | Coinbase Business Gateway for WooCommerce | 25 | 569 | 1,317 | 800 | | | Non-prefixed global variable |
| #7494 | Contact Form 7 Get and Show Parameter from URL | 79 | 3 | 10 | 800 | | | Input is not sanitized |
| #7495 | Contact Form Generator : Creative form builder for WordPress | 27 | 1,076 | 1,510 | 800 | | | Output is not escaped |
| #7496 | ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators | 70 | 9 | 12 | 800 | | | Output is not escaped |
| #7497 | Copyscape Premium | 40 | 148 | 133 | 800 | | | SQL query is not prepared |
| #7498 | Country Dropdown For Contact Form 7 | 85 | 17 | 4 | 800 | | | Text Domain Mismatch |
| #7499 | CP Contact Form with PayPal | 25 | 466 | 936 | 800 | | | Unsafe printing function |
| #7500 | Creative Addons for Elementor | 44 | 63 | 100 | 800 | | | Missing Arg Domain |