| #7551 | Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element | 43 | 66 | 109 | 800 | | | Missing direct file access protection |
| #7552 | Flodesk for Elementor Pro | 90 | 3 | 0 | 800 | | | Exception output is not escaped |
| #7553 | AnWP Football Leagues | 25 | 3,598 | 1,955 | 800 | | | Text Domain Mismatch |
| #7554 | Force Email Login | 35 | 5 | 0 | 800 | | | Hidden files included |
| #7555 | ForumWP – Forum & Discussion Board | 82 | 22 | 444 | 800 | | | Non-prefixed global variable |
| #7556 | Free Gift Product For WooCommerce | 70 | 9 | 77 | 800 | | | Non-prefixed global variable |
| #7557 | Freshdesk (official) | 23 | 194 | 386 | 800 | | | Non-prefixed function |
| #7558 | Fullscreen Galleria | 52 | 37 | 10 | 800 | | | Output is not escaped |
| #7559 | GamiPress – Link | 61 | 32 | 5 | 800 | | | Output is not escaped |
| #7560 | German Slugs | 96 | 6 | 0 | 800 | | | Missing direct file access protection |
| #7561 | GetTerms Cookie Consent & Policies | 98 | | 46 | 800 | | | Non-prefixed global variable |
| #7562 | GL Import External Images | 39 | 118 | 19 | 800 | | | wp function not compatible with requires wp |
| #7563 | GM Block Bots | 92 | 1 | 3 | 800 | | | Input is not sanitized |
| #7564 | APG Google Video Sitemap Feed | 34 | 96 | 45 | 800 | | | Output is not escaped |
| #7565 | Gravity Pre-submission Confirmation | 96 | 5 | 2 | 800 | | | Missing direct file access protection |
| #7566 | Gravity Forms Approvals Add-On | 59 | 17 | 6 | 800 | | | Output is not escaped |
| #7567 | Gutena Team – Team Slider and Grid | 97 | 6 | 2 | 800 | | | Missing Arg Domain |
| #7568 | Gutenverse News – News Blocks for Blog & Magazine Sites | 39 | 37 | 65 | 800 | | | Non-prefixed hook name |
| #7569 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | | | Text Domain Mismatch |
| #7570 | HHG for TranslatePress | 84 | 43 | 18 | 800 | | | curl curl setopt |
| #7571 | Hide Price Until User Login For Woocommerce | 99 | 1 | 1 | 800 | | | Discouraged text-domain loading |
| #7572 | Hide Prices for WooCommerce | 98 | 4 | 3 | 800 | | | Missing direct file access protection |
| #7573 | Highlight and Share – Unobtrusive and Lightweight Content Sharing | 74 | 12 | 115 | 800 | | | Non-prefixed hook name |
| #7574 | Hitsteps Web Analytics | 34 | 370 | 313 | 800 | | | Output is not escaped |
| #7575 | .htaccess Site Access Control | 37 | 54 | 67 | 800 | | | Input is not sanitized |
| #7576 | Huurkalender WP | 93 | 3 | 7 | 800 | | | trademarked term |
| #7577 | iFrame Block | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #7578 | Image Converter for WebP | 90 | 5 | 1 | 800 | | | wp function not compatible with requires wp |
| #7579 | Image Editor by Pixo | 40 | 126 | 66 | 800 | | | Output is not escaped |
| #7580 | Inactive User Deleter | 33 | 453 | 170 | 800 | | | Output is not escaped |
| #7581 | Include Mastodon Feed | 90 | 11 | 3 | 800 | | | Non-prefixed global variable |
| #7582 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | | | Direct Query |
| #7583 | Input Masks for Contact Form 7 | 76 | 143 | 12 | 800 | | | wp function not compatible with requires wp |
| #7584 | JetHost Total Care – Security & Enhancements | 45 | 10 | 85 | 800 | | | Direct Query |
| #7585 | Sharing buttons shortcode for Jetpack | 98 | 3 | 2 | 800 | | | Missing direct file access protection |
| #7586 | JJ NextGen JQuery Slider | 39 | 221 | 7 | 800 | | | Output is not escaped |
| #7587 | jQuery Image Lazy Load WP | 95 | 7 | 4 | 800 | | | Not Allowed |
| #7588 | Last Updated Shortcode | 97 | 3 | 4 | 800 | | | Non-prefixed global variable |
| #7589 | Lenix scss compiler | 35 | 133 | 34 | 800 | | | Exception output is not escaped |
| #7590 | LH Agree to Terms | 41 | 59 | 32 | 800 | | | Output is not escaped |
| #7591 | LH Copy Media File | 89 | 21 | 5 | 800 | | | wp function not compatible with requires wp |
| #7592 | Live Simple Clock | 62 | 23 | 1 | 800 | | | Output is not escaped |
| #7593 | LLM Bot Tracker – AI Crawler Detection & Analytics | 40 | 18 | 90 | 800 | | | Database parameter is not escaped |
| #7594 | Logo Switcher | 68 | 14 | 2 | 800 | | | Output is not escaped |
| #7595 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | | | curl curl setopt |
| #7596 | Mailster Gravity Forms | 50 | 46 | 32 | 800 | | | Text Domain Mismatch |
| #7597 | Maintenance Notice | 78 | 26 | 71 | 800 | | | Non-prefixed global variable |
| #7598 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,844 | 800 | | | Non-prefixed global variable |
| #7599 | Mass Delete Unused Tags | 42 | 21 | 9 | 800 | | | Output is not escaped |
| #7600 | Mass Email To Users | 40 | 84 | 81 | 800 | | | Output is not escaped |
