| #7601 | Material Design for WordPress | 60 | 51 | 207 | 800 | | | Non-prefixed global variable |
| #7602 | Media Vault | 34 | 115 | 150 | 800 | | | Output is not escaped |
| #7603 | MembershipWorks Login Connector | 43 | 28 | 81 | 800 | | | Request data is not unslashed |
| #7604 | Meta Keywords for Each Page | 100 | | 0 | 800 | | | No open findings |
| #7605 | Meteo | 50 | 58 | 9 | 800 | | | Output is not escaped |
| #7606 | Metric Converter | 96 | 4 | 3 | 800 | | | Missing Version |
| #7607 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | | | Input is not validated |
| #7608 | Mighty Pros & Cons | 35 | 12 | 6 | 800 | | | Text Domain Mismatch |
| #7609 | Modernizr for WordPress | 96 | 5 | 4 | 800 | | | Deprecated parameter: load_plugin_textdomain parameter 2 |
| #7610 | Monster Widget | 98 | 3 | 4 | 800 | | | Non-prefixed hook name |
| #7611 | MooWoodle – WordPress Moodle LMS Integration, Sell Moodle Courses via WooCommerce | 63 | 10 | 45 | 800 | | | No Caching |
| #7612 | More Types | 33 | 227 | 198 | 800 | | | Non-prefixed global variable |
| #7613 | MPL-Publisher — Ebook & Audiobook Creator | 34 | 489 | 76 | 800 | | | Text Domain Mismatch |
| #7614 | 코드엠샵 마이사이트 – MSHOP MY SITE | 36 | 58 | 55 | 800 | | | Output is not escaped |
| #7615 | Mu Manager – Manage mu-plugins like standard plugins | 80 | 21 | 18 | 800 | | | Missing Arg Domain |
| #7616 | Multiple Form Instances Add-on for Gravity Forms | 82 | 5 | 5 | 800 | | | Missing direct file access protection |
| #7617 | Customize My Account for WooCommerce – Custom Tabs, Login, Registration, 2FA & Design | 38 | 78 | 172 | 800 | | | Non-prefixed global variable |
| #7618 | MyWorks Sync for WooCommerce & Xero | 29 | 1 | 1,080 | 800 | | | Non-prefixed global variable |
| #7619 | Nested Ordered Lists | 98 | 2 | 0 | 800 | | | outdated tested upto header |
| #7620 | Nirweb support | 23 | 254 | 617 | 800 | | | Request data is not unslashed |
| #7621 | Nav Menu Manager | 88 | 9 | 17 | 800 | | | Request data is not unslashed |
| #7622 | Nova Blocks by Pixelgrade | 31 | 209 | 110 | 800 | | | Output is not escaped |
| #7623 | Offcanvas Mobile Menu | 80 | 22 | 7 | 800 | | | Missing direct file access protection |
| #7624 | Sendle Shipping Plugin | 37 | 91 | 64 | 800 | | | wp function not compatible with requires wp |
| #7625 | Oliver POS – WooCommerce POS for iPhone, iPad & Android | 37 | 15 | 242 | 800 | | | Interpolated SQL is not prepared |
| #7626 | Omnipress | 24 | 169 | 245 | 800 | | | Non-prefixed global variable |
| #7627 | Online Contact Widget-多合一在线客服插件 | 26 | 708 | 80 | 800 | | | Non Singular String Literal Domain |
| #7628 | Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms | 48 | 34 | 14 | 800 | | | Non Singular String Literal Domain |
| #7629 | Organic Widget Area Block | 94 | 5 | 4 | 800 | | | Text Domain Mismatch |
| #7630 | PE Easy Slider | 42 | 190 | 10 | 800 | | | Output is not escaped |
| #7631 | Photo Galleria | 42 | 78 | 5 | 800 | | | Missing Arg Domain |
| #7632 | Gutena PhotoFeed | 97 | 8 | 2 | 800 | | | Missing Arg Domain |
| #7633 | Pixeline's Email Protector | 35 | 77 | 5 | 800 | | | Unsafe printing function |
| #7634 | Popup for Contact Form 7 | 73 | 13 | 7 | 800 | | | Setting is missing a sanitization callback |
| #7635 | Portfolio Block – The Ultimate Project & Portfolio Builder | 81 | 6 | 5 | 800 | | | Offloaded Content |
| #7636 | Post Editor Buttons Fork | 54 | 24 | 3 | 800 | | | Unsafe printing function |
| #7637 | Gutena Recent Post Custom Tag | 97 | 7 | 2 | 800 | | | Missing Arg Domain |
| #7638 | Post Timeline | 29 | 91 | 200 | 800 | | | Missing nonce verification |
| #7639 | Posts Columns Manager | 56 | 47 | 2 | 800 | | | Output is not escaped |
| #7640 | Preserve Taxonomy Hierarchy | 98 | 2 | 1 | 800 | | | Missing direct file access protection |
| #7641 | Printus – Automatic Cloud Printing for WooCommerce | 86 | 28 | 20 | 800 | | | Missing Arg Domain |
| #7642 | Pro Categories Widget | 43 | 59 | 9 | 800 | | | Output is not escaped |
| #7643 | Product Image Hover Effects WOOC – WPSHARE247 | 37 | 161 | 94 | 800 | | | Output is not escaped |
| #7644 | Product Notices for WooCommerce | 97 | 130 | 2 | 800 | | | Text Domain Mismatch |
| #7645 | Product Price History for WooCommerce | 42 | | 101 | 800 | | | Nonce verification recommended |
| #7646 | Property Hive Mortgage Calculator | 97 | 12 | 2 | 800 | | | Text Domain Mismatch |
| #7647 | Property Hive Stamp Duty Calculator | 72 | 39 | 2 | 800 | | | Text Domain Mismatch |
| #7648 | Propovoice: All-in-One Client Management System | 92 | 13 | 41 | 800 | | | Non-prefixed global variable |
| #7649 | ProScores – Live Scores | 88 | 12 | 4 | 800 | | | wp function not compatible with requires wp |
| #7650 | Protect schema.org markup in HTML editor | 98 | 3 | 0 | 800 | | | Missing direct file access protection |