| #801 | Age Gate | 69 | 61 | 139 | 40k+ | | | Missing direct file access protection |
| #802 | Ajax Load More – Infinite Scroll, Load More, & Lazy Load | 22 | 641 | 595 | 40k+ | | | Unsafe printing function |
| #803 | API KEY for Google Maps | 94 | 14 | 5 | 40k+ | | | Text Domain Mismatch |
| #804 | aThemes Starter Sites | 29 | 268 | 214 | 40k+ | | | Text Domain Mismatch |
| #805 | Premium Portfolio Features for Phlox theme | 33 | 204 | 137 | 40k+ | | | Output is not escaped |
| #806 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #807 | Bing URL Submissions Plugin | 74 | 10 | 38 | 40k+ | | | error log error log |
| #808 | Block Visibility — Conditional Visibility Control for the Block Editor | 81 | 7 | 11 | 40k+ | | | Input is not sanitized |
| #809 | Bold Page Builder | 91 | 12 | 38 | 40k+ | | | Not In Footer |
| #810 | BoldGrid Easy SEO – Simple and Effective SEO | 34 | 149 | 104 | 40k+ | | | Text Domain Mismatch |
| #811 | Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | 24 | 344 | 609 | 40k+ | | | Non-prefixed global variable |
| #812 | Carousel Slider Block for Gutenberg | 96 | 48 | 12 | 40k+ | | | Text Domain Mismatch |
| #813 | Category Posts Widget | 38 | 153 | 26 | 40k+ | | | Output is not escaped |
| #814 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #815 | Classic Editor + | 86 | 1 | 4 | 40k+ | | | Input is not sanitized |
| #816 | Clear Cache for Me | 47 | 58 | 8 | 40k+ | | | Text Domain Mismatch |
| #817 | Companion Auto Update | 33 | 159 | 298 | 40k+ | | | Direct Query |
| #818 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | | | Missing nonce verification |
| #819 | Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo | 87 | 567 | 41 | 40k+ | | | Text Domain Mismatch |
| #820 | Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More | 88 | 20 | 116 | 40k+ | | | Non-prefixed hook name |
| #821 | Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | 62 | 81 | 100 | 40k+ | | | Missing direct file access protection |
| #822 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #823 | Crop-Thumbnails | 38 | 33 | 27 | 40k+ | | | Missing direct file access protection |
| #824 | Cryout Serious Theme Settings | 40 | 332 | 51 | 40k+ | | | Output is not escaped |
| #825 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #826 | Disable Google Fonts | 98 | 2 | 1 | 40k+ | | | no license |
| #827 | Disable Search | 99 | 2 | 1 | 40k+ | | | outdated tested upto header |
| #828 | Disqus Comment System | 54 | 17 | 33 | 40k+ | | | Non-prefixed hook name |
| #829 | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | 23 | 170 | 821 | 40k+ | | | Non-prefixed global variable |
| #830 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #831 | Login & Register Forms – Popup | Slider | Inline | WooCommerce | 33 | 177 | 478 | 40k+ | | | Non-prefixed global variable |
| #832 | Easy SVG Support | 99 | 1 | 0 | 40k+ | | | outdated tested upto header |
| #833 | eRecht24 Legal Texts | 100 | | 0 | 40k+ | | | No open findings |
| #834 | Export media with selected content (by DKZR) | 68 | 10 | 14 | 40k+ | | | Direct Query |
| #835 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | | | Output is not escaped |
| #836 | Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds | 38 | 167 | 82 | 40k+ | | | Output is not escaped |
| #837 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | | | Unsafe printing function |
| #838 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | 77 | 37 | 282 | 40k+ | | | Non-prefixed global variable |
| #839 | File Upload Types by WPForms | 98 | 2 | 9 | 40k+ | | | Non-prefixed function |
| #840 | Flexible Table Block | 98 | 4 | 7 | 40k+ | | | Non-prefixed constant |
| #841 | Genesis Blocks | 88 | 154 | 9 | 40k+ | | | Offloaded Content |
| #842 | Genesis eNews Extended | 82 | 9 | 1 | 40k+ | | | Output is not escaped |
| #843 | Interactive Content – H5P | 23 | 565 | 380 | 40k+ | | | Non Singular String Literal Domain |
| #844 | Hide Page And Post Title | 67 | 11 | 8 | 40k+ | | | Output is not escaped |
| #845 | The Icon Block | 99 | 1 | 0 | 40k+ | | | outdated tested upto header |
| #846 | Icon Element – Icon Pack for Elementor Page Builder (6718 icons) | 64 | 30 | 16 | 40k+ | | | wp function not compatible with requires wp |
| #847 | Image Hover Effects – Elementor Addon | 64 | 117 | 7 | 40k+ | | | Text Domain Mismatch |
| #848 | Image Watermark | 35 | 85 | 181 | 40k+ | | | Missing nonce verification |
| #849 | Insert Pages | 55 | 52 | 30 | 40k+ | | | Output is not escaped |
| #850 | InstaWP Connect – 1-click WP Staging & Migration | 24 | 253 | 811 | 40k+ | | | Non-prefixed global variable |