| #8451 | All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login | 83 | 182 | 22 | 600 | | | wp function not compatible with requires wp |
| #8452 | Lordicon | 98 | 2 | 2 | 600 | | | Non-prefixed function |
| #8453 | Madquick WP Legal Pages – One Click, 100% Free | 85 | 5 | 55 | 600 | | | Non-prefixed global variable |
| #8454 | Magazine Columns | 96 | 6 | 3 | 600 | | | wp function not compatible with requires wp |
| #8455 | Mail Baby SMTP | 22 | 385 | 699 | 600 | | | SQL query is not prepared |
| #8456 | MailingBoss WP Plugin | 37 | 108 | 30 | 600 | | | Output is not escaped |
| #8457 | Mailster Live | 48 | 22 | 37 | 600 | | | Missing Translators Comment |
| #8458 | Remove/Hide Admin Toolbar | 97 | 2 | 3 | 600 | | | outdated tested upto header |
| #8459 | MakeStories (for Google Web Stories) | 26 | 117 | 416 | 600 | | | Nonce verification recommended |
| #8460 | Marketing Automation | 24 | 440 | 677 | 600 | | | Non-prefixed global variable |
| #8461 | MarqueeX – Smooth Marquee Slider, News Ticker & Post Marquee for Block Editor & Elementor | 100 | | 1 | 600 | | | missing composer json file |
| #8462 | MASS Users Password Reset | 100 | | 0 | 600 | | | No open findings |
| #8463 | Media from ZIP | 95 | | 16 | 600 | | | Non-prefixed global variable |
| #8464 | MB Yoast SEO Integration | 98 | 2 | 3 | 600 | | | trademarked term |
| #8465 | MetaTag | 67 | 7 | 13 | 600 | | | Input is not validated |
| #8466 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | | | Non-prefixed global variable |
| #8467 | Minimal Maintenance Mode | 72 | 1 | 20 | 600 | | | Missing nonce verification |
| #8468 | SAML IDP (Identity Provider) – Login with Website Users | 35 | 13 | 326 | 600 | | | Non-prefixed global variable |
| #8469 | Mintpay | 51 | 14 | 35 | 600 | | | Nonce verification recommended |
| #8470 | Mobile Menu Builder for WordPress | 36 | 81 | 33 | 600 | | | Output is not escaped |
| #8471 | Order Bump for WooCommerce | 23 | 1,720 | 1,562 | 600 | | | Output is not escaped |
| #8472 | Most Popular Categories | 41 | 67 | 2 | 600 | | | Output is not escaped |
| #8473 | Multiple Packages for WooCommerce | 59 | 34 | 4 | 600 | | | Text Domain Mismatch |
| #8474 | Multiple Sidebars | 36 | 109 | 75 | 600 | | | Non Singular String Literal Domain |
| #8475 | MyD Delivery Widgets | 92 | 5 | 1 | 600 | | | Missing Translators Comment |
| #8476 | Newebpay Payment | 33 | 146 | 115 | 600 | | | Text Domain Mismatch |
| #8477 | News Manager | 36 | 134 | 57 | 600 | | | Output is not escaped |
| #8478 | NEX-Forms ADD ON – Digital Signatures | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #8479 | Ni WooCommerce Admin Order Columns | 79 | 15 | 4 | 600 | | | Output is not escaped |
| #8480 | reCAPTCHA for Ninja Forms | 56 | 21 | 9 | 600 | | | Output is not escaped |
| #8481 | Noindex Attachment Pages | 98 | 3 | 1 | 600 | | | Missing direct file access protection |
| #8482 | Notely | 67 | 6 | 17 | 600 | | | Non-prefixed function |
| #8483 | Notix – Web Push Notifications | 44 | 22 | 41 | 600 | | | Non-prefixed global variable |
| #8484 | Ocultar "Añadir al Carrito" | 96 | 4 | 2 | 600 | | | Missing direct file access protection |
| #8485 | Ogp Plus | 99 | 1 | 6 | 600 | | | Non-prefixed global variable |
| #8486 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | | | Text Domain Mismatch |
| #8487 | OtFm Gutenberg Spoiler – (or FAQ) collapse block | 35 | 6 | 9 | 600 | | | trademarked term |
| #8488 | Team Members Profile – Employee Directory & Staff Showcase | 34 | 339 | 90 | 600 | | | Output is not escaped |
| #8489 | Outfunnel: Web Visitor Tracking & CRM Integration | 74 | 34 | 9 | 600 | | | Short PHP open tag found |
| #8490 | Ozh' Better Feed | 38 | 45 | 35 | 600 | | | Heredoc Output Not Escaped |
| #8491 | Page Management Dropdown | 97 | 3 | 3 | 600 | | | Direct Query |
| #8492 | Panda Pods Repeater Field | 37 | 9 | 260 | 600 | | | Non-prefixed global variable |
| #8493 | PAYDUNYA WOOCOMMERCE PAR | 42 | 54 | 32 | 600 | | | Text Domain Mismatch |
| #8494 | Maya Business Plugin | 56 | 9 | 39 | 600 | | | Input is not validated |
| #8495 | Star Rating Block for Block Editor | 98 | 4 | 1 | 600 | | | Missing direct file access protection |
| #8496 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #8497 | GoHero Store Customizer for WooCommerce | 37 | 75 | 53 | 600 | | | Unsafe printing function |
| #8498 | PHP Browser Detection | 28 | 68 | 49 | 600 | | | Non-prefixed function |
| #8499 | PHP Info | 84 | 8 | 5 | 600 | | | Output is not escaped |
| #8500 | Pinterest Verify Meta Tag | 68 | 20 | 6 | 600 | | | Output is not escaped |