| #8551 | Search Live | 40 | 132 | 71 | 600 | | | Output is not escaped |
| #8552 | Search and Replace for Block Editor | 91 | 2 | 1 | 600 | | | Output is not escaped |
| #8553 | Search Widget Post Types for Elementor | 97 | 4 | 2 | 600 | | | Deprecated parameter: load_plugin_textdomain parameter 2 |
| #8554 | Secure Downloads | 28 | 616 | 406 | 600 | | | Output is not escaped |
| #8555 | Security.txt Manager | 35 | 1 | 0 | 600 | | | Hidden files included |
| #8556 | Serbian Addons for WooCommerce | 91 | 34 | 13 | 600 | | | Text Domain Mismatch |
| #8557 | ShareThis Reaction Buttons | 35 | 1 | 7 | 600 | | | Non-prefixed global variable |
| #8558 | Sharing Image | 98 | 4 | 2 | 600 | | | Missing Arg Domain |
| #8559 | Shift8 CDN | 34 | 81 | 25 | 600 | | | Output is not escaped |
| #8560 | Ship to a Different Address Checked/Unchecked for WooCommerce | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #8561 | Shipping Zones by Drawing for WooCommerce | 35 | 278 | 95 | 600 | | | Text Domain Mismatch |
| #8562 | Shop as Client for WooCommerce – Manual, Phone & Email Orders | 98 | 1 | 5 | 600 | | | Non-prefixed function |
| #8563 | StoreBuild – Online Store Builder for WooCommerce | 30 | 120 | 211 | 600 | | | Non-prefixed global variable |
| #8564 | Display custom fields in the frontend – Post and User Profile Fields | 77 | 17 | 18 | 600 | | | Non-prefixed global variable |
| #8565 | Wbcom Designs – Shortcodes & Elementor Widgets For BuddyPress | 89 | 26 | 184 | 600 | | | Non-prefixed hook name |
| #8566 | Simple Footnotes | 87 | 11 | 1 | 600 | | | wp function not compatible with requires wp |
| #8567 | Simple Post Views Count | 98 | 1 | 2 | 600 | | | outdated tested upto header |
| #8568 | Simple Sticky Footer | 42 | 57 | 16 | 600 | | | Missing Arg Domain |
| #8569 | Slimbox | 97 | 4 | 1 | 600 | | | Missing direct file access protection |
| #8570 | Slug or PostID | 87 | 3 | 4 | 600 | | | Missing nonce verification |
| #8571 | Smaily for WP | 39 | 52 | 36 | 600 | | | Output is not escaped |
| #8572 | Smart App Banner | 43 | 47 | 49 | 600 | | | Output is not escaped |
| #8573 | Smart Keywords Tool – 智能关键词插件 | 31 | 361 | 33 | 600 | | | Non Singular String Literal Domain |
| #8574 | SmartEmailing | 92 | 7 | 3 | 600 | | | Missing direct file access protection |
| #8575 | Smartslider | 83 | 13 | 0 | 600 | | | Output is not escaped |
| #8576 | Smoove connector for Elementor forms | 41 | 22 | 60 | 600 | | | Nonce verification recommended |
| #8577 | SnapWidget Social Photo Feed Widget | 82 | 9 | 9 | 600 | | | Output is not escaped |
| #8578 | Social Engine | 29 | 133 | 90 | 600 | | | Exception output is not escaped |
| #8579 | Speed Up – Optimize CSS Delivery | 89 | 4 | 1 | 600 | | | Output is not escaped |
| #8580 | SQL Chart Builder | 41 | 38 | 52 | 600 | | | Text Domain Mismatch |
| #8581 | SSL Certificate Manager | 61 | 14 | 7 | 600 | | | Output is not escaped |
| #8582 | SSO for Entra ID | 99 | 4 | 1 | 600 | | | Missing Arg Domain |
| #8583 | Staffer | 42 | 88 | 42 | 600 | | | Output is not escaped |
| #8584 | Steady for WordPress | 35 | 6 | 13 | 600 | | | Non-prefixed global variable |
| #8585 | Stick My Header for Astra | 98 | 2 | 3 | 600 | | | Non-prefixed global variable |
| #8586 | Stock Quotes List | 38 | 72 | 13 | 600 | | | Output is not escaped |
| #8587 | Stop Pinging Yourself | 49 | 47 | 8 | 600 | | | Non Singular String Literal Domain |
| #8588 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 35 | | 524 | 600 | | | Non-prefixed global variable |
| #8589 | Stream Video Player | 27 | 220 | 135 | 600 | | | Output is not escaped |
| #8590 | Super Cool Ad Inserter Plugin | 35 | 22 | 5 | 600 | | | Text Domain Mismatch |
| #8591 | SuperCPT | 37 | 172 | 27 | 600 | | | Output is not escaped |
| #8592 | Super Simple Event Calendar | 58 | 8 | 24 | 600 | | | Request data is not unslashed |
| #8593 | Surbma | Divi Remove Project CPT & Taxonomies | 98 | 1 | 3 | 600 | | | Discouraged text-domain loading |
| #8594 | Swift Switcher — Bulk & Custom Post Type Converter | 98 | 1 | 5 | 600 | | | Direct Query |
| #8595 | Sync QCloud COS | 36 | 63 | 109 | 600 | | | Non-prefixed function |
| #8596 | Tawk.To Manager | 39 | 204 | 21 | 600 | | | Output is not escaped |
| #8597 | Taxonomy Converter | 41 | 54 | 24 | 600 | | | Output is not escaped |
| #8598 | Tealium | 40 | 73 | 19 | 600 | | | Unsafe printing function |
| #8599 | Telegram Bot & Channel | 33 | 182 | 113 | 600 | | | Unsafe printing function |
| #8600 | Telephone Input For Contact Form 7 | 76 | 18 | 10 | 600 | | | Text Domain Mismatch |