| #8701 | WSW – Shopify WooCommerce / WordPress Integration and Migration | 23 | 1,449 | 1,612 | 600 | | | Non-prefixed global variable |
| #8702 | xili-language | 24 | 1,501 | 523 | 600 | | | Output is not escaped |
| #8703 | XML Feed for Skroutz & BestPrice for WooCommerce | 57 | 12 | 50 | 600 | | | Input is not sanitized |
| #8704 | Yatra – Travel Booking & Tour Operator Software | 23 | 2,236 | 4,024 | 600 | | | Non-prefixed global variable |
| #8705 | YeeMail — Email Template Builder & Customizer | 25 | 606 | 222 | 600 | | | wp function not compatible with requires wp |
| #8706 | Yoo Slider – Image Slider & Video Slider | 32 | 744 | 209 | 600 | | | Output is not escaped |
| #8707 | Zalomení řádků v češtině a slovenčine | 97 | 3 | 0 | 600 | | | outdated tested upto header |
| #8708 | Zapper Payments | 69 | 11 | 11 | 600 | | | Output is not escaped |
| #8709 | Algori 360 Video | 35 | 6 | 6 | 500 | | | Hidden files included |
| #8710 | AccessibleWP – ALT Detector | 40 | 55 | 14 | 500 | | | Text Domain Mismatch |
| #8711 | Accounting for WooCommerce | 39 | 87 | 115 | 500 | | | Unsafe printing function |
| #8712 | ACF Recent Posts Widget | 39 | 260 | 16 | 500 | | | Output is not escaped |
| #8713 | WP Sessions Time Monitoring Full Automatic | 22 | 869 | 1,529 | 500 | | | Non-prefixed global variable |
| #8714 | Add New Default Avatar | 82 | 21 | 0 | 500 | | | Output is not escaped |
| #8715 | Add WPGraphql Send Mail | 99 | 1 | 3 | 500 | | | trademarked term |
| #8716 | Address Geocoder | 51 | 12 | 18 | 500 | | | Output is not escaped |
| #8717 | Admin Dashboard RSS Feed | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #8718 | Admin Help Docs | 97 | 9 | 31 | 500 | | | Non-prefixed global variable |
| #8719 | Admin Options Pages | 42 | 3 | 284 | 500 | | | Nonce verification recommended |
| #8720 | Admin Robots.txt Editor | 99 | 1 | 0 | 500 | | | outdated tested upto header |
| #8721 | AdPlugg WordPress Ad Plugin | 35 | 58 | 17 | 500 | | | Missing direct file access protection |
| #8722 | Advanced Custom Fields – Widget Relationship Field add-on | 73 | 18 | 7 | 500 | | | Output is not escaped |
| #8723 | Advanced Custom Order Status for WooCommerce | 55 | 44 | 33 | 500 | | | Text Domain Mismatch |
| #8724 | reCaptcha for WooCommerce | 91 | 116 | 9 | 500 | | | Text Domain Mismatch |
| #8725 | Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia | 33 | 80 | 172 | 500 | | | Nonce verification recommended |
| #8726 | AffiliateWP – Allow Own Referrals | 78 | 37 | 10 | 500 | | | Text Domain Mismatch |
| #8727 | AffiliateWP – Force Pending Referrals | 79 | 35 | 12 | 500 | | | Text Domain Mismatch |
| #8728 | Age Verification for your checkout page. Verify your customer's identity | 36 | 155 | 238 | 500 | | | Output is not escaped |
| #8729 | Agoda Affiliate Partners Text Link Generator | 42 | 4 | 40 | 500 | | | Interpolated SQL is not prepared |
| #8730 | AI Content Creator – Easy ChatGPT powered article generator | 89 | 15 | 33 | 500 | | | Non-prefixed global variable |
| #8731 | AI Content Signals | 100 | | 0 | 500 | | | No open findings |
| #8732 | AI Product Tools – Bulk Product Content Generator & AI Toolkit for WooCommerce | 30 | 508 | 562 | 500 | | | SQL query is not prepared |
| #8733 | Ajax Load More for Relevanssi | 98 | 2 | 0 | 500 | | | license mismatch |
| #8734 | Alert Box Block | 99 | | 6 | 500 | | | Non-prefixed constant |
| #8735 | All in One SEO Pack Importer | 56 | 17 | 25 | 500 | | | Direct Query |
| #8736 | Allow Only 1 Product in Cart | 99 | 1 | 1 | 500 | | | mismatched plugin name |
| #8737 | Alphabetic Pagination | 38 | 144 | 117 | 500 | | | Unsafe printing function |
| #8738 | AlphaListing | 98 | | 18 | 500 | | | Non-prefixed function |
| #8739 | Already Existing Tags | 82 | 8 | 1 | 500 | | | Setting is missing a sanitization callback |
| #8740 | Always Use Open Graph with Jetpack | 98 | 2 | 1 | 500 | | | Missing direct file access protection |
| #8741 | Amedea – Unique Design Elements for Elementor | 89 | 1 | 25 | 500 | | | Mixed line endings |
| #8742 | Amelia Calendar Essential Shortcodes | 96 | 2 | 9 | 500 | | | Not In Footer |
| #8743 | AMP Contact FORM 7 – AMPCF7 | 62 | 9 | 13 | 500 | | | Input is not validated |
| #8744 | AMS Hide Page and Post Title | 80 | 4 | 6 | 500 | | | Input is not sanitized |
| #8745 | Anti-Spambot | 97 | 3 | 2 | 500 | | | Missing direct file access protection |
| #8746 | Aplazame | 38 | 34 | 39 | 500 | | | Non-prefixed global variable |
| #8747 | Augmented Reality Viewer – 3D Model Viewer | 98 | 5 | 2 | 500 | | | wp function not compatible with requires wp |
| #8748 | Web Accessibility Toolkit – Accessibility Checker & ARIA for WCAG, Section 508 & ADA Compliance | 58 | 9 | 20 | 500 | | | Output is not escaped |
| #8749 | Ascending Posts by Fly Plugins | 55 | 23 | 13 | 500 | | | Text Domain Mismatch |
| #8750 | Author Website Templates – Create Writer, Author & Publisher Websites Easily | 22 | 711 | 2,910 | 500 | | | Non-prefixed global variable |