| #9101 | Query Multiple Taxonomies | 39 | 55 | 41 | 500 | | | Output is not escaped |
| #9102 | Quick Restaurant Reservations | 33 | 654 | 179 | 500 | | | Text Domain Mismatch |
| #9103 | Quickcreator – AI Blog Writer | 58 | 14 | 18 | 500 | | | Exception output is not escaped |
| #9104 | Quran multilanguage Text & Audio | 35 | 177 | 166 | 500 | | | Output is not escaped |
| #9105 | Random Post on Refresh | 35 | 3 | 8 | 500 | | | Non-prefixed hook name |
| #9106 | RealPress – Real Estate Plugin | 22 | 604 | 1,167 | 500 | | | Non-prefixed global variable |
| #9107 | Recent Posts | 36 | 106 | 30 | 500 | | | Text Domain Mismatch |
| #9108 | Recent Posts Widget Plus | 42 | 68 | 3 | 500 | | | Output is not escaped |
| #9109 | Record of Consent Extension for Complianz | 100 | | 2 | 500 | | | Schema Change |
| #9110 | Referrer Input for Contact Form 7 | 85 | 39 | 2 | 500 | | | wp function not compatible with requires wp |
| #9111 | Remove Add to Cart Button for WooCommerce | 59 | 115 | 18 | 500 | | | Text Domain Mismatch |
| #9112 | Remove Category Word From Title | 97 | 3 | 3 | 500 | | | Non-prefixed function |
| #9113 | Rename wp-login.php to anything you want | 33 | 251 | 117 | 500 | | | Output is not escaped |
| #9114 | Repeater Fields for WPForms | 71 | 173 | 18 | 500 | | | wp function not compatible with requires wp |
| #9115 | Repeater for Contact Form 7 | 94 | 145 | 7 | 500 | | | wp function not compatible with requires wp |
| #9116 | Responsive Mailform ( Plugin Version ) – easy, responsive, contact, mailform | 38 | 120 | 107 | 500 | | | Output is not escaped |
| #9117 | Responsive Slick Slider WordPress | 88 | 3 | 131 | 500 | | | Non-prefixed global variable |
| #9118 | Responsive Testimonials | 36 | 252 | 32 | 500 | | | Text Domain Mismatch |
| #9119 | REST API Helper | 39 | 108 | 85 | 500 | | | Unsafe printing function |
| #9120 | Restrict Dates Add-On for Gravity Forms | 98 | 1 | 19 | 500 | | | Non-prefixed global variable |
| #9121 | Restrict Elementor Widgets, Columns and Sections | 35 | 18 | 53 | 500 | | | Non-prefixed function |
| #9122 | Email Marketing for WordPress and WooCommerce – Retainful | 100 | | 2 | 500 | | | trademarked term |
| #9123 | Reusable Gutenberg Blocks Widget | 68 | 24 | 9 | 500 | | | Output is not escaped |
| #9124 | Review widget addon for Divi | 87 | 20 | 3 | 500 | | | Text Domain Mismatch |
| #9125 | Ridhi Companion | 70 | 37 | 38 | 500 | | | Non-prefixed global variable |
| #9126 | Robots & Sitemap | 37 | 199 | 28 | 500 | | | Text Domain Mismatch |
| #9127 | Route ‑ Shipping Protection | 34 | 64 | 150 | 500 | | | Missing nonce verification |
| #9128 | RS Elements Elementor Addon | 27 | 2,026 | 321 | 500 | | | Text Domain Mismatch |
| #9129 | RSS Feed Pro | 33 | 484 | 16 | 500 | | | Output is not escaped |
| #9130 | Russian Date by Axelnsk | 96 | 5 | 1 | 500 | | | Missing direct file access protection |
| #9131 | Rutube Embed | 100 | | 0 | 500 | | | No open findings |
| #9132 | Salat Times | 40 | 235 | 20 | 500 | | | Output is not escaped |
| #9133 | Search box on Navigation Menu | 82 | 22 | 3 | 500 | | | Text Domain Mismatch |
| #9134 | Search engines blocked warning | 79 | 20 | 3 | 500 | | | Output is not escaped |
| #9135 | Section Widget | 50 | 24 | 35 | 500 | | | Nonce verification recommended |
| #9136 | Security Header Generator | 87 | 10 | 20 | 500 | | | Non Singular String Literal Text |
| #9137 | Security Ninja For MainWP | 47 | 246 | 71 | 500 | | | Text Domain Mismatch |
| #9138 | Select Post Export | 40 | 51 | 18 | 500 | | | Output is not escaped |
| #9139 | Sellbrite | 79 | 18 | 4 | 500 | | | Short PHP open tag found |
| #9140 | Send From | 64 | 5 | 18 | 500 | | | Input is not sanitized |
| #9141 | SendPulse Free Web Push | 100 | | 2 | 500 | | | ABSPATHDetected |
| #9142 | Sendy | 78 | 11 | 2 | 500 | | | Output is not escaped |
| #9143 | Service Box Slider | 24 | 618 | 1,410 | 500 | | | Non-prefixed global variable |
| #9144 | Sharespine Woocommerce Connector | 86 | 2 | 16 | 500 | | | error log error log |
| #9145 | Shipping by Rules for WooCommerce | 39 | 130 | 48 | 500 | | | Output is not escaped |
| #9146 | ShopPress – Shop Builder for Elementor and WooCommerce | 33 | 11 | 879 | 500 | | | Non-prefixed global variable |
| #9147 | Shortcode | 94 | 6 | 45 | 500 | | | Direct Query |
| #9148 | Show Me The Cookies | 100 | | 1 | 500 | | | Non-prefixed class |
| #9149 | Simple calendar for Elementor | 31 | 125 | 270 | 500 | | | Direct Query |
| #9150 | Contact Information Widget | 51 | 69 | 5 | 500 | | | Output is not escaped |