| #10001 | WP School Calendar | 24 | 1,361 | 1,720 | 400 | | | Non-prefixed global variable |
| #10002 | WP Search Suggest | 98 | 3 | 3 | 400 | | | trademarked term |
| #10003 | WP Show Stats | 37 | 197 | 103 | 400 | | | Output is not escaped |
| #10004 | WP Sitemap Control | 39 | 31 | 37 | 400 | | | Output is not escaped |
| #10005 | WP-Speech-Balloon | 90 | 5 | 10 | 400 | | | trademarked term |
| #10006 | WP-Stateless – Gravity Forms Addon | 97 | 2 | 9 | 400 | | | Non-prefixed hook name |
| #10007 | WP Subscription Forms – Subscription Form Plugin for WordPress | 34 | 131 | 220 | 400 | | | Non-prefixed global variable |
| #10008 | WP Theme Optimizer | 33 | 388 | 80 | 400 | | | Output is not escaped |
| #10009 | Customer Support Ticket System & Helpdesk | 23 | 1,719 | 1,464 | 400 | | | Text Domain Mismatch |
| #10010 | WP TinyMCE Tables | 98 | 3 | 3 | 400 | | | trademarked term |
| #10011 | WP Voting Contest Lite | 24 | 259 | 258 | 400 | | | Text Domain Mismatch |
| #10012 | WP Weixin | 32 | 60 | 152 | 400 | | | Non-prefixed constant |
| #10013 | WPA WooCommerce Product Gallery Slider Lite | 77 | 66 | 52 | 400 | | | Text Domain Mismatch |
| #10014 | WPArtisan Filename Sanitizer | 97 | 2 | 5 | 400 | | | trademarked term |
| #10015 | WPBulky – WordPress Bulk Edit Post Types | 91 | 1 | 18 | 400 | | | Database parameter is not escaped |
| #10016 | WPC Free Gift Coupons for WooCommerce | 65 | 8 | 25 | 400 | | | Non-prefixed class |
| #10017 | WPC Shop as a Customer for WooCommerce | 64 | 5 | 38 | 400 | | | Request data is not unslashed |
| #10018 | WPC Variation Duplicator for WooCommerce | 93 | | 18 | 400 | | | Non-prefixed class |
| #10019 | WPC Variations Table for WooCommerce | 85 | | 34 | 400 | | | Non-prefixed hook name |
| #10020 | WPLANG Lite | 84 | 8 | 5 | 400 | | | trademarked term |
| #10021 | WPQiNiu七牛云对象存储 | 19 | 138 | 612 | 400 | | | Non-prefixed global variable |
| #10022 | WPSSO WP Sitemaps XML with News, Image, and Video Sitemap | 75 | 60 | 24 | 400 | | | Missing Translators Comment |
| #10023 | WUPO Group Attributes for WooCommerce | 22 | 592 | 1,391 | 400 | | | Non-prefixed global variable |
| #10024 | Xml Sitemap Generator | 34 | 72 | 47 | 400 | | | SQL query is not prepared |
| #10025 | XT Quick View for WooCommerce | 23 | 1,079 | 1,829 | 400 | | | Non-prefixed global variable |
| #10026 | Yandex Mail | 79 | 16 | 4 | 400 | | | Non Singular String Literal Domain |
| #10027 | Yandex Pay and Split | 97 | 2 | 16 | 400 | | | Non-prefixed global variable |
| #10028 | YouTube widget | 38 | 39 | 25 | 400 | | | Output is not escaped |
| #10029 | Yoycol Integration for WooCommerce | 97 | 4 | 4 | 400 | | | Missing Version |
| #10030 | Yuma Companion | 85 | 10 | 7 | 400 | | | Missing direct file access protection |
| #10031 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #10032 | Zilla Portfolio | 41 | 139 | 15 | 400 | | | Text Domain Mismatch |
| #10033 | ZIP from Media | 97 | 4 | 16 | 400 | | | Non-prefixed global variable |
| #10034 | Tiny Yardage Calculator | 72 | 23 | 1 | 300 | | | Output is not escaped |
| #10035 | PufferDesk | 100 | | 0 | 0 | | | No open findings |
| #10036 | PufferSights – AI Crawler Insights | 100 | | 0 | 0 | | | No open findings |
| #10037 | ShopWriter Lite | 99 | 1 | 0 | 0 | | | outdated tested upto header |
| #10038 | Warder Cookie Consent | 97 | | 2 | 0 | | | Input is not sanitized |