| #1951 | Shortcode Widget | 100 | | 0 | 10k+ | | | No open findings |
| #1952 | Shortcodes for Divi | 98 | 2 | 3 | 10k+ | | | Discouraged text-domain loading |
| #1953 | Show/Hide Content at Set Time | 35 | 17 | 7 | 10k+ | | | date date |
| #1954 | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 24 | 926 | 322 | 10k+ | | | Output is not escaped |
| #1955 | Show-Hide / Collapse-Expand | 70 | 18 | 15 | 10k+ | | | Missing direct file access protection |
| #1956 | Show Pages IDs | 74 | 8 | 8 | 10k+ | | | Output is not escaped |
| #1957 | Sidebar Login | 97 | 2 | 6 | 10k+ | | | Non-prefixed global variable |
| #1958 | Simple Admin Language Change | 98 | 4 | 2 | 10k+ | | | Missing direct file access protection |
| #1959 | Simple Divi Shortcode | 89 | 5 | 0 | 10k+ | | | Output is not escaped |
| #1960 | Code Embed | 100 | | 0 | 10k+ | | | No open findings |
| #1961 | Simple Like Page – Fast & Privacy-Friendly Page Embeds | 41 | 145 | 31 | 10k+ | | | Output is not escaped |
| #1962 | Simple Floating Menu | 76 | 13 | 3 | 10k+ | | | Missing direct file access protection |
| #1963 | Simple Full Screen Background Image | 44 | 23 | 13 | 10k+ | | | Output is not escaped |
| #1964 | Simple Image Widget | 44 | 26 | 19 | 10k+ | | | Unsafe printing function |
| #1965 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | | Non-prefixed global variable |
| #1966 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | | | date date |
| #1967 | Simple Map | 35 | 10 | 1 | 10k+ | | | Output is not escaped |
| #1968 | Simple Membership After Login Redirection | 63 | 4 | 24 | 10k+ | | | Missing nonce verification |
| #1969 | Simple Page Sidebars | 40 | 55 | 65 | 10k+ | | | Output is not escaped |
| #1970 | Simple Page Redirect | 81 | 3 | 7 | 10k+ | | | Request data is not unslashed |
| #1971 | Simple Revisions Delete | 43 | 16 | 26 | 10k+ | | | Output is not escaped |
| #1972 | Simple Side Tab | 43 | 28 | 17 | 10k+ | | | Unsafe printing function |
| #1973 | Simple Taxonomy Ordering | 75 | 7 | 10 | 10k+ | | | Direct Query |
| #1974 | SimpleTOC – Table of Contents Block | 35 | 10 | 0 | 10k+ | | | Setting is missing a sanitization callback |
| #1975 | Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads | 77 | 17 | 1 | 10k+ | | | Exception output is not escaped |
| #1976 | Affiliate Program Suite — SliceWP Affiliates | 25 | 1,291 | 2,089 | 10k+ | | | Output is not escaped |
| #1977 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | | | Output is not escaped |
| #1978 | Slim Maintenance Mode | 68 | 9 | 10 | 10k+ | | | Output is not escaped |
| #1979 | Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management | 25 | 367 | 923 | 10k+ | | | SQL query is not prepared |
| #1980 | SMK Sidebar Generator | 64 | 19 | 5 | 10k+ | | | Output is not escaped |
| #1981 | Social Icons | 38 | 72 | 83 | 10k+ | | | Output is not escaped |
| #1982 | Social Media Feather | 99 | | 4 | 10k+ | | | Non-prefixed constant |
| #1983 | Widgets for Social Photo Feed | 91 | 1 | 147 | 10k+ | | | Non-prefixed global variable |
| #1984 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #1985 | Softaculous | 24 | 115 | 50 | 10k+ | | | file system operations fread |
| #1986 | Solace Extra | 99 | | 5 | 10k+ | | | Non-prefixed class |
| #1987 | Soro – SEO Autopilot & AI Content Writer | 83 | 4 | 10 | 10k+ | | | Input is not sanitized |
| #1988 | Soumettre.fr | 39 | 130 | 26 | 10k+ | | | Text Domain Mismatch |
| #1989 | SportsPress – Sports Club & League Manager | 23 | 459 | 2,246 | 10k+ | | | Non-prefixed global variable |
| #1990 | SQLite Object Cache | 99 | 6 | 2 | 10k+ | | | wp function not compatible with requires wp |
| #1991 | SSH SFTP Updater Support | 79 | 6 | 31 | 10k+ | | | Non-prefixed global variable |
| #1992 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 751 | 1,605 | 10k+ | | | Non-prefixed global variable |
| #1993 | Starbox – the Author Box for Humans | 52 | 144 | 19 | 10k+ | | | Non Singular String Literal Domain |
| #1994 | Sticky Buttons – Floating Buttons Builder | 97 | 2 | 108 | 10k+ | | | Non-prefixed global variable |
| #1995 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons | 35 | 33 | 293 | 10k+ | | | Non-prefixed global variable |
| #1996 | Oceanwp sticky header | 64 | 8 | 13 | 10k+ | | | Missing nonce verification |
| #1997 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | | | Unsafe printing function |
| #1998 | Stop WP Emails Going to Spam | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #1999 | Subscribe to Comments | 36 | 129 | 163 | 10k+ | | | Output is not escaped |
| #2000 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | | | Direct Query |