| #3451 | Groovy Menu Plugin (Free) | 23 | 1,729 | 283 | 4k+ | | | Text Domain Mismatch |
| #3452 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #3453 | HelloAsso | 60 | 132 | 89 | 4k+ | | | Short PHP open tag found |
| #3454 | Herzog Dupont for YOOtheme Pro | 34 | 477 | 233 | 4k+ | | | Output is not escaped |
| #3455 | Hide Tooltips on Hover – Clean Up Title Attributes Without Losing Accessibility | 98 | 1 | 2 | 4k+ | | | mismatched plugin name |
| #3456 | Hierarchical HTML Sitemap | 97 | 3 | 5 | 4k+ | | | Post Not In exclude |
| #3457 | HitPay Payment Gateway for WooCommerce | 98 | 2 | 2 | 4k+ | | | Non-prefixed class |
| #3458 | Hotfix | 86 | 11 | 8 | 4k+ | | | Deprecated class: services_json |
| #3459 | Houzez WooCommerce Addon | 58 | 22 | 21 | 4k+ | | | Missing Translators Comment |
| #3460 | html after URL | 97 | 3 | 2 | 4k+ | | | Missing direct file access protection |
| #3461 | Icon List Block – Add Icon-Based Lists with Custom Styles | 91 | 3 | 7 | 4k+ | | | Not In Footer |
| #3462 | Icon Widget | 66 | 14 | 9 | 4k+ | | | Output is not escaped |
| #3463 | Image Slider | 35 | 192 | 95 | 4k+ | | | Output is not escaped |
| #3464 | Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer | 30 | 80 | 434 | 4k+ | | | Interpolated SQL is not prepared |
| #3465 | Impressum | 89 | 50 | 12 | 4k+ | | | Short PHP open tag found |
| #3466 | Improved Save Button | 39 | 44 | 52 | 4k+ | | | Missing Translators Comment |
| #3467 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |
| #3468 | Include Me | 88 | 7 | 7 | 4k+ | | | Short PHP open tag found |
| #3469 | Correios Automático – Rastreio, Frete, Etiqueta, Declaração e Devolução | 40 | 32 | 56 | 4k+ | | | Non-prefixed global variable |
| #3470 | Intagrate Lite | 33 | 94 | 152 | 4k+ | | | date date |
| #3471 | Instapage Plugin | 35 | 220 | 45 | 4k+ | | | Output is not escaped |
| #3472 | Import WP – Export and Import CSV and XML files to WordPress | 22 | 580 | 330 | 4k+ | | | Exception output is not escaped |
| #3473 | JC Submenu | 38 | 279 | 32 | 4k+ | | | Output is not escaped |
| #3474 | JCH Optimize | 22 | 1,145 | 136 | 4k+ | | | Output is not escaped |
| #3475 | JetGridBuilder — Grid Builder for Elementor and Gutenberg | 39 | 414 | 40 | 4k+ | | | Text Domain Mismatch |
| #3476 | jQuery Lightbox For Native Galleries | 73 | 26 | 7 | 4k+ | | | Text Domain Mismatch |
| #3477 | Social Sharing Plugin – Kiwi | 41 | 23 | 80 | 4k+ | | | Non-prefixed global variable |
| #3478 | Korea SNS | 39 | 88 | 30 | 4k+ | | | Unsafe printing function |
| #3479 | Latest Post Shortcode | 98 | 5 | 6 | 4k+ | | | Non-prefixed constant |
| #3480 | Active Directory Integration / LDAP Integration | 100 | | 2 | 4k+ | | | Non-prefixed constant |
| #3481 | Leadster | 67 | 6 | 10 | 4k+ | | | Non-prefixed function |
| #3482 | Libro de Reclamaciones y Quejas | 36 | 266 | 124 | 4k+ | | | Text Domain Mismatch |
| #3483 | Lightbox Images for Divi Enhanced | 100 | | 0 | 4k+ | | | No open findings |
| #3484 | Like Button Rating ♥ LikeBtn | 23 | 1,231 | 617 | 4k+ | | | Unsafe printing function |
| #3485 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | | | Text Domain Mismatch |
| #3486 | Link Checker Pro | 71 | 6 | 25 | 4k+ | | | Non-prefixed function |
| #3487 | Link Widget Title | 66 | 22 | 5 | 4k+ | | | Output is not escaped |
| #3488 | LIQUID BLOCKS – Slider, Carousel, Accordion | 42 | 50 | 31 | 4k+ | | | Unsafe printing function |
| #3489 | LLMs.txt and LLMs-Full.txt Generator | 94 | 14 | 9 | 4k+ | | | Non-prefixed global variable |
| #3490 | Local Fonts Uploader – Upload & Host Any Font Locally for GDPR | 98 | 1 | 10 | 4k+ | | | Direct Query |
| #3491 | Login Security Solution | 27 | 216 | 154 | 4k+ | | | Output is not escaped |
| #3492 | LTR RTL Admin content | 96 | 4 | 5 | 4k+ | | | Missing Version |
| #3493 | MainWP Key Maker | 62 | 3 | 35 | 4k+ | | | Input is not sanitized |
| #3494 | Marker.io – Visual Website Feedback | 61 | 6 | 31 | 4k+ | | | Request data is not unslashed |
| #3495 | Marvy – Background Animations for Elementor | 55 | 63 | 34 | 4k+ | | | Text Domain Mismatch |
| #3496 | Media Library Downloader | 35 | 21 | 16 | 4k+ | | | Output is not escaped |
| #3497 | Media Search Enhanced | 75 | 4 | 23 | 4k+ | | | Non-prefixed hook name |
| #3498 | MediaPress | 23 | 904 | 583 | 4k+ | | | Output is not escaped |
| #3499 | Merge + Minify + Refresh | 33 | 78 | 26 | 4k+ | | | date date |
| #3500 | Microsoft Advertising Universal Event Tracking (UET) | 99 | 1 | 3 | 4k+ | | | trademarked term |