| #3551 | Redirect 404 to Home Page – Custom URL | 65 | 7 | 11 | 4k+ | | | Output is not escaped |
| #3552 | Rel Nofollow Checkbox | 97 | 9 | 1 | 4k+ | | | Missing Arg Domain |
| #3553 | Remember Me Controls | 98 | 4 | 3 | 4k+ | | | Not Allowed |
| #3554 | Remove Add to Cart WooCommerce | 20 | 616 | 1,378 | 4k+ | | | Non-prefixed global variable |
| #3555 | Responsive Gallery Grid | 40 | 90 | 14 | 4k+ | | | Output is not escaped |
| #3556 | Responsive Image Maps | 98 | 3 | 1 | 4k+ | | | Missing direct file access protection |
| #3557 | Responsive Tabs | 91 | 59 | 9 | 4k+ | | | Non Singular String Literal Domain |
| #3558 | Restrict Widgets | 38 | 135 | 40 | 4k+ | | | Non Singular String Literal Domain |
| #3559 | Reusable Content Blocks | 37 | 349 | 14 | 4k+ | | | Text Domain Mismatch |
| #3560 | Revisionize | 41 | 54 | 24 | 4k+ | | | Output is not escaped |
| #3561 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | | | Non-prefixed global variable |
| #3562 | RS CSV Importer Media Add-On | 35 | 4 | 1 | 4k+ | | | Hidden files included |
| #3563 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |
| #3564 | RSS for Yandex Zen | 37 | 240 | 100 | 4k+ | | | Unsafe printing function |
| #3565 | SamedayCourier Shipping | 29 | 336 | 269 | 4k+ | | | Non Singular String Literal Domain |
| #3566 | Scrollsequence – Cinematic Scroll Image Animation Plugin | 19 | 878 | 1,528 | 4k+ | | | Non-prefixed global variable |
| #3567 | BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript | 25 | 204 | 546 | 4k+ | | | Non-prefixed global variable |
| #3568 | Sensei LMS Certificates | 37 | 97 | 362 | 4k+ | | | Non-prefixed global variable |
| #3569 | Setmore Appointments | 44 | 45 | 13 | 4k+ | | | Output is not escaped |
| #3570 | Shared Files – File Upload & Download Manager | 39 | 5 | 184 | 4k+ | | | Nonce verification recommended |
| #3571 | FlexTable – Data Table Sync with Google Sheets | 35 | 20 | 78 | 4k+ | | | Direct Query |
| #3572 | Snippet Shortcodes | 38 | 359 | 133 | 4k+ | | | Non Singular String Literal Domain |
| #3573 | Shortcodes Finder | 100 | | 1 | 4k+ | | | Non-prefixed class |
| #3574 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #3575 | Simple CPT | 41 | 280 | 60 | 4k+ | | | Unsafe printing function |
| #3576 | Simple JWT Login – Allows you to use JWT on REST endpoints. | 38 | 712 | 95 | 4k+ | | | Output is not escaped |
| #3577 | Simple Login Lockdown | 69 | 13 | 6 | 4k+ | | | Output is not escaped |
| #3578 | Simple Mathjax | 69 | 29 | 3 | 4k+ | | | Short PHP open tag found |
| #3579 | Simple Membership WP user Import | 39 | 22 | 46 | 4k+ | | | Request data is not unslashed |
| #3580 | Simple Site Map Page | 81 | 9 | 1 | 4k+ | | | Output is not escaped |
| #3581 | Simple Universal Google Analytics | 78 | 11 | 0 | 4k+ | | | Output is not escaped |
| #3582 | Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management | 23 | 295 | 298 | 4k+ | | | Non-prefixed global variable |
| #3583 | Single Post Template | 62 | 14 | 8 | 4k+ | | | Text Domain Mismatch |
| #3584 | Image and video gallery from Google Drive | 97 | 15 | 1 | 4k+ | | | Missing direct file access protection |
| #3585 | SKT Themes Demo Import | 49 | 218 | 104 | 4k+ | | | Text Domain Mismatch |
| #3586 | Slider Pro | 28 | 583 | 527 | 4k+ | | | Unsafe printing function |
| #3587 | SO Page Builder Animate | 99 | 2 | 0 | 4k+ | | | Missing direct file access protection |
| #3588 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #3589 | Specia Companion | 99 | 7 | 0 | 4k+ | | | Missing direct file access protection |
| #3590 | Specific Content For Mobile – Customize the mobile version without redirections | 40 | 26 | 155 | 4k+ | | | Nonce verification recommended |
| #3591 | Speed Contact Bar | 42 | 53 | 20 | 4k+ | | | Output is not escaped |
| #3592 | Spice Social Share | 99 | 1 | 1 | 4k+ | | | Discouraged text-domain loading |
| #3593 | Spreadshop Plugin | 35 | 145 | 44 | 4k+ | | | wp function not compatible with requires wp |
| #3594 | Spreaker Shortcode | 95 | 23 | 3 | 4k+ | | | Text Domain Mismatch |
| #3595 | Statify Widget | 40 | 52 | 13 | 4k+ | | | Output is not escaped |
| #3596 | Change Storefront Footer Copyright Text | 74 | 71 | 21 | 4k+ | | | Text Domain Mismatch |
| #3597 | Storefront Product Sharing | 72 | 13 | 3 | 4k+ | | | Output is not escaped |
| #3598 | Support WebP – Upload webp files in wordpress without hassle | 99 | 1 | 3 | 4k+ | | | Discouraged text-domain loading |
| #3599 | Surge | 60 | 46 | 47 | 4k+ | | | Non-prefixed global variable |
| #3600 | SVG Block | 99 | | 6 | 4k+ | | | Non-prefixed hook name |