| #4551 | Easy Twitter Feeds – Embed Social Media Posts with Live Updates | 100 | | 0 | 2k+ | | | No open findings |
| #4552 | Easy UTM Tracking with Contact Form 7 | 85 | 3 | 10 | 2k+ | | | Input is not validated |
| #4553 | Easy WP Cleaner | 38 | 58 | 124 | 2k+ | | | Non-prefixed global variable |
| #4554 | Easyship WooCommerce Shipping Rates | 98 | 1 | 16 | 2k+ | | | Direct Query |
| #4555 | Eazy Enable Blogroll | 98 | 4 | 2 | 2k+ | | | Missing Arg Domain |
| #4556 | EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder | 23 | 355 | 1,541 | 2k+ | | | Non-prefixed global variable |
| #4557 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | | | Non-prefixed global variable |
| #4558 | Show IDs by Echo | 47 | 21 | 13 | 2k+ | | | Output is not escaped |
| #4559 | ECPay Ecommerce for WooCommerce | 29 | 248 | 370 | 2k+ | | | Missing nonce verification |
| #4560 | Edit Custom Fields | 96 | 10 | 19 | 2k+ | | | Direct Query |
| #4561 | ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount | 64 | 444 | 137 | 2k+ | | | Missing Arg Domain |
| #4562 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | | | Request data is not unslashed |
| #4563 | ELEX WooCommerce Role Based Pricing | 44 | 213 | 196 | 2k+ | | | Non-prefixed global variable |
| #4564 | Elfsight Blocks for Elementor — 80+ Widgets | 35 | 444 | 3 | 2k+ | | | Text Domain Mismatch |
| #4565 | Email Address Obfuscation | 99 | 3 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #4566 | Drip for WordPress | 76 | 11 | 7 | 2k+ | | | Missing direct file access protection |
| #4567 | Embed Iframe | 69 | 25 | 6 | 2k+ | | | wp function not compatible with requires wp |
| #4568 | Document Viewer – Embed and Display Office and PDF Files | 100 | | 0 | 2k+ | | | No open findings |
| #4569 | Embedly | 42 | 17 | 38 | 2k+ | | | Output is not escaped |
| #4570 | Emoji Settings | 88 | 4 | 5 | 2k+ | | | Input is not sanitized |
| #4571 | Emoji Toolbar | 99 | 1 | 0 | 2k+ | | | outdated tested upto header |
| #4572 | Enable Classic Editor & Widgets | 42 | 106 | 6 | 2k+ | | | Non Singular String Literal Domain |
| #4573 | Enable vCard Upload | 97 | 3 | 1 | 2k+ | | | outdated tested upto header |
| #4574 | Enhanced Category Pages | 55 | 23 | 25 | 2k+ | | | Direct Query |
| #4575 | EnvíaloSimple: Email Marketing y Newsletters | 35 | 147 | 250 | 2k+ | | | Nonce verification recommended |
| #4576 | Equivalent Mobile Redirect | 35 | 29 | 17 | 2k+ | | | Text Domain Mismatch |
| #4577 | Ergonet Cache | 90 | 3 | 2 | 2k+ | | | Output is not escaped |
| #4578 | PDF invoice for WP ERP | 58 | 96 | 134 | 2k+ | | | Non-prefixed global variable |
| #4579 | EU Cookie Law Compliance | 38 | 151 | 22 | 2k+ | | | Non Singular String Literal Domain |
| #4580 | GDPR Compliance for Mailchimp | 69 | 7 | 15 | 2k+ | | | Missing nonce verification |
| #4581 | Eupago Gateway For Woocommerce | 21 | 612 | 320 | 2k+ | | | Output is not escaped |
| #4582 | Events Block For The Events Calendar | 100 | | 2 | 2k+ | | | Non-prefixed class |
| #4583 | Events Calendar for Google | 84 | 13 | 8 | 2k+ | | | Missing direct file access protection |
| #4584 | Events Calendar Modules for Divi | 100 | | 2 | 2k+ | | | Non-prefixed class |
| #4585 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #4586 | Export Plugin Details | 73 | 13 | 6 | 2k+ | | | Output is not escaped |
| #4587 | WP All Export – User Export Add-On | 98 | 1 | 5 | 2k+ | | | trademarked term |
| #4588 | External Permalinks Redux | 92 | 9 | 8 | 2k+ | | | Non-prefixed hook name |
| #4589 | Falcon – WordPress Optimizations & Tweaks | 69 | 29 | 21 | 2k+ | | | Short PHP open tag found |
| #4590 | Fancy Comments WordPress | 34 | 359 | 39 | 2k+ | | | Unsafe printing function |
| #4591 | FAQ Schema – Accordion, Tab, Slider & Gutenberg Block | 40 | 253 | 46 | 2k+ | | | Output is not escaped |
| #4592 | افزونه پیامک حرفه ای فراز اس ام اس | 31 | 89 | 180 | 2k+ | | | wp function not compatible with requires wp |
| #4593 | Fast User Switching | 40 | 28 | 28 | 2k+ | | | Output is not escaped |
| #4594 | Faster Image Insert | 39 | 94 | 26 | 2k+ | | | Output is not escaped |
| #4595 | Favicon XT-Manager | 64 | 9 | 12 | 2k+ | | | Output is not escaped |
| #4596 | Featured Image Column | 83 | 12 | 2 | 2k+ | | | Output is not escaped |
| #4597 | Featured Image with URL | 99 | 1 | 0 | 2k+ | | | mismatched tested up to header |
| #4598 | FeedFocal | 63 | 16 | 6 | 2k+ | | | Unsafe printing function |
| #4599 | File Media Renamer | 42 | 16 | 42 | 2k+ | | | Input is not sanitized |
| #4600 | Filter for Divi | 99 | 2 | 0 | 2k+ | | | Missing direct file access protection |