| #6851 | WP Media folders | 41 | 19 | 74 | 3k+ | | | Direct Query |
| #6852 | Ultimate Noindex Nofollow Tool II | 40 | 38 | 51 | 3k+ | | | Input is not validated |
| #6853 | WC City Select | 94 | 406 | 16 | 3k+ | | | Missing Arg Domain |
| #6854 | Sitekit | 35 | 122 | 8 | 3k+ | | | Output is not escaped |
| #6855 | Openpay Cards Plugin | 31 | 166 | 105 | 3k+ | | | Text Domain Mismatch |
| #6856 | Peter’s Post Notes | 36 | 224 | 102 | 3k+ | | | Output is not escaped |
| #6857 | Health Endpoint | 92 | 3 | 2 | 3k+ | | | Missing Arg Domain |
| #6858 | Random Content | 80 | 10 | 8 | 3k+ | | | Output is not escaped |
| #6859 | Multi-Carrier Shippo Shipping Rates & Address Validation for WooCommerce | 33 | 411 | 73 | 3k+ | | | Non Singular String Literal Domain |
| #6860 | Post Admin Word Count | 99 | 1 | 1 | 2k+ | | | Missing Version |
| #6861 | Image Uploader for Welcart | 42 | 27 | 24 | 3k+ | | | Output is not escaped |
| #6862 | Paytium: Mollie payment forms & donations | 26 | 506 | 551 | 3k+ | | | Unsafe printing function |
| #6863 | MakeCommerce for WooCommerce | 27 | 826 | 452 | 3k+ | | | Text Domain Mismatch |
| #6864 | Disable User Gravatar | 95 | 14 | 2 | 3k+ | | | wp function not compatible with requires wp |
| #6865 | Search Analytics for WP | 99 | 5 | 2 | 3k+ | | | wp function not compatible with requires wp |
| #6866 | G-Forms hCaptcha | 88 | 7 | 5 | 3k+ | | | Missing direct file access protection |
| #6867 | SMNTCS Custom Logo Link | 35 | 48 | 1 | 3k+ | | | badly named files |
| #6868 | Custom Post Exporter | 99 | 7 | 1 | 3k+ | | | Text Domain Mismatch |
| #6869 | Menu Swapper | 58 | 20 | 14 | 3k+ | | | Output is not escaped |
| #6870 | Select All Categories and Taxonomies, Change Checkbox to Radio Buttons | 40 | 116 | 30 | 3k+ | | | Output is not escaped |
| #6871 | Payment Forms for Paystack | 90 | 494 | 23 | 3k+ | | | Text Domain Mismatch |
| #6872 | Optin Forms – Simple List Building Plugin for WordPress | 37 | 647 | 22 | 3k+ | | | Output is not escaped |
| #6873 | Themeflection Numbers – Number Counter and Animated Numbers | 55 | 224 | 73 | 3k+ | | | Text Domain Mismatch |
| #6874 | More Sorting Options for WooCommerce | 61 | 27 | 17 | 3k+ | | | Output is not escaped |
| #6875 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #6876 | Expanding Archives | 54 | 37 | 9 | 3k+ | | | Output is not escaped |
| #6877 | Page Loader | 76 | 9 | 4 | 3k+ | | | Missing Version |
| #6878 | AppScenic – Smart AI Dropshipping | 70 | 16 | 41 | 3k+ | | | Dynamic hook name |
| #6879 | WP ADA Compliance Check Basic | 28 | 785 | 177 | 3k+ | | | Text Domain Mismatch |
| #6880 | Align Woo Buttons | 98 | 3 | 6 | 3k+ | | | Non-prefixed function |
| #6881 | Fresh Forms for Gravity | 96 | 7 | 6 | 3k+ | | | Non-prefixed constant |
| #6882 | Breadcrumb Block | 100 | | 0 | 3k+ | | | No open findings |
| #6883 | Custom Add to Cart Button Label and Link for WooCommerce | 36 | 371 | 112 | 3k+ | | | Text Domain Mismatch |
| #6884 | Responsive Select Menu | 58 | 29 | 27 | 3k+ | | | Output is not escaped |
| #6885 | Razorpay Quick Payments | 21 | 399 | 63 | 3k+ | | | Exception output is not escaped |
| #6886 | Responsive Slider | 40 | 28 | 15 | 3k+ | | | Output is not escaped |
| #6887 | Themify Event Post | 25 | 397 | 143 | 3k+ | | | Output is not escaped |
| #6888 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | | | Output is not escaped |
| #6889 | Gecka Submenu | 38 | 326 | 36 | 3k+ | | | Output is not escaped |
| #6890 | WP Post Redirect | 42 | 29 | 17 | 3k+ | | | Unsafe printing function |
| #6891 | QR Code Composer – Automatic QR Code Generator | 65 | 33 | 2 | 3k+ | | | Output is not escaped |
| #6892 | EnvoThemes Demo Import | 31 | 221 | 140 | 3k+ | | | Output is not escaped |
| #6893 | ShopEngine Gutenberg WooCommerce Builder Blocks Addon – All in One WooCommerce Solution | 80 | 424 | 735 | 3k+ | | | Non-prefixed global variable |
| #6894 | Simply Show IDs | 91 | 5 | 1 | 3k+ | | | Missing direct file access protection |
| #6895 | Payment Gateways by User Roles for WooCommerce | 99 | 1 | 7 | 3k+ | | | Non-prefixed hook name |
| #6896 | Post Type Transfer | 99 | 4 | 4 | 3k+ | | | Missing direct file access protection |
| #6897 | Events Search For The Events Calendar | 100 | | 2 | 3k+ | | | Non-prefixed class |
| #6898 | WordPress Beta Tester | 97 | 1 | 15 | 2k+ | | | Non-prefixed hook name |
| #6899 | Relative URL | 97 | 4 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #6900 | Ashe Extra | 38 | 109 | 54 | 3k+ | | | Text Domain Mismatch |