| #7051 | AboveWP Bulgarian Eurozone | 81 | 10 | 8 | 3k+ | | | Output is not escaped |
| #7052 | Twenty Eleven Theme Extensions | 38 | 35 | 30 | 3k+ | | | Output is not escaped |
| #7053 | Announcement Bar | 38 | 192 | 61 | 3k+ | | | Non Singular String Literal Domain |
| #7054 | Add Featured Image Column | 96 | 1 | 1 | 3k+ | | | Nonce verification recommended |
| #7055 | Patreon WordPress | 31 | 276 | 339 | 3k+ | | | Output is not escaped |
| #7056 | Storefront Footer Bar | 91 | 6 | 2 | 3k+ | | | Missing Arg Domain |
| #7057 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #7058 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #7059 | Related Products for WooCommerce | 70 | 12 | 12 | 3k+ | | | Setting is missing a sanitization callback |
| #7060 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | | | Non-prefixed global variable |
| #7061 | Siteready Coming Soon Under Construction | 76 | 6 | 30 | 3k+ | | | Non-prefixed global variable |
| #7062 | Better Business Reviews – Trustpilot WordPress Plugin | 85 | 4 | 7 | 3k+ | | | Output is not escaped |
| #7063 | WP Simple Adsense Insertion | 66 | 3 | 29 | 3k+ | | | Input is not validated |
| #7064 | SEO Auto Linker | 39 | 97 | 62 | 3k+ | | | Unsafe printing function |
| #7065 | WP Calameo | 95 | 16 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #7066 | No Shipping Message for WooCommerce | 100 | | 1 | 3k+ | | | trademarked term |
| #7067 | Gallery PhotoBlocks | 23 | 904 | 1,345 | 3k+ | | | Non-prefixed global variable |
| #7068 | Stickers for WooCommerce | 83 | 952 | 14 | 3k+ | | | wp function not compatible with requires wp |
| #7069 | Pressable Automated Migration | 62 | 15 | 23 | 3k+ | | | Output is not escaped |
| #7070 | Flexible Cookies | 97 | 5 | 39 | 3k+ | | | Non-prefixed global variable |
| #7071 | Verified Member for BuddyPress | 47 | 20 | 38 | 3k+ | | | Nonce verification recommended |
| #7072 | Surbma | Yoast SEO Breadcrumb Shortcode | 98 | 1 | 8 | 3k+ | | | trademarked term |
| #7073 | Seed Buddhist Year | 98 | 3 | 1 | 3k+ | | | Missing direct file access protection |
| #7074 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #7075 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #7076 | Mango Buttons | 59 | 14 | 21 | 3k+ | | | Output is not escaped |
| #7077 | Datafeedr Comparison Sets | 38 | 450 | 53 | 3k+ | | | Output is not escaped |
| #7078 | Simple Staff List | 39 | 90 | 236 | 3k+ | | | Non-prefixed global variable |
| #7079 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | | | Hidden files included |
| #7080 | AOS Animation for SiteOrigin Page Builder | 97 | 2 | 7 | 3k+ | | | Missing Version |
| #7081 | ACF: Google Font Selector | 39 | 57 | 45 | 3k+ | | | Output is not escaped |
| #7082 | CPO Content Types | 88 | 13 | 25 | 3k+ | | | Missing direct file access protection |
| #7083 | Subtitles | 86 | 4 | 9 | 3k+ | | | Non-prefixed hook name |
| #7084 | Hello Bar Popup Builder | 94 | 2 | 0 | 3k+ | | | Non Enqueued Script |
| #7085 | Easy Duplicate Product for WooCommerce | 84 | 7 | 8 | 3k+ | | | Missing direct file access protection |
| #7086 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #7087 | PJ News Ticker | 75 | 13 | 14 | 3k+ | | | Output is not escaped |
| #7088 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | | Text Domain Mismatch |
| #7089 | noindex SEO | 100 | | 0 | 3k+ | | | No open findings |
| #7090 | WP125 | 31 | 178 | 184 | 3k+ | | | Unsafe printing function |
| #7091 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #7092 | Wbcom Designs – Custom Font Uploader | 35 | 340 | 123 | 3k+ | | | Text Domain Mismatch |
| #7093 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #7094 | WP Posts Carousel | 40 | 199 | 12 | 3k+ | | | Unsafe printing function |
| #7095 | WP Attachments | 39 | 49 | 44 | 3k+ | | | Output is not escaped |
| #7096 | Restore Link Title Field | 98 | 4 | 0 | 3k+ | | | Missing Arg Domain |
| #7097 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #7098 | Card Elements for Elementor | 67 | 15 | 116 | 3k+ | | | Non-prefixed global variable |
| #7099 | WindPress – Tailwind CSS integration for WordPress | 71 | 16 | 106 | 3k+ | | | Non-prefixed hook name |
| #7100 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |