| #7101 | Add Featured Image Column | 96 | 1 | 1 | 3k+ | | | Nonce verification recommended |
| #7102 | Patreon WordPress | 31 | 276 | 339 | 3k+ | | | Output is not escaped |
| #7103 | Storefront Footer Bar | 91 | 6 | 2 | 3k+ | | | Missing Arg Domain |
| #7104 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #7105 | Travel Booking Toolkit | 30 | 245 | 324 | 3k+ | | | Non-prefixed global variable |
| #7106 | Related Products for WooCommerce | 70 | 12 | 12 | 3k+ | | | Setting is missing a sanitization callback |
| #7107 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | | | Non-prefixed global variable |
| #7108 | Siteready Coming Soon Under Construction | 76 | 6 | 30 | 3k+ | | | Non-prefixed global variable |
| #7109 | Better Business Reviews – Trustpilot WordPress Plugin | 85 | 4 | 7 | 3k+ | | | Output is not escaped |
| #7110 | WP Simple Adsense Insertion | 66 | 3 | 29 | 3k+ | | | Input is not validated |
| #7111 | SEO Auto Linker | 39 | 97 | 62 | 3k+ | | | Unsafe printing function |
| #7112 | WP Calameo | 95 | 16 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #7113 | No Shipping Message for WooCommerce | 100 | | 1 | 3k+ | | | trademarked term |
| #7114 | Gallery PhotoBlocks | 23 | 904 | 1,345 | 3k+ | | | Non-prefixed global variable |
| #7115 | Stickers for WooCommerce | 83 | 952 | 14 | 3k+ | | | wp function not compatible with requires wp |
| #7116 | Pressable Automated Migration | 62 | 15 | 23 | 3k+ | | | Output is not escaped |
| #7117 | Flexible Cookies | 97 | 5 | 39 | 3k+ | | | Non-prefixed global variable |
| #7118 | Verified Member for BuddyPress | 47 | 20 | 38 | 3k+ | | | Nonce verification recommended |
| #7119 | Surbma | Yoast SEO Breadcrumb Shortcode | 98 | 1 | 8 | 3k+ | | | trademarked term |
| #7120 | Seed Buddhist Year | 98 | 3 | 1 | 3k+ | | | Missing direct file access protection |
| #7121 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #7122 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #7123 | Mango Buttons | 59 | 14 | 21 | 3k+ | | | Output is not escaped |
| #7124 | Datafeedr Comparison Sets | 38 | 450 | 53 | 3k+ | | | Output is not escaped |
| #7125 | Simple Staff List | 39 | 90 | 236 | 3k+ | | | Non-prefixed global variable |
| #7126 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | | | Hidden files included |
| #7127 | AOS Animation for SiteOrigin Page Builder | 97 | 2 | 7 | 3k+ | | | Missing Version |
| #7128 | ACF: Google Font Selector | 39 | 57 | 45 | 3k+ | | | Output is not escaped |
| #7129 | CPO Content Types | 88 | 13 | 25 | 3k+ | | | Missing direct file access protection |
| #7130 | Subtitles | 86 | 4 | 9 | 3k+ | | | Non-prefixed hook name |
| #7131 | Hello Bar Popup Builder | 94 | 2 | 0 | 3k+ | | | Non Enqueued Script |
| #7132 | Easy Duplicate Product for WooCommerce | 84 | 7 | 8 | 3k+ | | | Missing direct file access protection |
| #7133 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #7134 | PJ News Ticker | 75 | 13 | 14 | 3k+ | | | Output is not escaped |
| #7135 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | | Text Domain Mismatch |
| #7136 | noindex SEO | 100 | | 0 | 3k+ | | | No open findings |
| #7137 | WP125 | 31 | 178 | 184 | 3k+ | | | Unsafe printing function |
| #7138 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #7139 | Wbcom Designs – Custom Font Uploader | 35 | 340 | 123 | 3k+ | | | Text Domain Mismatch |
| #7140 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #7141 | WP Posts Carousel | 40 | 199 | 12 | 3k+ | | | Unsafe printing function |
| #7142 | WP Attachments | 39 | 49 | 44 | 3k+ | | | Output is not escaped |
| #7143 | Restore Link Title Field | 98 | 4 | 0 | 3k+ | | | Missing Arg Domain |
| #7144 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #7145 | Card Elements for Elementor | 67 | 15 | 116 | 3k+ | | | Non-prefixed global variable |
| #7146 | WindPress – Tailwind CSS integration for WordPress | 71 | 16 | 106 | 3k+ | | | Non-prefixed hook name |
| #7147 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #7148 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | | Non-prefixed global variable |
| #7149 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | | Missing Translators Comment |
| #7150 | Ultimate Member – Online Users | 58 | 25 | 4 | 3k+ | | | Output is not escaped |