| #7201 | Surbma | Yoast SEO Breadcrumb Shortcode | 98 | 1 | 8 | 3k+ | | | trademarked term |
| #7202 | Seed Buddhist Year | 98 | 3 | 1 | 3k+ | | | Missing direct file access protection |
| #7203 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #7204 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #7205 | Mango Buttons | 59 | 14 | 21 | 3k+ | | | Output is not escaped |
| #7206 | Datafeedr Comparison Sets | 38 | 450 | 53 | 3k+ | | | Output is not escaped |
| #7207 | Simple Staff List | 39 | 90 | 236 | 3k+ | | | Non-prefixed global variable |
| #7208 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | | | Hidden files included |
| #7209 | AOS Animation for SiteOrigin Page Builder | 97 | 2 | 7 | 3k+ | | | Missing Version |
| #7210 | ACF: Google Font Selector | 39 | 57 | 45 | 3k+ | | | Output is not escaped |
| #7211 | CPO Content Types | 88 | 13 | 25 | 3k+ | | | Missing direct file access protection |
| #7212 | Subtitles | 86 | 4 | 9 | 3k+ | | | Non-prefixed hook name |
| #7213 | Hello Bar Popup Builder | 94 | 2 | 0 | 3k+ | | | Non Enqueued Script |
| #7214 | Easy Duplicate Product for WooCommerce | 84 | 7 | 8 | 3k+ | | | Missing direct file access protection |
| #7215 | SMTP for Amazon SES – YaySMTP | 30 | 197 | 122 | 3k+ | | | Exception output is not escaped |
| #7216 | PJ News Ticker | 75 | 13 | 14 | 3k+ | | | Output is not escaped |
| #7217 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | | | Text Domain Mismatch |
| #7218 | noindex SEO | 100 | | 0 | 3k+ | | | No open findings |
| #7219 | WP125 | 31 | 178 | 184 | 3k+ | | | Unsafe printing function |
| #7220 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #7221 | Wbcom Designs – Custom Font Uploader | 35 | 340 | 123 | 3k+ | | | Text Domain Mismatch |
| #7222 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #7223 | WP Posts Carousel | 40 | 199 | 12 | 3k+ | | | Unsafe printing function |
| #7224 | WP Attachments | 39 | 49 | 44 | 3k+ | | | Output is not escaped |
| #7225 | Restore Link Title Field | 98 | 4 | 0 | 3k+ | | | Missing Arg Domain |
| #7226 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #7227 | Card Elements for Elementor | 67 | 15 | 116 | 3k+ | | | Non-prefixed global variable |
| #7228 | WindPress – Tailwind CSS integration for WordPress | 71 | 16 | 106 | 3k+ | | | Non-prefixed hook name |
| #7229 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #7230 | zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce | 30 | 121 | 265 | 3k+ | | | Non-prefixed global variable |
| #7231 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | | Missing Translators Comment |
| #7232 | Ultimate Member – Online Users | 58 | 25 | 4 | 3k+ | | | Output is not escaped |
| #7233 | Text Replace | 41 | 55 | 12 | 3k+ | | | Output is not escaped |
| #7234 | NS Remove Related Products for WooCommerce | 42 | 95 | 43 | 3k+ | | | Output is not escaped |
| #7235 | Pure Chat – Live Chat & More! | 98 | 4 | 6 | 3k+ | | | error log error log |
| #7236 | Elfsight Blocks | 98 | 3 | 2 | 3k+ | | | Not In Footer |
| #7237 | CallTrackingMetrics | 21 | 923 | 286 | 3k+ | | | Unsafe printing function |
| #7238 | Aquila Admin Theme | 35 | 151 | 329 | 3k+ | | | Non-prefixed global variable |
| #7239 | Maintenance & Coming Soon Redirect Animation | 99 | 1 | 1 | 3k+ | | | Non-prefixed constant |
| #7240 | Duo Two-Factor Authentication | 37 | 44 | 61 | 3k+ | | | Missing nonce verification |
| #7241 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | | | Text Domain Mismatch |
| #7242 | Place Order Without Payment for WooCommerce | 72 | 244 | 62 | 3k+ | | | Text Domain Mismatch |
| #7243 | Social Share for WooCommerce | 100 | | 2 | 3k+ | | | Non-prefixed class |
| #7244 | Live Chat with Messenger Customer Chat | 65 | 10 | 23 | 3k+ | | | Input is not sanitized |
| #7245 | Disqus Conditional Load | 41 | 38 | 14 | 3k+ | | | Output is not escaped |
| #7246 | Expire User Passwords | 35 | 3 | 15 | 3k+ | | | Nonce verification recommended |
| #7247 | Responder | 29 | 77 | 185 | 3k+ | | | Non-prefixed global variable |
| #7248 | Advanced WooCommerce Product Gallery Slider | 40 | 42 | 48 | 3k+ | | | Non-prefixed global variable |
| #7249 | WP Go Maps Block | 98 | 1 | 10 | 3k+ | | | Not In Footer |
| #7250 | WooCommerce Product Image Flipper | 97 | 3 | 5 | 3k+ | | | trademarked term |