| #7501 | Podlove Web Player | 97 | 8 | 4 | 4k+ | | | Missing direct file access protection |
| #7502 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #7503 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | | | Output is not escaped |
| #7504 | LIQUID BLOCKS – Slider, Carousel, Accordion | 42 | 50 | 31 | 4k+ | | | Unsafe printing function |
| #7505 | Single Post Template | 62 | 14 | 8 | 4k+ | | | Text Domain Mismatch |
| #7506 | Gridable | 100 | | 0 | 4k+ | | | No open findings |
| #7507 | WP Twitter Auto Publish | 33 | 442 | 171 | 4k+ | | | Output is not escaped |
| #7508 | WP Hyper Response | 96 | 6 | 2 | 4k+ | | | trademarked term |
| #7509 | GS Portfolio for Envato | 37 | 155 | 75 | 4k+ | | | Text Domain Mismatch |
| #7510 | Ele Conditions for Elementor | 35 | 2 | 7 | 4k+ | | | Request data is not unslashed |
| #7511 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | | | Unsafe printing function |
| #7512 | Wenprise Pinyin Slug | 52 | 30 | 34 | 4k+ | | | Text Domain Mismatch |
| #7513 | JC Submenu | 38 | 279 | 32 | 4k+ | | | Output is not escaped |
| #7514 | Equalweb Accessibility | 62 | 21 | 5 | 4k+ | | | Output is not escaped |
| #7515 | Spreadshop Plugin | 35 | 145 | 44 | 4k+ | | | wp function not compatible with requires wp |
| #7516 | Media Library Downloader | 35 | 21 | 16 | 4k+ | | | Output is not escaped |
| #7517 | Album Gallery for Flickr | 100 | | 1 | 4k+ | | | mismatched plugin name |
| #7518 | Airwallex Online Payments Gateway | 95 | 2 | 2 | 4k+ | | | Nonce verification recommended |
| #7519 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 4k+ | | | Non-prefixed global variable |
| #7520 | Perfecty Push Notifications | 35 | 204 | 213 | 4k+ | | | SQL query is not prepared |
| #7521 | Product Blocks for WooCommerce | 35 | 4 | 3 | 4k+ | | | slow db query tax query |
| #7522 | Ads.txt Manager | 61 | 33 | 16 | 4k+ | | | Text Domain Mismatch |
| #7523 | Cities Shipping Zones for WooCommerce | 42 | 94 | 44 | 4k+ | | | Text Domain Mismatch |
| #7524 | Simple Membership WP user Import | 39 | 22 | 46 | 4k+ | | | Request data is not unslashed |
| #7525 | MultiStep Checkout for WooCommerce | 60 | 46 | 57 | 4k+ | | | Non Singular String Literal Text |
| #7526 | Push Notifications by LaraPush | 35 | 32 | 76 | 5k+ | | | Non-prefixed global variable |
| #7527 | Link Checker Pro | 71 | 6 | 25 | 4k+ | | | Non-prefixed function |
| #7528 | Document Library Lite | 34 | 149 | 85 | 4k+ | | | Text Domain Mismatch |
| #7529 | Block List Updater | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #7530 | Fix Image Rotation | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #7531 | SamedayCourier Shipping | 29 | 336 | 269 | 4k+ | | | Non Singular String Literal Domain |
| #7532 | Translation with DeepL API | 99 | 1 | 1 | 4k+ | | | outdated tested upto header |
| #7533 | BBSpoiler | 95 | 5 | 7 | 4k+ | | | Missing Version |
| #7534 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | | | Non-prefixed hook name |
| #7535 | Simple Registration for WooCommerce | 40 | 27 | 55 | 4k+ | | | Missing nonce verification |
| #7536 | ThemeinWP Import Companion | 56 | 17 | 14 | 4k+ | | | Unsafe printing function |
| #7537 | Better Plugin Compatibility Control | 35 | 7 | 4 | 4k+ | | | trademarked term |
| #7538 | Herzog Dupont for YOOtheme Pro | 34 | 477 | 233 | 4k+ | | | Output is not escaped |
| #7539 | Audio Album | 99 | 2 | 1 | 4k+ | | | Discouraged text-domain loading |
| #7540 | Simple Login Lockdown | 69 | 13 | 6 | 4k+ | | | Output is not escaped |
| #7541 | Fable Extra | 32 | 79 | 282 | 4k+ | | | Non-prefixed global variable |
| #7542 | Marker.io – Visual Website Feedback | 61 | 6 | 31 | 4k+ | | | Request data is not unslashed |
| #7543 | Lightbox Images for Divi Enhanced | 100 | | 0 | 4k+ | | | No open findings |
| #7544 | Telephone field for Elementor Forms | 94 | 115 | 6 | 4k+ | | | wp function not compatible with requires wp |
| #7545 | Login Security Solution | 27 | 216 | 154 | 4k+ | | | Output is not escaped |
| #7546 | oEmbed Plus | 98 | 3 | 1 | 4k+ | | | Missing direct file access protection |
| #7547 | WP Anti-Clickjack | 66 | 4 | 42 | 4k+ | | | Nonce verification recommended |
| #7548 | BuddyPress Xprofile Custom Field Types | 41 | 39 | 189 | 4k+ | | | Missing nonce verification |
| #7549 | Social Media Icon Widget – Social Profile Links with Gutenberg Block | 94 | 1 | 2 | 4k+ | | | Output is not escaped |
| #7550 | Include Me | 88 | 7 | 7 | 4k+ | | | Short PHP open tag found |