| #7551 | ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) | 69 | 511 | 51 | 4k+ | | | Text Domain Mismatch |
| #7552 | Simple CPT | 41 | 280 | 60 | 4k+ | | | Unsafe printing function |
| #7553 | Flexible Spacer Block | 54 | 34 | 15 | 4k+ | | | Unsafe printing function |
| #7554 | Exclude Image Thumbnails From UpdraftPlus Backups | 98 | 2 | 1 | 4k+ | | | no stable tag |
| #7555 | ThemeZee Magazine Blocks | 96 | 8 | 51 | 4k+ | | | Non-prefixed global variable |
| #7556 | SO Page Builder Animate | 99 | 2 | 0 | 4k+ | | | Missing direct file access protection |
| #7557 | Animated Text Block – Add Typing and Looping Text Effects | 78 | 5 | 25 | 4k+ | | | Non-prefixed class |
| #7558 | Classic Blog Grid | 99 | 1 | 0 | 4k+ | | | outdated tested upto header |
| #7559 | YITH WooCommerce Tab Manager | 31 | 395 | 1,429 | 4k+ | | | Non-prefixed global variable |
| #7560 | Ticket Tailor — Event Ticketing & Registration | 86 | 3 | 3 | 4k+ | | | Non Enqueued Script |
| #7561 | Impressum | 89 | 50 | 12 | 4k+ | | | Short PHP open tag found |
| #7562 | Free Assets Library – Openverse/Pixabay 600+ Million Images | 68 | 44 | 36 | 4k+ | | | Text Domain Mismatch |
| #7563 | Payment Button for PayPal | 36 | 155 | 86 | 4k+ | | | Unsafe printing function |
| #7564 | Automatic Cache Flusher for W3 Total Cache | 100 | 1 | 0 | 4k+ | | | Missing direct file access protection |
| #7565 | PeproDev Ultimate Invoice | 24 | 379 | 234 | 4k+ | | | Output is not escaped |
| #7566 | Notification for Telegram | 28 | 189 | 93 | 4k+ | | | Output is not escaped |
| #7567 | Coinbase Commerce Payment Gateway for WooCommerce | 94 | 21 | 5 | 4k+ | | | Missing Arg Domain |
| #7568 | BCM Duplicate Menu | 58 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #7569 | QR Redirector | 39 | 48 | 54 | 4k+ | | | Output is not escaped |
| #7570 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | | | Non-prefixed function |
| #7571 | WP GPX Maps | 35 | 27 | 100 | 4k+ | | | Non-prefixed global variable |
| #7572 | Microsoft Advertising Universal Event Tracking (UET) | 99 | 1 | 3 | 4k+ | | | trademarked term |
| #7573 | Restrict Widgets | 38 | 135 | 40 | 4k+ | | | Non Singular String Literal Domain |
| #7574 | Clicky by Yoast | 95 | 10 | 7 | 4k+ | | | Missing direct file access protection |
| #7575 | Admin Collapse Subpages | 82 | 4 | 12 | 4k+ | | | Nonce verification recommended |
| #7576 | Up2pay e-Transactions WooCommerce Payment Gateway | 31 | 459 | 175 | 4k+ | | | Text Domain Mismatch |
| #7577 | Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | 32 | 57 | 293 | 4k+ | | | Post Not In exclude |
| #7578 | HelloAsso | 60 | 132 | 89 | 4k+ | | | Short PHP open tag found |
| #7579 | which template file | 52 | 19 | 12 | 4k+ | | | Output is not escaped |
| #7580 | Specific Content For Mobile – Customize the mobile version without redirections | 40 | 26 | 155 | 4k+ | | | Nonce verification recommended |
| #7581 | Animate on Scroll | 89 | 2 | 4 | 4k+ | | | Input is not validated |
| #7582 | Like Button Rating ♥ LikeBtn | 23 | 1,231 | 617 | 4k+ | | | Unsafe printing function |
| #7583 | DX Delete Attached Media | 46 | 32 | 8 | 4k+ | | | Output is not escaped |
| #7584 | WP-Stateless – Google Cloud Storage | 24 | 1,036 | 482 | 4k+ | | | Non Singular String Literal Domain |
| #7585 | Podcast Importer SecondLine | 28 | 356 | 169 | 4k+ | | | Text Domain Mismatch |
| #7586 | Doneren met Mollie | 36 | 420 | 351 | 4k+ | | | SQL query is not prepared |
| #7587 | Disable Site | 50 | 26 | 3 | 4k+ | | | Output is not escaped |
| #7588 | CubeWP Framework | 35 | 114 | 71 | 4k+ | | | wp function not compatible with requires wp |
| #7589 | Reusable Content Blocks | 37 | 349 | 14 | 4k+ | | | Text Domain Mismatch |
| #7590 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | | | Text Domain Mismatch |
| #7591 | WP Telegram Widget and Join Link | 95 | 13 | 18 | 4k+ | | | Missing direct file access protection |
| #7592 | html after URL | 97 | 3 | 2 | 4k+ | | | Missing direct file access protection |
| #7593 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #7594 | Hotfix | 86 | 11 | 8 | 4k+ | | | Deprecated class: services_json |
| #7595 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | | | Text Domain Mismatch |
| #7596 | VikRentCar Car Rental Management System | 25 | 5,537 | 5,048 | 4k+ | | | Non-prefixed global variable |
| #7597 | ACF Autosize | 97 | 3 | 5 | 4k+ | | | Non-prefixed hook name |
| #7598 | Hosting Benchmark tool | 31 | 202 | 115 | 4k+ | | | rand rand |
| #7599 | WPUpper Share Buttons | 86 | 4 | 74 | 4k+ | | | Dynamic hook name |
| #7600 | Hierarchical HTML Sitemap | 97 | 3 | 5 | 4k+ | | | Post Not In exclude |