| #8251 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | 24 | 91 | 1,725 | 7k+ | | | Non-prefixed hook name |
| #8252 | Crazy Egg | 84 | 12 | 1 | 7k+ | | | wp function not compatible with requires wp |
| #8253 | Redirector | 40 | 48 | 32 | 7k+ | | | Output is not escaped |
| #8254 | Contact Form Clean and Simple | 98 | 2 | 3 | 7k+ | | | Non-prefixed class |
| #8255 | ReOrder Posts within Categories | 35 | 39 | 207 | 7k+ | | | Non-prefixed global variable |
| #8256 | Custom 404 Pro | 35 | 50 | 27 | 7k+ | | | wp function not compatible with requires wp |
| #8257 | reCaptcha Add-On for FormCraft | 85 | 4 | 16 | 7k+ | | | Missing Version |
| #8258 | Swift SMTP (formerly Welcome Email Editor) | 51 | 12 | 62 | 7k+ | | | Missing nonce verification |
| #8259 | Full Background Manager | 40 | 37 | 24 | 7k+ | | | Output is not escaped |
| #8260 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #8261 | Scripts To Footer | 35 | 13 | 2 | 7k+ | | | Text Domain Mismatch |
| #8262 | Blaze Ads – Fully Integrated Ads Solution | 99 | 1 | 2 | 7k+ | | | Non-prefixed global variable |
| #8263 | Paysera Payment Gateway for WooCommerce | 21 | 1,866 | 195 | 7k+ | | | Exception output is not escaped |
| #8264 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | | | Direct Query |
| #8265 | Who Stole the Text Justify Button ?! | 98 | 1 | 3 | 7k+ | | | Non-prefixed function |
| #8266 | Gmedia Photo Gallery | 23 | 350 | 1,121 | 7k+ | | | Non-prefixed global variable |
| #8267 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #8268 | Schema App Structured Data | 38 | 35 | 86 | 7k+ | | | Nonce verification recommended |
| #8269 | Pre-Orders for WooCommerce | 30 | 568 | 261 | 7k+ | | | Output is not escaped |
| #8270 | HivePress Reviews | 90 | 5 | 11 | 7k+ | | | Non-prefixed global variable |
| #8271 | HivePress Messages | 90 | 7 | 10 | 7k+ | | | Direct Query |
| #8272 | Last Modified Timestamp | 87 | 9 | 3 | 7k+ | | | Output is not escaped |
| #8273 | RSS Feed Retriever | 61 | 23 | 8 | 7k+ | | | wp function not compatible with requires wp |
| #8274 | Theme Test Drive | 43 | 39 | 16 | 7k+ | | | Output is not escaped |
| #8275 | Mystery Themes Demo Importer | 95 | | 76 | 7k+ | | | Non-prefixed global variable |
| #8276 | Definitely allow mobile zooming | 100 | 1 | 0 | 7k+ | | | Missing direct file access protection |
| #8277 | KIA Subtitle | 51 | 21 | 19 | 7k+ | | | Non-prefixed global variable |
| #8278 | Cryptocurrency Widgets – Price Ticker & Coins List | 92 | 4 | 36 | 7k+ | | | Non-prefixed global variable |
| #8279 | Integration for Elementor forms – Sendinblue | 65 | 94 | 56 | 7k+ | | | Text Domain Mismatch |
| #8280 | Delete Me | 40 | 116 | 17 | 7k+ | | | Output is not escaped |
| #8281 | If-So Dynamic Content – Elementor & All Page Builders Personalization | 21 | 889 | 725 | 7k+ | | | Unsafe printing function |
| #8282 | AdOpt | Easy Multi-Regulations Cookie Banner. | 69 | 22 | 27 | 7k+ | | | Missing direct file access protection |
| #8283 | FAQ Schema For Pages And Posts | 81 | 56 | 5 | 7k+ | | | Text Domain Mismatch |
| #8284 | Comment Link Remove and Other Comment Tools | 27 | 691 | 132 | 7k+ | | | Text Domain Mismatch |
| #8285 | Secondary Title | 40 | 117 | 31 | 7k+ | | | Unsafe printing function |
| #8286 | WP Fail2Ban Redux | 82 | 1 | 10 | 7k+ | | | trademarked term |
| #8287 | QuadLayers TikTok Feed | 47 | 78 | 52 | 7k+ | | | Text Domain Mismatch |
| #8288 | Maintenance Mode | 39 | 86 | 109 | 7k+ | | | Output is not escaped |
| #8289 | Easy Affiliate Links | 30 | 186 | 198 | 7k+ | | | Missing direct file access protection |
| #8290 | WP SAML Auth | 76 | 7 | 25 | 7k+ | | | Nonce verification recommended |
| #8291 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | | | Output is not escaped |
| #8292 | Get the Image | 84 | 8 | 8 | 7k+ | | | Non-prefixed hook name |
| #8293 | Plugin Load Filter | 40 | 76 | 112 | 7k+ | | | Text Domain Mismatch |
| #8294 | Gantry 5 Framework | 100 | | 0 | 7k+ | | | No open findings |
| #8295 | WPBakery Visual Composer & qTranslate-X | 98 | 2 | 3 | 7k+ | | | trademarked term |
| #8296 | Extra Fees for WooCommerce | 24 | 1,113 | 1,569 | 7k+ | | | Non-prefixed global variable |
| #8297 | TinyMCE Custom Styles | 39 | 297 | 76 | 7k+ | | | Non Singular String Literal Domain |
| #8298 | ParcelWILL (Formerly ParcelPanel) – Shipment Tracking, Tracking & Order Tracking for WooCommerce | 87 | 6 | 81 | 7k+ | | | Non-prefixed global variable |
| #8299 | Customizer Backup & Reset | 35 | 8 | 10 | 7k+ | | | Output is not escaped |
| #8300 | Payment Gateway of Stripe for WooCommerce | 94 | | 233 | 8k+ | | | Non-prefixed hook name |