| #8301 | Secondary Title | 40 | 117 | 31 | 7k+ | | | Unsafe printing function |
| #8302 | WP Fail2Ban Redux | 82 | 1 | 10 | 7k+ | | | trademarked term |
| #8303 | QuadLayers TikTok Feed | 47 | 78 | 52 | 7k+ | | | Text Domain Mismatch |
| #8304 | Maintenance Mode | 39 | 86 | 109 | 7k+ | | | Output is not escaped |
| #8305 | Easy Affiliate Links | 30 | 186 | 198 | 7k+ | | | Missing direct file access protection |
| #8306 | WP SAML Auth | 76 | 7 | 25 | 7k+ | | | Nonce verification recommended |
| #8307 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | | | Output is not escaped |
| #8308 | Get the Image | 84 | 8 | 8 | 7k+ | | | Non-prefixed hook name |
| #8309 | Plugin Load Filter | 40 | 76 | 112 | 7k+ | | | Text Domain Mismatch |
| #8310 | Gantry 5 Framework | 100 | | 0 | 7k+ | | | No open findings |
| #8311 | WPBakery Visual Composer & qTranslate-X | 98 | 2 | 3 | 7k+ | | | trademarked term |
| #8312 | Extra Fees for WooCommerce | 24 | 1,113 | 1,569 | 7k+ | | | Non-prefixed global variable |
| #8313 | TinyMCE Custom Styles | 39 | 297 | 76 | 7k+ | | | Non Singular String Literal Domain |
| #8314 | ParcelWILL (Formerly ParcelPanel) – Shipment Tracking, Tracking & Order Tracking for WooCommerce | 87 | 6 | 81 | 7k+ | | | Non-prefixed global variable |
| #8315 | Customizer Backup & Reset | 35 | 8 | 10 | 7k+ | | | Output is not escaped |
| #8316 | Payment Gateway of Stripe for WooCommerce | 94 | | 233 | 8k+ | | | Non-prefixed hook name |
| #8317 | Events Addon for Elementor | 23 | 779 | 1,339 | 7k+ | | | Non-prefixed global variable |
| #8318 | Themify Shortcodes | 35 | 36 | 16 | 7k+ | | | Output is not escaped |
| #8319 | Regions for WP Job Manager | 41 | 29 | 55 | 7k+ | | | Nonce verification recommended |
| #8320 | Mechanic Visitor Counter | 35 | 240 | 66 | 7k+ | | | Output is not escaped |
| #8321 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #8322 | Gutenverse Companion | 81 | 16 | 29 | 8k+ | | | Nonce verification recommended |
| #8323 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 8k+ | | | Text Domain Mismatch |
| #8324 | Listo | 98 | 4 | 0 | 7k+ | | | Missing direct file access protection |
| #8325 | Interlinks Manager – Internal Links Optimizer | 80 | 17 | 13 | 7k+ | | | Database parameter is not escaped |
| #8326 | aThemes Addons for Elementor | 90 | 13 | 96 | 8k+ | | | Non-prefixed global variable |
| #8327 | Flexible Posts Widget | 41 | 136 | 33 | 7k+ | | | Output is not escaped |
| #8328 | Analytics Germanized for Google Analytics (GDPR / DSGVO) | 40 | 49 | 14 | 7k+ | | | Output is not escaped |
| #8329 | Hover Effects – easily create any hover effect | 99 | | 9 | 8k+ | | | Non-prefixed global variable |
| #8330 | Media Library Enable Infinite Scrolling | 99 | 1 | 1 | 8k+ | | | Non-prefixed constant |
| #8331 | Faview – Virtual Reviews for WooCommerce | 97 | 3 | 19 | 7k+ | | | Non-prefixed constant |
| #8332 | JetWidgets for Elementor and WooCommerce | 33 | 187 | 146 | 7k+ | | | Text Domain Mismatch |
| #8333 | ShowID for Post/Page/Category/Tag/Comment | 97 | 5 | 1 | 8k+ | | | Missing direct file access protection |
| #8334 | Hreflang Manager – Hreflang Implementation for International SEO | 68 | 21 | 15 | 8k+ | | | wp function not compatible with requires wp |
| #8335 | Essential Real Estate | 23 | 529 | 5,060 | 8k+ | | | Non-prefixed global variable |
| #8336 | YayCurrency – WooCommerce Multi-Currency Switcher | 24 | 373 | 623 | 8k+ | | | Text Domain Mismatch |
| #8337 | WP Subscribe | 29 | 79 | 79 | 7k+ | | | Non-prefixed class |
| #8338 | Autologin Links | 38 | 73 | 74 | 8k+ | | | Output is not escaped |
| #8339 | Alx Extensions | 79 | 113 | 4 | 8k+ | | | Text Domain Mismatch |
| #8340 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #8341 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #8342 | Really Simple Click To Call Bar | 71 | 23 | 3 | 8k+ | | | Output is not escaped |
| #8343 | HivePress Favorites | 99 | 1 | 1 | 8k+ | | | missing composer json file |
| #8344 | Videojs HTML5 Player | 59 | 12 | 12 | 8k+ | | | Nonce verification recommended |
| #8345 | Product Catalog Feed by PixelYourSite | 22 | 581 | 357 | 8k+ | | | Output is not escaped |
| #8346 | Pods Beaver Themer Add-On | 100 | | 0 | 8k+ | | | No open findings |
| #8347 | Better WordPress Minify | 22 | 412 | 484 | 8k+ | | | Non Singular String Literal Domain |
| #8348 | Hide admin notices – Admin Notification Center | 36 | 114 | 67 | 8k+ | | | Output is not escaped |
| #8349 | Manual Image Crop | 40 | 178 | 61 | 8k+ | | | Output is not escaped |
| #8350 | Rename wp-admin login | 42 | 23 | 38 | 8k+ | | | Output is not escaped |