| #8601 | WP Change Default From Email | 65 | 51 | 7 | 10k+ | | | Non Singular String Literal Domain |
| #8602 | Embed Privacy | 35 | 10 | 41 | 10k+ | | | slow db query meta key |
| #8603 | Super Blank | 45 | 131 | 56 | 9k+ | | | Missing direct file access protection |
| #8604 | Variation Swatches for WooCommerce | 37 | 92 | 103 | 10k+ | | | Output is not escaped |
| #8605 | Super RSS Reader – Add attractive RSS Feed Widget | 76 | 24 | 5 | 10k+ | | | Output is not escaped |
| #8606 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | | | Output is not escaped |
| #8607 | Custom Add To Cart Button for WooCommerce | 86 | 11 | 3 | 10k+ | | | Output is not escaped |
| #8608 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | | | Non-prefixed global variable |
| #8609 | Directorist AddonsKit for Elementor | 96 | 4 | 33 | 10k+ | | | Non-prefixed global variable |
| #8610 | WP Server Health Stats | 39 | 66 | 31 | 10k+ | | | Output is not escaped |
| #8611 | Nginx Cache | 58 | 12 | 8 | 10k+ | | | Unsafe printing function |
| #8612 | Disable Lazy Load | 100 | | 1 | 10k+ | | | plugin header nonexistent domain path |
| #8613 | iyzico for WooCommerce | 42 | 34 | 54 | 10k+ | | | Unsafe printing function |
| #8614 | WPGraphQL Yoast SEO Addon | 95 | 42 | 13 | 10k+ | | | Text Domain Mismatch |
| #8615 | Envo's Templates & Widgets for Elementor and WooCommerce | 36 | 1,065 | 54 | 10k+ | | | Text Domain Mismatch |
| #8616 | WP Realtime Sitemap | 39 | 46 | 41 | 10k+ | | | Output is not escaped |
| #8617 | Product Labels For Woocommerce (Sale Badges) | 36 | 90 | 48 | 10k+ | | | Output is not escaped |
| #8618 | Metorik – Reports & Email Automation for WooCommerce | 37 | 75 | 70 | 10k+ | | | Output is not escaped |
| #8619 | Cookie-Script.com | 35 | 6 | 7 | 10k+ | | | Non-prefixed class |
| #8620 | YITH Infinite Scrolling | 32 | 387 | 1,417 | 10k+ | | | Non-prefixed global variable |
| #8621 | Mobile Contact Bar | 41 | 94 | 36 | 10k+ | | | Unsafe printing function |
| #8622 | Simple Admin Language Change | 98 | 4 | 2 | 10k+ | | | Missing direct file access protection |
| #8623 | Posts 2 Posts | 41 | 42 | 73 | 10k+ | | | Non Singular String Literal Domain |
| #8624 | WPS Bidouille | 28 | 472 | 215 | 10k+ | | | Output is not escaped |
| #8625 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #8626 | Flipbox – Awesomes Flip Boxes Image Overlay | 33 | 400 | 7,279 | 10k+ | | | Input is not validated |
| #8627 | Variation Price Display Range for WooCommerce | 100 | | 0 | 10k+ | | | No open findings |
| #8628 | Sidebar Login | 97 | 2 | 6 | 10k+ | | | Non-prefixed global variable |
| #8629 | Italy Cookie Choices (for EU Cookie Law & Cookie Notice) | 36 | 115 | 77 | 10k+ | | | Unsafe printing function |
| #8630 | Newpost Catch | 97 | 2 | 15 | 10k+ | | | Non-prefixed hook name |
| #8631 | Jetpack VaultPress | 28 | 71 | 362 | 10k+ | | | Missing nonce verification |
| #8632 | CLP Varnish Cache | 46 | 15 | 58 | 10k+ | | | Non-prefixed global variable |
| #8633 | Media Library Folders | 24 | 889 | 807 | 10k+ | | | Text Domain Mismatch |
| #8634 | Elementor Blocks for Gutenberg | 80 | 7 | 6 | 10k+ | | | Output is not escaped |
| #8635 | Genesis Columns Advanced | 55 | 26 | 4 | 10k+ | | | Unsafe printing function |
| #8636 | Recipe Card Blocks Lite | 29 | 151 | 408 | 10k+ | | | Non-prefixed global variable |
| #8637 | Events Tracker for Elementor | 96 | 4 | 10 | 10k+ | | | Non-prefixed constant |
| #8638 | Logos Reftagger | 75 | 12 | 15 | 10k+ | | | Deprecated parameter: add_option parameter 3 |
| #8639 | CryptX | 69 | 11 | 30 | 10k+ | | | Missing nonce verification |
| #8640 | WP Socializer – Simple & Easy Social Media Share Icons | 36 | 214 | 51 | 10k+ | | | Output is not escaped |
| #8641 | Iks Menu – WordPress Category Accordion Menu & FAQs | 23 | 615 | 1,293 | 10k+ | | | Non-prefixed global variable |
| #8642 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | | | badly named files |
| #8643 | Show/Hide Content at Set Time | 35 | 17 | 7 | 10k+ | | | date date |
| #8644 | WP Shortcode by MyThemeShop | 59 | 32 | 5 | 10k+ | | | Output is not escaped |
| #8645 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #8646 | Scroll Back To Top | 37 | 149 | 12 | 10k+ | | | Output is not escaped |
| #8647 | MotoPress Hotel Booking for Elementor | 84 | 3 | 19 | 10k+ | | | Non-prefixed global variable |
| #8648 | Disable Cart Fragments by Optimocha | 57 | 8 | 13 | 10k+ | | | Nonce verification recommended |
| #8649 | Contact Form 7 – Success Page Redirects | 65 | 5 | 15 | 10k+ | | | Input is not sanitized |
| #8650 | MilesWeb Tools | 95 | 4 | 49 | 10k+ | | | Non-prefixed global variable |