| #8701 | WP Font Awesome | 98 | 2 | 4 | 10k+ | | | trademarked term |
| #8702 | Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms | 22 | 493 | 295 | 10k+ | | | Text Domain Mismatch |
| #8703 | AI Translation For TranslatePress | 100 | | 0 | 10k+ | | | No open findings |
| #8704 | Customify | 95 | 1 | 101 | 10k+ | | | Non-prefixed global variable |
| #8705 | WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars | 24 | 861 | 1,573 | 10k+ | | | Non-prefixed global variable |
| #8706 | Search by SKU for Woocommerce | 69 | 13 | 10 | 10k+ | | | Direct Query |
| #8707 | OT Flatsome Vertical Menu | 35 | 126 | 26 | 10k+ | | | Text Domain Mismatch |
| #8708 | WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer | 98 | 2 | 12 | 10k+ | | | Non-prefixed class |
| #8709 | Disable Real MIME Check | 98 | 3 | 0 | 10k+ | | | Missing direct file access protection |
| #8710 | Japanese font for WordPress(Previously: Japanese Font for TinyMCE) | 35 | 11 | 37 | 10k+ | | | Non-prefixed global variable |
| #8711 | Social Icons | 38 | 72 | 83 | 10k+ | | | Output is not escaped |
| #8712 | Post to Google My Business (Google Business Profile) | 23 | 845 | 1,452 | 10k+ | | | Non-prefixed global variable |
| #8713 | Simple Full Screen Background Image | 44 | 23 | 13 | 10k+ | | | Output is not escaped |
| #8714 | RSS Includes Pages | 78 | 4 | 8 | 10k+ | | | Output is not escaped |
| #8715 | WordPress REST API (Version 2) | 82 | 476 | 13 | 10k+ | | | Missing Arg Domain |
| #8716 | WPvivid Backup for MainWP | 25 | 818 | 1,794 | 10k+ | | | Missing nonce verification |
| #8717 | Custom Icons for Elementor and WPBakery | 74 | 35 | 38 | 10k+ | | | Non-prefixed global variable |
| #8718 | Cresta Help Chat | 80 | 6 | 6 | 10k+ | | | Output is not escaped |
| #8719 | Meta Field Block – Display custom fields in the Block Editor without coding | 97 | 1 | 11 | 10k+ | | | Non-prefixed hook name |
| #8720 | Legal Text Connector of the IT-Recht Kanzlei | 36 | 45 | 46 | 10k+ | | | Exception output is not escaped |
| #8721 | Responsive Lightbox | 41 | 68 | 10 | 10k+ | | | Output is not escaped |
| #8722 | Admin Notices Manager | 96 | 70 | 3 | 10k+ | | | Missing Arg Domain |
| #8723 | Gmap Block | 99 | 1 | 0 | 10k+ | | | outdated tested upto header |
| #8724 | Sticky Buttons – Floating Buttons Builder | 97 | 2 | 108 | 10k+ | | | Non-prefixed global variable |
| #8725 | Cyclone Demo Importer | 26 | 1,778 | 448 | 10k+ | | | Text Domain Mismatch |
| #8726 | Mongoose Page Plugin | 92 | 4 | 17 | 10k+ | | | Non-prefixed global variable |
| #8727 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | | | Non-prefixed class |
| #8728 | Bellows Accordion Menu | 37 | 160 | 28 | 10k+ | | | Text Domain Mismatch |
| #8729 | Gravity Forms Email Blacklist | 98 | 2 | 4 | 10k+ | | | trademarked term |
| #8730 | Products Per Page for WooCommerce | 52 | 22 | 28 | 10k+ | | | Output is not escaped |
| #8731 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #8732 | YaMaps for WordPress Plugin | 64 | 21 | 30 | 10k+ | | | Non-prefixed global variable |
| #8733 | Header Footer for Beaver Builder | 39 | 39 | 31 | 10k+ | | | Output is not escaped |
| #8734 | Passster – Password Protect Pages and Content | 22 | 539 | 1,419 | 10k+ | | | Non-prefixed global variable |
| #8735 | Popup Trigger URL for Elementor Pro | 86 | 2 | 4 | 10k+ | | | Nonce verification recommended |
| #8736 | WP Author, Date and Meta Remover | 97 | 4 | 3 | 10k+ | | | trademarked term |
| #8737 | Related Posts Flatsome | 88 | 24 | 4 | 10k+ | | | Text Domain Mismatch |
| #8738 | Use Google Libraries | 35 | 13 | 5 | 10k+ | | | Hidden files included |
| #8739 | WP Subtitle | 81 | 7 | 33 | 10k+ | | | Non-prefixed hook name |
| #8740 | WP Missed Schedule Posts | 87 | 7 | 9 | 10k+ | | | trademarked term |
| #8741 | WP Last Login | 98 | 2 | 4 | 10k+ | | | trademarked term |
| #8742 | Multiple Domain | 41 | 42 | 17 | 10k+ | | | Output is not escaped |
| #8743 | Public Post Preview Configurator | 84 | 14 | 6 | 10k+ | | | Non Singular String Literal Domain |
| #8744 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |
| #8745 | Optima Express IDX | 34 | 71 | 237 | 10k+ | | | Non-prefixed class |
| #8746 | Current Year, Symbols and IP Shortcode | 96 | 76 | 0 | 10k+ | | | wp function not compatible with requires wp |
| #8747 | HTML Forms – Simple WordPress Forms Plugin | 36 | 231 | 166 | 10k+ | | | Output is not escaped |
| #8748 | Delete Pending Comments | 57 | 16 | 11 | 10k+ | | | Unsafe printing function |
| #8749 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #8750 | GDPR | 77 | 39 | 121 | 10k+ | | | Non-prefixed global variable |