| #8751 | WP Sticky Sidebar – Floating Sidebar On Scroll for Any Theme | 36 | 93 | 84 | 10k+ | | | Non-prefixed global variable |
| #8752 | Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file | 95 | 11 | 15 | 9k+ | | | Non-prefixed global variable |
| #8753 | Web Push Notifications – Webpushr | 31 | 169 | 293 | 10k+ | | | Output is not escaped |
| #8754 | Show Pages IDs | 74 | 8 | 8 | 10k+ | | | Output is not escaped |
| #8755 | Style Kits for Elementor | 98 | 2 | 15 | 10k+ | | | Non-prefixed constant |
| #8756 | weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce | 29 | 276 | 68 | 10k+ | | | Missing direct file access protection |
| #8757 | Parent Category Toggler | 91 | 6 | 0 | 10k+ | | | Missing direct file access protection |
| #8758 | Query Monitor | 31 | 44 | 273 | 200k+ | | | Non-prefixed class |
| #8759 | Tiny Yardage Calculator | 72 | 23 | 1 | 300 | | | Output is not escaped |
| #8760 | Hester Core | 27 | 253 | 103 | 10k+ | | | Output is not escaped |
| #8761 | Currency Switcher for WooCommerce | 32 | 357 | 263 | 10k+ | | | Text Domain Mismatch |
| #8762 | Multiple Columns for Gravity Forms | 90 | 11 | 7 | 10k+ | | | Missing direct file access protection |
| #8763 | Shortcake (Shortcode UI) | 35 | 9 | 39 | 10k+ | | | Request data is not unslashed |
| #8764 | OpenID Connect Generic Client | 73 | 9 | 59 | 10k+ | | | Non-prefixed hook name |
| #8765 | WP Content Copy Protection | 35 | 76 | 11 | 10k+ | | | Text Domain Mismatch |
| #8766 | Simple Login Captcha | 70 | 20 | 19 | 10k+ | | | date date |
| #8767 | Lightweight Accordion | 91 | 4 | 3 | 10k+ | | | Non-prefixed function |
| #8768 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | | | Input is not sanitized |
| #8769 | Clicky Analytics | 33 | 166 | 92 | 10k+ | | | Output is not escaped |
| #8770 | Meks ThemeForest Smart Widget | 79 | 12 | 4 | 10k+ | | | Output is not escaped |
| #8771 | Bricksable for Bricks Builder | 80 | 1 | 76 | 10k+ | | | Post Not In exclude |
| #8772 | Ultimate Maps by Supsystic | 24 | 1,034 | 374 | 10k+ | | | Non Singular String Literal Domain |
| #8773 | WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping | 97 | 1 | 7 | 10k+ | | | trademarked term |
| #8774 | Maintenance Redirect | 38 | 244 | 132 | 10k+ | | | Missing Arg Domain |
| #8775 | Modal Window – create popup modal window | 40 | 4 | 170 | 10k+ | | | Non-prefixed global variable |
| #8776 | Disable WP Sitemaps | 99 | | 4 | 10k+ | | | trademarked term |
| #8777 | Shiprocket | 85 | 56 | 15 | 10k+ | | | Text Domain Mismatch |
| #8778 | ACF Field For CF7 | 99 | 1 | 0 | 10k+ | | | outdated tested upto header |
| #8779 | Announcer – Sticky Message Banner & Notification Bar | 41 | 110 | 27 | 10k+ | | | Output is not escaped |
| #8780 | Password Strength Settings for WooCommerce | 89 | 17 | 6 | 10k+ | | | Missing Arg Domain |
| #8781 | Social Snap — Social Share Buttons & Click to Tweet | 38 | 6 | 169 | 10k+ | | | Direct Query |
| #8782 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | | Text Domain Mismatch |
| #8783 | Featured Video Plus | 34 | 99 | 105 | 10k+ | | | Non-prefixed global variable |
| #8784 | WPS Menu Exporter | 40 | 47 | 22 | 10k+ | | | Output is not escaped |
| #8785 | Swap Google Fonts Display: Improve Font Rendering & Performance | 99 | 1 | 1 | 10k+ | | | mismatched plugin name |
| #8786 | Genesis Custom Blocks | 90 | 7 | 22 | 10k+ | | | Non-prefixed function |
| #8787 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | | | block api version too low |
| #8788 | The GDPR Framework By Data443 | 23 | 1,287 | 517 | 10k+ | | | Short PHP open tag found |
| #8789 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | | | Text Domain Mismatch |
| #8790 | Bulk remove posts from category | 95 | 2 | 5 | 10k+ | | | date date |
| #8791 | Bootstrap Blocks | 91 | 8 | 30 | 10k+ | | | Non-prefixed global variable |
| #8792 | Pantheon Advanced Page Cache | 91 | 10 | 6 | 10k+ | | | Request data is not unslashed |
| #8793 | Acme Demo Setup | 84 | 8 | 6 | 10k+ | | | Non-prefixed function |
| #8794 | No Page Comment | 98 | 3 | 1 | 10k+ | | | Discouraged text-domain loading |
| #8795 | YITH WooCommerce Gift Cards | 24 | 436 | 1,534 | 10k+ | | | Non-prefixed global variable |
| #8796 | Message Bridge for Contact Form 7 and Telegram | 100 | | 0 | 10k+ | | | No open findings |
| #8797 | Stop WP Emails Going to Spam | 99 | 1 | 3 | 10k+ | | | trademarked term |
| #8798 | Oceanwp sticky header | 64 | 8 | 13 | 10k+ | | | Missing nonce verification |
| #8799 | Яндекс Метрика | 79 | 10 | 4 | 10k+ | | | Unsafe printing function |
| #8800 | WPC Buy Now Button for WooCommerce | 95 | | 18 | 10k+ | | | Non-prefixed class |