| #9301 | Easy Social Icons | 35 | 182 | 158 | 20k+ | | | Output is not escaped |
| #9302 | PWA | 96 | 34 | 3 | 20k+ | | | Missing direct file access protection |
| #9303 | Genesis Simple Hooks | 84 | 14 | 1 | 20k+ | | | Output is not escaped |
| #9304 | Easy Hide Login | 98 | 3 | 12 | 20k+ | | | Non-prefixed global variable |
| #9305 | Stock Manager for WooCommerce | 35 | 5 | 45 | 20k+ | | | Non-prefixed global variable |
| #9306 | Contact Form 7 – Phone mask field | 60 | 21 | 7 | 20k+ | | | Unsafe printing function |
| #9307 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #9308 | Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery | 94 | | 206 | 20k+ | | | Non-prefixed global variable |
| #9309 | elegro Crypto Payment | 89 | 5 | 9 | 20k+ | | | Missing Version |
| #9310 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #9311 | Jetpack VaultPress Backup | 32 | 554 | 211 | 20k+ | | | Text Domain Mismatch |
| #9312 | Re-Add Text Justify Button | 98 | 3 | 0 | 20k+ | | | Missing direct file access protection |
| #9313 | افزونه رسمی ترب | 36 | 42 | 86 | 30k+ | | | Exception output is not escaped |
| #9314 | Hide Dashboard Notifications | 76 | 10 | 10 | 20k+ | | | Output is not escaped |
| #9315 | Flexible Editor Panel for Elementor | 42 | 154 | 42 | 20k+ | | | Text Domain Mismatch |
| #9316 | Donations via PayPal | 40 | 143 | 17 | 20k+ | | | Output is not escaped |
| #9317 | Ultimate Member – reCAPTCHA | 98 | 2 | 1 | 20k+ | | | Discouraged text-domain loading |
| #9318 | Radio Buttons for Taxonomies | 39 | 40 | 24 | 20k+ | | | Output is not escaped |
| #9319 | Smartsupp – live chat, AI shopping assistant and chatbots | 96 | 16 | 4 | 20k+ | | | wp function not compatible with requires wp |
| #9320 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #9321 | Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News | 41 | | 537 | 20k+ | | | Non-prefixed global variable |
| #9322 | Email Templates Customizer and Designer for WordPress and WooCommerce | 30 | 250 | 349 | 20k+ | | | Non-prefixed global variable |
| #9323 | Gravity PDF | 57 | 116 | 152 | 20k+ | | | Non-prefixed global variable |
| #9324 | Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely | 53 | 34 | 90 | 20k+ | | | Database parameter is not escaped |
| #9325 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | 24 | 369 | 820 | 20k+ | | | Nonce verification recommended |
| #9326 | StoreCustomizer – A plugin to Customize all WooCommerce Pages | 23 | 587 | 1,426 | 20k+ | | | Non-prefixed global variable |
| #9327 | Custom Block Builder – Lazy Blocks | 50 | 23 | 51 | 20k+ | | | Non-prefixed hook name |
| #9328 | SocialFeeds | 90 | | 10 | 30k+ | | | Nonce verification recommended |
| #9329 | No Right Click Images | 97 | 14 | 13 | 20k+ | | | wp function not compatible with requires wp |
| #9330 | Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro | 45 | 26 | 117 | 20k+ | | | Non-prefixed hook name |
| #9331 | Uncanny Toolkit for LearnDash | 22 | 539 | 994 | 20k+ | | | Output is not escaped |
| #9332 | Ocean Stick Anything | 85 | 6 | 6 | 20k+ | | | Missing Arg Domain |
| #9333 | Zero Spam for WordPress | 34 | 79 | 393 | 20k+ | | | Non-prefixed global variable |
| #9334 | Google Authenticator | 41 | 39 | 65 | 20k+ | | | Output is not escaped |
| #9335 | Hide Admin Bar | 51 | 35 | 17 | 20k+ | | | Unsafe printing function |
| #9336 | Timber | 24 | 85 | 128 | 20k+ | | | Non-prefixed hook name |
| #9337 | Database Addon For WPForms ( wpforms entries ) – WPFormsDB | 43 | 17 | 53 | 20k+ | | | Nonce verification recommended |
| #9338 | WooCommerce Analytics | 93 | | 25 | 20k+ | | | Direct Query |
| #9339 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #9340 | Compact WP Audio Player | 61 | 12 | 21 | 20k+ | | | Non-prefixed function |
| #9341 | Astra Hooks | 96 | 9 | 0 | 20k+ | | | Missing direct file access protection |
| #9342 | WP Maximum Execution Time Exceeded | 97 | 4 | 3 | 20k+ | | | trademarked term |
| #9343 | Simple Download Monitor | 27 | 218 | 273 | 20k+ | | | Output is not escaped |
| #9344 | Product Gallery Slider, Additional Variation Images for WooCommerce | 28 | 552 | 316 | 20k+ | | | Output is not escaped |
| #9345 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | | | Text Domain Mismatch |
| #9346 | Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … | 93 | 25 | 32 | 20k+ | | | Missing direct file access protection |
| #9347 | PDF Poster – Display PDF Files with Custom Viewer | 100 | | 0 | 20k+ | | | No open findings |
| #9348 | Hide Admin Notices | 57 | 9 | 16 | 20k+ | | | Input is not sanitized |
| #9349 | Disable Feeds | 55 | 9 | 9 | 20k+ | | | Output is not escaped |
| #9350 | Hide Admin Bar Based on User Roles | 26 | 549 | 1,345 | 20k+ | | | Non-prefixed global variable |