| #901 | Disabler | 64 | 212 | 38 | 900 | | | Text Domain Mismatch |
| #902 | POS Entegratör – Gurmehub Ödeme Eklentisi | 68 | 1,321 | 69 | 1k+ | | | Text Domain Mismatch |
| #903 | Prevent Files / Folders Access | 100 | | 0 | 1k+ | | | No open findings |
| #904 | License Manager for WooCommerce | 23 | 129 | 797 | 6k+ | | | Nonce verification recommended |
| #905 | Product Carousel Slider & Grid Ultimate for WooCommerce | 29 | 719 | 122 | 6k+ | | | Text Domain Mismatch |
| #906 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #907 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | | | Output is not escaped |
| #908 | Smart Brands for WooCommerce | 95 | | 150 | 400 | | | Non-prefixed global variable |
| #909 | Accordion – Responsive Horizontal & Vertical Accordion Block | 98 | 1 | 10 | 600 | | | Non-prefixed constant |
| #910 | Payments via PayMongo for WooCommerce | 39 | 36 | 81 | 1k+ | | | Nonce verification recommended |
| #911 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 235 | 699 | 2k+ | | | Non-prefixed global variable |
| #912 | Text Unfold For Elementor | 88 | 122 | 0 | 3k+ | | | Text Domain Mismatch |
| #913 | Before After Image Comparison – Visual Comparison for Two Images | 77 | 18 | 16 | 3k+ | | | Text Domain Mismatch |
| #914 | Magical Posts Display – Elementor Advanced Posts widgets | 38 | 115 | 46 | 3k+ | | | Output is not escaped |
| #915 | Weather Effect | 88 | | 381 | 4k+ | | | Non-prefixed global variable |
| #916 | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates | 22 | 2,175 | 4,210 | 7k+ | | | Non-prefixed global variable |
| #917 | Leverage Browser Caching | 100 | | 1 | 10k+ | | | Missing Version |
| #918 | VK Post Author Display | 36 | 87 | 113 | 10k+ | | | Non-prefixed function |
| #919 | miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) | 99 | | 6 | 10k+ | | | Non-prefixed constant |
| #920 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 663 | 3,353 | 50k+ | | | Non-prefixed global variable |
| #921 | a3 Lazy Load | 31 | 83 | 239 | 90k+ | | | Dynamic hook name |
| #922 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | | | Output is not escaped |
| #923 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | | | Unsafe printing function |
| #924 | Recent Products Block | 80 | 11 | 0 | 600 | | | Output is not escaped |
| #925 | Product Delivery Date for WooCommerce – Lite | 35 | 171 | 27 | 1k+ | | | Text Domain Mismatch |
| #926 | Frisbii Pay | 33 | 91 | 292 | 1k+ | | | Non-prefixed global variable |
| #927 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | | | Output is not escaped |
| #928 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | | | Output is not escaped |
| #929 | Permalink Manager for WooCommerce | 40 | 115 | 20 | 8k+ | | | Short PHP open tag found |
| #930 | Contact Form to Any API | 95 | | 18 | 8k+ | | | Non-prefixed class |
| #931 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 32 | 159 | 62 | 10k+ | | | Output is not escaped |
| #932 | Easy Demo Import for Omega Themes | 42 | 33 | 41 | 400 | | | Output is not escaped |
| #933 | MakeStories (for Google Web Stories) | 26 | 117 | 416 | 600 | | | Nonce verification recommended |
| #934 | PayPlus Payment Gateway | 96 | | 87 | 1k+ | | | Non-prefixed class |
| #935 | Custom Thank You Page for WooCommerce | 83 | 7 | 6 | 2k+ | | | Output is not escaped |
| #936 | EU Order Withdrawal Button for WooCommerce | 72 | 52 | 406 | 4k+ | | | Non-prefixed hook name |
| #937 | Buy Me a Coffee – Button and Widget Plugin | 31 | 138 | 140 | 6k+ | | | Output is not escaped |
| #938 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #939 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,934 | 5,248 | 10k+ | | | Non-prefixed hook name |
| #940 | AI Agent by SiteGround | 54 | 28 | 6 | 1m+ | | | Exception output is not escaped |
| #941 | SureMembers – Membership & Content Restriction Plugin | 29 | 359 | 248 | 1k+ | | | Text Domain Mismatch |
| #942 | Video Player Block | 100 | | 1 | 2k+ | | | slow db query meta key |
| #943 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 24 | 509 | 304 | 4k+ | | | Text Domain Mismatch |
| #944 | Flash Toolkit | 34 | 158 | 242 | 10k+ | | | Non-prefixed global variable |
| #945 | Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | 62 | 81 | 100 | 40k+ | | | Missing direct file access protection |
| #946 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #947 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #948 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 21 | 426 | 862 | 1m+ | | | Non-prefixed global variable |
| #949 | Sticky Content – Make Any Section Sticky on Scroll | 82 | 24 | 9 | 400 | | | Text Domain Mismatch |
| #950 | Panorama Block – Display 360-Degree Panoramic Views | 100 | | 0 | 700 | | | No open findings |