| #9651 | Easy SSL Plugin for SAKURA Rental Server | 62 | 23 | 17 | 50k+ | | | Input is not sanitized |
| #9652 | Gum Addon for Elementor | 35 | 660 | 72 | 50k+ | | | Text Domain Mismatch |
| #9653 | Contextual Related Posts | 93 | 2 | 167 | 50k+ | | | Non-prefixed hook name |
| #9654 | Sydney Toolbox | 39 | 84 | 62 | 50k+ | | | Unsafe printing function |
| #9655 | If Menu – Visibility control for Menus | 39 | 281 | 63 | 50k+ | | | Output is not escaped |
| #9656 | Search Exclude | 57 | 73 | 40 | 50k+ | | | Text Domain Mismatch |
| #9657 | When Last Login | 36 | 52 | 123 | 50k+ | | | Non-prefixed global variable |
| #9658 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels | 93 | 150 | 17 | 50k+ | | | wp function not compatible with requires wp |
| #9659 | Table Field Add-on for ACF and SCF | 92 | 9 | 3 | 50k+ | | | Text Domain Mismatch |
| #9660 | WP Maintenance | 34 | 40 | 217 | 60k+ | | | Non-prefixed global variable |
| #9661 | HTML Editor Syntax Highlighter | 42 | 30 | 21 | 50k+ | | | Output is not escaped |
| #9662 | Download Plugin | 31 | 78 | 102 | 60k+ | | | Output is not escaped |
| #9663 | Blogger Importer | 38 | 44 | 39 | 50k+ | | | Output is not escaped |
| #9664 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | | Nonce verification recommended |
| #9665 | Open Graph and Twitter Card Tags | 35 | 15 | 27 | 50k+ | | | error log error log |
| #9666 | Mesmerize Companion | 91 | 27 | 91 | 50k+ | | | Non-prefixed global variable |
| #9667 | Weight Based Shipping for WooCommerce | 53 | 48 | 41 | 60k+ | | | Missing direct file access protection |
| #9668 | WPZOOM Social Feed Widget & Block | 33 | 310 | 278 | 60k+ | | | Unsafe printing function |
| #9669 | Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts | 35 | 64 | 91 | 60k+ | | | Output is not escaped |
| #9670 | Pages with category and tag | 100 | | 0 | 60k+ | | | No open findings |
| #9671 | Spotlight Social Feeds – Block, Shortcode, and Widget | 24 | 411 | 147 | 60k+ | | | Output is not escaped |
| #9672 | Yoast Test Helper | 95 | 2 | 43 | 60k+ | | | Direct Query |
| #9673 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | | | Direct Query |
| #9674 | Export and Import Users and Customers | 68 | 223 | 662 | 60k+ | | | Non-prefixed global variable |
| #9675 | Theme My Login | 32 | 251 | 549 | 60k+ | | | Non-prefixed function |
| #9676 | Ultimate Dashboard – Custom WordPress Dashboard | 40 | 17 | 144 | 60k+ | | | Input is not sanitized |
| #9677 | Login No Captcha reCAPTCHA | 42 | 45 | 24 | 60k+ | | | Unsafe printing function |
| #9678 | Drag and Drop Multiple File Upload for Contact Form 7 | 36 | 82 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #9679 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 137 | 353 | 60k+ | | | Input is not sanitized |
| #9680 | Visual Portfolio, Photo Gallery & Post Grid | 39 | 34 | 189 | 60k+ | | | Non-prefixed hook name |
| #9681 | Optimize Database after Deleting Revisions | 36 | 644 | 127 | 60k+ | | | Output is not escaped |
| #9682 | Snapchat for WooCommerce | 98 | 1 | 12 | 70k+ | | | Dynamic hook name |
| #9683 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #9684 | WP Duplicate Page | 35 | 44 | 50 | 60k+ | | | Text Domain Mismatch |
| #9685 | Disable Emojis (GDPR friendly) | 100 | 1 | 0 | 60k+ | | | Missing direct file access protection |
| #9686 | Disable XML-RPC Pingback | 98 | 2 | 1 | 60k+ | | | Missing direct file access protection |
| #9687 | Master Slider – Responsive Touch Slider | 23 | 800 | 408 | 60k+ | | | Output is not escaped |
| #9688 | Mailchimp List Subscribe Form | 86 | 22 | 156 | 60k+ | | | Non-prefixed global variable |
| #9689 | ACF Photo Gallery Field | 93 | 2 | 3 | 60k+ | | | Input is not sanitized |
| #9690 | WP Add Custom CSS | 39 | 45 | 23 | 60k+ | | | Output is not escaped |
| #9691 | To Top | 100 | | 1 | 60k+ | | | Non-prefixed class |
| #9692 | YITH WooCommerce Catalog Mode | 31 | 380 | 1,418 | 60k+ | | | Non-prefixed global variable |
| #9693 | Conditional Menus | 35 | 92 | 28 | 60k+ | | | Text Domain Mismatch |
| #9694 | Default Featured Image | 99 | 2 | 2 | 60k+ | | | Missing direct file access protection |
| #9695 | Reddit for WooCommerce | 97 | 1 | 17 | 70k+ | | | Dynamic hook name |
| #9696 | Add From Server | 37 | 52 | 20 | 60k+ | | | Output is not escaped |
| #9697 | Simple Image Sizes | 35 | 53 | 75 | 60k+ | | | Unsafe printing function |
| #9698 | WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | 34 | 219 | 453 | 60k+ | | | wp function not compatible with requires wp |
| #9699 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | | | Unsafe printing function |
| #9700 | Column Shortcodes | 53 | 32 | 9 | 60k+ | | | Unsafe printing function |