| #1851 | WPBulky – WordPress Bulk Edit Post Types | 91 | 1 | 18 | 400 | | | Database parameter is not escaped |
| #1852 | International Phone Number Format | 73 | 51 | 20 | 400 | | | Text Domain Mismatch |
| #1853 | Limit Post Add-On | 97 | 22 | 0 | 400 | | | wp function not compatible with requires wp |
| #1854 | Most Popular Post Widget | 64 | 40 | 3 | 400 | | | Output is not escaped |
| #1855 | Slickplan Importer | 38 | 40 | 58 | 400 | | | Non-prefixed global variable |
| #1856 | Tock Widget | 78 | 6 | 9 | 400 | | | Missing direct file access protection |
| #1857 | Custom Login Css | 81 | 10 | 0 | 400 | | | Missing direct file access protection |
| #1858 | List Sub Pages | 98 | 4 | 0 | 400 | | | Missing direct file access protection |
| #1859 | Second Street | 98 | 10 | 6 | 400 | | | Non Enqueued Script |
| #1860 | Multi-Carrier EasyPost Shipping Methods & Address Validation for WooCommerce | 33 | 424 | 69 | 400 | | | Non Singular String Literal Domain |
| #1861 | Advanced Permalinks | 35 | 94 | 76 | 400 | | | wp function not compatible with requires wp |
| #1862 | List MixCloud | 99 | | 3 | 400 | | | Non-prefixed class |
| #1863 | Opal Mega Menu | 32 | 419 | 119 | 400 | | | Text Domain Mismatch |
| #1864 | Blogify-AI | 88 | 6 | 12 | 400 | | | Non-prefixed global variable |
| #1865 | AI Builder – Generate pages, blocks, images & translate with AI | 31 | 101 | 194 | 400 | | | Non-prefixed global variable |
| #1866 | Shipping by City for Woocommerce | 89 | 13 | 2 | 400 | | | Text Domain Mismatch |
| #1867 | Embed Videos For Product Image Gallery Using WooCommerce | 62 | 21 | 16 | 400 | | | Text Domain Mismatch |
| #1868 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | | | Output is not escaped |
| #1869 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin | 22 | 247 | 689 | 400 | | | Non-prefixed hook name |
| #1870 | Sync Cache for SpinupWP and Perfmatters | 99 | 1 | 5 | 400 | | | trademarked term |
| #1871 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #1872 | User Location and IP | 70 | 2 | 25 | 400 | | | Input is not sanitized |
| #1873 | Car Route Planner Plugin | 38 | 135 | 17 | 400 | | | Output is not escaped |
| #1874 | CopySafe PDF Protection – Copy Protect PDF | 100 | | 2 | 400 | | | mismatched plugin name |
| #1875 | News Element Elementor Blog Magazine | 85 | 174 | 695 | 400 | | | Non-prefixed global variable |
| #1876 | Yandex Mail | 79 | 16 | 4 | 400 | | | Non Singular String Literal Domain |
| #1877 | Wooplatnica | 35 | 27 | 24 | 400 | | | Non-prefixed class |
| #1878 | Pelecard Gateway | 76 | 295 | 54 | 400 | | | Text Domain Mismatch |
| #1879 | Pattern Manager | 97 | 6 | 2 | 400 | | | Missing direct file access protection |
| #1880 | Custom Menu | 43 | 83 | 11 | 400 | | | wp function not compatible with requires wp |
| #1881 | WP Mapa Politico España | 69 | 32 | 12 | 400 | | | Output is not escaped |
| #1882 | Dashboard Widget Sidebar | 62 | 9 | 16 | 400 | | | Input is not validated |
| #1883 | Add HTML to Page | 97 | 5 | 0 | 400 | | | Missing direct file access protection |
| #1884 | Speed up Contact Form 7 | 97 | 11 | 0 | 400 | | | wp function not compatible with requires wp |
| #1885 | MobileMonkey X-Ray Installer | 94 | 4 | 3 | 400 | | | Missing direct file access protection |
| #1886 | Linked Variation for WooCommerce | 97 | 2 | 47 | 400 | | | Non-prefixed global variable |
| #1887 | SHOPVOTE | 35 | 64 | 58 | 400 | | | curl curl setopt |
| #1888 | Da Reactions | 39 | 15 | 140 | 400 | | | Request data is not unslashed |
| #1889 | Media Trash Button | 100 | 1 | 0 | 400 | | | Missing direct file access protection |
| #1890 | List Petfinder Pets | 40 | 121 | 46 | 400 | | | Output is not escaped |
| #1891 | resmio button & widget | 37 | 99 | 36 | 400 | | | Text Domain Mismatch |
| #1892 | WP Dashboard Messages | 87 | 9 | 11 | 400 | | | Text Domain Mismatch |
| #1893 | BeGateway Payment Gateway for WooCommerce | 39 | 57 | 44 | 400 | | | Unsafe printing function |
| #1894 | yubikey-plugin | 40 | 64 | 33 | 400 | | | Text Domain Mismatch |
| #1895 | Language Switcher for Elementor & Polylang | 100 | | 0 | 400 | | | No open findings |
| #1896 | Unlimited Elements Blocks Library | 22 | 708 | 1,822 | 400 | | | Non-prefixed global variable |
| #1897 | Publitio | 35 | 47 | 26 | 400 | | | curl curl setopt |
| #1898 | CF7 Spreadsheets | 35 | 100 | 62 | 400 | | | Text Domain Mismatch |
| #1899 | Mailster Cool Captcha | 42 | 65 | 28 | 400 | | | Text Domain Mismatch |
| #1900 | Checklist | 41 | 62 | 25 | 400 | | | Text Domain Mismatch |