| #2401 | AZAN Plugin | 37 | 44 | 30 | 500 | | | Output is not escaped |
| #2402 | GamiPress – Leaderboards Include/Exclude Users | 85 | 11 | 3 | 400 | | | Output is not escaped |
| #2403 | Rutube Embed | 100 | | 0 | 500 | | | No open findings |
| #2404 | LH Page Links To | 42 | 25 | 38 | 500 | | | Output is not escaped |
| #2405 | Contact Information Widget | 51 | 69 | 5 | 500 | | | Output is not escaped |
| #2406 | Teachable | 93 | 19 | 75 | 500 | | | Non-prefixed global variable |
| #2407 | LH Dashboard Notes | 97 | 16 | 1 | 500 | | | Missing Arg Domain |
| #2408 | Contact Form 7 BWP reCAPTCHA Extension | 48 | 92 | 10 | 400 | | | Non Singular String Literal Domain |
| #2409 | Social Share For WooCommerce | 76 | 85 | 23 | 500 | | | Text Domain Mismatch |
| #2410 | Epeken All Kurir for Woocommerce | 30 | 590 | 1,246 | 500 | | | Missing nonce verification |
| #2411 | Force Plugin Updates Check | 92 | 5 | 5 | 500 | | | trademarked term |
| #2412 | Feed For TikTok Shop | 93 | 11 | 4 | 500 | | | wp function not compatible with requires wp |
| #2413 | WooBooster Partial COD for WooCommerce | 40 | 90 | 51 | 500 | | | Text Domain Mismatch |
| #2414 | Fast Speed Index | 74 | 9 | 12 | 500 | | | Direct Query |
| #2415 | Linked Variations for WooCommerce – Link Separate Products by Attribute with Swatches, Quick View & Shortcodes | 97 | 12 | 34 | 500 | | | Non-prefixed global variable |
| #2416 | Wbcom Designs – BuddyPress Activity Social Share | 35 | 293 | 27 | 400 | | | Text Domain Mismatch |
| #2417 | Usersnap | 41 | 37 | 17 | 500 | | | Output is not escaped |
| #2418 | Shipping for Nova Poshta | 20 | 598 | 923 | 500 | | | Output is not escaped |
| #2419 | Theme Duplicator | 41 | 14 | 31 | 400 | | | Nonce verification recommended |
| #2420 | Mobile Call Buttons | 97 | 1 | 1 | 500 | | | Input is not validated |
| #2421 | Conditional Logic for Woo Product Add-ons | 26 | 575 | 1,352 | 500 | | | Non-prefixed global variable |
| #2422 | Transcoder | 35 | 42 | 111 | 400 | | | Non-prefixed function |
| #2423 | KCSG Kartra Pages | 47 | 30 | 16 | 500 | | | Heredoc Output Not Escaped |
| #2424 | Comment Form CSRF Protection | 70 | 7 | 10 | 500 | | | Request data is not unslashed |
| #2425 | StyleAI | 94 | 1 | 4 | 400 | | | Missing nonce verification |
| #2426 | Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light | 23 | 386 | 999 | 400 | | | Non-prefixed global variable |
| #2427 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | | | Non-prefixed function |
| #2428 | Interactive Polish Map | 60 | 30 | 4 | 500 | | | Output is not escaped |
| #2429 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | | | Non-prefixed global variable |
| #2430 | Rating by BestWebSoft | 28 | 509 | 218 | 400 | | | Text Domain Mismatch |
| #2431 | Pay with PAYUNi | 77 | 9 | 13 | 500 | | | Input is not sanitized |
| #2432 | Force Password Change | 73 | 4 | 10 | 400 | | | Missing nonce verification |
| #2433 | Themify Store Locator | 31 | 244 | 125 | 500 | | | Text Domain Mismatch |
| #2434 | Delivery Date Time & Pickup for WooCommerce | 37 | 148 | 216 | 400 | | | Output is not escaped |
| #2435 | Rublon Multi-Factor Authentication (MFA) | 30 | 216 | 160 | 400 | | | Output is not escaped |
| #2436 | Augmented Reality Viewer – 3D Model Viewer | 98 | 5 | 2 | 500 | | | wp function not compatible with requires wp |
| #2437 | Thank you page viewer for Woocommerce | 86 | 6 | 3 | 500 | | | Output is not escaped |
| #2438 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 500 | | | rand rand |
| #2439 | Security Ninja For MainWP | 47 | 246 | 71 | 500 | | | Text Domain Mismatch |
| #2440 | Visual Hook Guide for Kadence | 90 | 8 | 1 | 500 | | | Text Domain Mismatch |
| #2441 | Hotline & Zalo Setting | 81 | 13 | 2 | 500 | | | Output is not escaped |
| #2442 | Quentn WP | 37 | 4 | 251 | 500 | | | Nonce verification recommended |
| #2443 | Comment Approved | 68 | 6 | 14 | 500 | | | Input is not sanitized |
| #2444 | Tagging | 40 | 33 | 37 | 500 | | | Output is not escaped |
| #2445 | You can quote me on that | 39 | 57 | 37 | 400 | | | Output is not escaped |
| #2446 | Datalogics Ecommerce Delivery – Datalogics | 39 | 13 | 115 | 500 | | | Nonce verification recommended |
| #2447 | Expire Passwords | 92 | 7 | 2 | 500 | | | Missing Translators Comment |
| #2448 | Discontinued Product Stock Status for WooCommerce | 72 | 1 | 51 | 500 | | | Missing nonce verification |
| #2449 | Zoho Billing – Embed Payment Form | 57 | 22 | 10 | 400 | | | Output is not escaped |
| #2450 | All in One SEO Pack Importer | 56 | 17 | 25 | 500 | | | Direct Query |