| #3601 | ACF: Google Map Extended | 41 | 141 | 8 | 700 | | | Text Domain Mismatch |
| #3602 | SimpleModal Login | 39 | 50 | 12 | 700 | | | Unsafe printing function |
| #3603 | Default Admin Color Scheme | 100 | | 0 | 800 | | | No open findings |
| #3604 | Filr – Secure document library | 23 | 775 | 1,317 | 700 | | | Non-prefixed global variable |
| #3605 | Plugin Security Scanner | 84 | 9 | 9 | 800 | | | Output is not escaped |
| #3606 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 600 | | | Output is not escaped |
| #3607 | Category Archive Widget | 51 | 54 | 2 | 700 | | | Output is not escaped |
| #3608 | Siteimprove | 81 | 6 | 23 | 700 | | | Nonce verification recommended |
| #3609 | WP Disables Updates | 75 | 19 | 7 | 800 | | | Text Domain Mismatch |
| #3610 | Yeloni Exit Popup | (Free) GDPR Compliance | 54 | 41 | 12 | 700 | | | Output is not escaped |
| #3611 | AffiliateWP – External Referral Links | 77 | 30 | 11 | 800 | | | Text Domain Mismatch |
| #3612 | Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element | 43 | 66 | 109 | 800 | | | Missing direct file access protection |
| #3613 | SameSite Cookies | 98 | 3 | 2 | 700 | | | Missing direct file access protection |
| #3614 | LWS Affiliation | 86 | 8 | 23 | 700 | | | Missing nonce verification |
| #3615 | Century ToolKit | 33 | 118 | 78 | 700 | | | Output is not escaped |
| #3616 | Child Theme Check | 100 | | 1 | 800 | | | Non-prefixed class |
| #3617 | BASE Item List | 35 | 4 | 13 | 800 | | | error log error log |
| #3618 | Shiptastic integration for UPS | 99 | 2 | 2 | 800 | | | Missing Translators Comment |
| #3619 | Mastodon Autopost | 40 | 41 | 50 | 700 | | | Output is not escaped |
| #3620 | WP IE Buster | 71 | 13 | 3 | 800 | | | Output is not escaped |
| #3621 | Raychat | 89 | 1 | 11 | 800 | | | Discouraged text-domain loading |
| #3622 | UnfoldWP Import Companion | 97 | 5 | 7 | 700 | | | Text Domain Mismatch |
| #3623 | GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership | 20 | 1,832 | 720 | 700 | | | Non Singular String Literal Domain |
| #3624 | Amplitude – Analytics, Session Replay, A/B testing and CDP for your website | 96 | 3 | 12 | 700 | | | Missing Version |
| #3625 | Booster for WPForms | 50 | 79 | 45 | 700 | | | Text Domain Mismatch |
| #3626 | Easy Dash for LearnDash | 35 | 623 | 88 | 700 | | | Text Domain Mismatch |
| #3627 | Input Masks for Contact Form 7 | 76 | 143 | 12 | 800 | | | wp function not compatible with requires wp |
| #3628 | Link Shortner | 99 | 2 | 0 | 700 | | | Missing direct file access protection |
| #3629 | ACF Flexible Content Modal | 98 | 2 | 4 | 700 | | | Missing Version |
| #3630 | Autover | 98 | 4 | 0 | 800 | | | Missing direct file access protection |
| #3631 | Nested Ordered Lists | 98 | 2 | 0 | 800 | | | outdated tested upto header |
| #3632 | Product Price History for WooCommerce | 42 | | 101 | 800 | | | Nonce verification recommended |
| #3633 | RPS Image Gallery | 35 | 88 | 16 | 800 | | | Output is not escaped |
| #3634 | Material Design for WordPress | 60 | 51 | 207 | 800 | | | Non-prefixed global variable |
| #3635 | Advanced Custom Fields Contact Form 7 | 86 | 10 | 4 | 700 | | | Short PHP open tag found |
| #3636 | Eventin Addons for Divi Builder | 75 | 6 | 17 | 800 | | | Nonce verification recommended |
| #3637 | Lenix scss compiler | 35 | 133 | 34 | 800 | | | Exception output is not escaped |
| #3638 | Empty P Tag | 97 | 4 | 1 | 800 | | | Missing direct file access protection |
| #3639 | WP Cassify | 35 | 106 | 143 | 700 | | | Missing nonce verification |
| #3640 | Append Link on Copy | 74 | 23 | 5 | 800 | | | Output is not escaped |
| #3641 | Abandoned Checkout Recovery & Order Notifications for WooCommerce | 35 | 108 | 77 | 800 | | | Text Domain Mismatch |
| #3642 | WP Page Loading | 79 | 14 | 9 | 800 | | | Text Domain Mismatch |
| #3643 | More Types | 33 | 227 | 198 | 800 | | | Non-prefixed global variable |
| #3644 | Really Disable Emojis | 98 | 2 | 2 | 800 | | | Missing direct file access protection |
| #3645 | Photo Galleria | 42 | 78 | 5 | 800 | | | Missing Arg Domain |
| #3646 | MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | 33 | 2 | 503 | 700 | | | Non-prefixed function |
| #3647 | Advanced Categories Widget | 39 | 170 | 41 | 800 | | | Output is not escaped |
| #3648 | SEO合集(支持百度/Google/Bing/头条推送) | 31 | 13 | 1,407 | 800 | | | Direct Query |
| #3649 | Waves Block | 98 | 4 | 0 | 700 | | | Missing direct file access protection |
| #3650 | Fix Duplicates | 39 | 76 | 73 | 800 | | | Output is not escaped |