| #3651 | BOX NOW Delivery Croatia | 39 | 64 | 99 | 700 | | | Missing nonce verification |
| #3652 | Genesis Visual Hook Guide | 65 | 13 | 14 | 700 | | | Nonce verification recommended |
| #3653 | FedaPay Gateway for WooCommerce | 47 | 24 | 11 | 700 | | | Output is not escaped |
| #3654 | Bulk Menu Edit | 82 | 4 | 9 | 700 | | | Direct Query |
| #3655 | Ebook Store | 21 | 666 | 1,087 | 700 | | | Non-prefixed global variable |
| #3656 | Plugins List | 98 | 3 | 3 | 700 | | | trademarked term |
| #3657 | WP System Information | 35 | 237 | 30 | 700 | | | Text Domain Mismatch |
| #3658 | Keyword Research Tool | 72 | 9 | 11 | 700 | | | Input is not validated |
| #3659 | Export Custom Pages | 53 | 22 | 19 | 700 | | | Output is not escaped |
| #3660 | The Tribal Plugin | 47 | 43 | 62 | 800 | | | Non-prefixed function |
| #3661 | Custom Query Blocks | 98 | 6 | 13 | 700 | | | Non-prefixed hook name |
| #3662 | Bulk Add Terms | 40 | 74 | 27 | 800 | | | Text Domain Mismatch |
| #3663 | Gutenbye | 98 | 4 | 0 | 700 | | | Missing direct file access protection |
| #3664 | Ultimate WP Mail | 24 | 400 | 546 | 700 | | | Unsafe printing function |
| #3665 | Coldbox Addons | 97 | 11 | 2 | 800 | | | Missing direct file access protection |
| #3666 | MembershipWorks Login Connector | 43 | 28 | 81 | 800 | | | Request data is not unslashed |
| #3667 | Verified Reviews (Avis Vérifiés) | 19 | 671 | 1,136 | 700 | | | Non-prefixed global variable |
| #3668 | Toggle Content | 81 | 16 | 12 | 700 | | | file system operations mkdir |
| #3669 | .htaccess Site Access Control | 37 | 54 | 67 | 800 | | | Input is not sanitized |
| #3670 | Custom CSS/JS | 40 | 58 | 34 | 800 | | | Text Domain Mismatch |
| #3671 | Admin Page Notes | 58 | 17 | 15 | 700 | | | Text Domain Mismatch |
| #3672 | Hide Block | 96 | 3 | 4 | 700 | | | Missing Version |
| #3673 | Keep Emoticons as Text | 98 | 3 | 1 | 700 | | | Missing direct file access protection |
| #3674 | Faire for WooCommerce | 68 | 4 | 86 | 800 | | | Direct Query |
| #3675 | WP Night Mode | 77 | 8 | 11 | 700 | | | Non-prefixed function |
| #3676 | Top-Bar CodeBulls | 40 | 91 | 13 | 700 | | | Text Domain Mismatch |
| #3677 | ACF: Yandex Maps Field | 68 | 73 | 10 | 800 | | | Text Domain Mismatch |
| #3678 | WFatture for WooCommerce Fattureincloud | 25 | 229 | 774 | 700 | | | Non-prefixed global variable |
| #3679 | Free Gift Product For WooCommerce | 70 | 9 | 77 | 800 | | | Non-prefixed global variable |
| #3680 | Responsive Vertical Icon Menu | 38 | 188 | 85 | 700 | | | Output is not escaped |
| #3681 | WP eBay Product Feeds | 37 | 136 | 31 | 700 | | | Output is not escaped |
| #3682 | ContentStudio | 99 | 2 | 0 | 700 | | | badly named files |
| #3683 | InPost Gallery | 33 | 105 | 245 | 700 | | | Non-prefixed global variable |
| #3684 | Testimonial Slider – Free Testimonials Slider Plugin | 33 | 91 | 50 | 700 | | | Request data is not unslashed |
| #3685 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 700 | | | Text Domain Mismatch |
| #3686 | Link View | 89 | 99 | 5 | 700 | | | Missing Translators Comment |
| #3687 | Batcache | 49 | 12 | 53 | 700 | | | Input is not sanitized |
| #3688 | Remove Howdy | 98 | 3 | 0 | 700 | | | Missing direct file access protection |
| #3689 | Send Email From Admin | 53 | 27 | 13 | 700 | | | Text Domain Mismatch |
| #3690 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 700 | | | Nonce verification recommended |
| #3691 | WP-UTF8-Excerpt | 61 | 17 | 10 | 700 | | | Unsafe printing function |
| #3692 | Block Patterns for Food Bloggers | 96 | 21 | 14 | 800 | | | Missing direct file access protection |
| #3693 | ACF: Google Map Extended | 41 | 141 | 8 | 800 | | | Text Domain Mismatch |
| #3694 | SimpleModal Login | 39 | 50 | 12 | 700 | | | Unsafe printing function |
| #3695 | Default Admin Color Scheme | 100 | | 0 | 800 | | | No open findings |
| #3696 | Filr – Secure document library | 23 | 775 | 1,317 | 700 | | | Non-prefixed global variable |
| #3697 | Plugin Security Scanner | 84 | 9 | 9 | 800 | | | Output is not escaped |
| #3698 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 600 | | | Output is not escaped |
| #3699 | Category Archive Widget | 51 | 54 | 2 | 800 | | | Output is not escaped |
| #3700 | Siteimprove | 81 | 6 | 23 | 700 | | | Nonce verification recommended |