| #6801 | PushCrew | 78 | 10 | 0 | 400 | | | Missing Arg Domain |
| #6802 | QuadMenu – Divi Mega Menu | 78 | 17 | 2 | 1k+ | | | Text Domain Mismatch |
| #6803 | Recent Posts | 78 | 7 | 2 | 400 | | | Database parameter is not escaped |
| #6804 | Rename XMLRPC | 78 | 7 | 3 | 1k+ | | | Output is not escaped |
| #6805 | Resend Welcome Email | 78 | 5 | 9 | 1k+ | | | Nonce verification recommended |
| #6806 | RSS Includes Pages | 78 | 4 | 8 | 10k+ | | | Output is not escaped |
| #6807 | Run SQL Query | 78 | 13 | 8 | 600 | | | Non-prefixed global variable |
| #6808 | Animator – Scroll Triggered Animations | 78 | 16 | 24 | 1k+ | | | Missing direct file access protection |
| #6809 | SearchWP Live Ajax Search | 78 | 8 | 23 | 50k+ | | | Non-prefixed global variable |
| #6810 | Sendy | 78 | 11 | 2 | 500 | | | Output is not escaped |
| #6811 | Sheet2Site | 78 | 21 | 3 | 400 | | | Output is not escaped |
| #6812 | Simple Maintenance | 78 | 11 | 5 | 1k+ | | | Non-prefixed global variable |
| #6813 | Simple Universal Google Analytics | 78 | 11 | 0 | 4k+ | | | Output is not escaped |
| #6814 | Yandex Mail SMTP Server for WordPress | 78 | 16 | 5 | 2k+ | | | Text Domain Mismatch |
| #6815 | Spider Blocker | 78 | 19 | 9 | 20k+ | | | Missing Translators Comment |
| #6816 | Thumbnails and Featured Images | 78 | 16 | 14 | 1k+ | | | Short PHP open tag found |
| #6817 | History Timeline for Biography, Company History & Event Timeline | 78 | 29 | 37 | 1k+ | | | Non-prefixed global variable |
| #6818 | Tock Widget | 78 | 6 | 9 | 400 | | | Missing direct file access protection |
| #6819 | Tuxedo Responsive Widget Columns | 78 | 19 | 3 | 400 | | | Output is not escaped |
| #6820 | Twenty20 Image Before-After | 78 | 104 | 14 | 20k+ | | | Text Domain Mismatch |
| #6821 | WEN Responsive Columns | 78 | 13 | 6 | 800 | | | Unsafe printing function |
| #6822 | Wheel of Life: Coaching and Assessment Tool for Life Coach | 78 | 3 | 113 | 3k+ | | | Non-prefixed global variable |
| #6823 | Wisepops Popups & Notifications | 78 | | 15 | 500 | | | Nonce verification recommended |
| #6824 | Exclude Category from Blog | 78 | 10 | 2 | 1k+ | | | Output is not escaped |
| #6825 | WooCommerce Square | 78 | 6 | 266 | 80k+ | | | Non-prefixed hook name |
| #6826 | WP Downgrade | Specific Core Version | 78 | 12 | 6 | 100k+ | | | Unsafe printing function |
| #6827 | Feed Post Thumbnail | 78 | 9 | 3 | 2k+ | | | Unsafe printing function |
| #6828 | WP Faster | 78 | 7 | 12 | 1k+ | | | trademarked term |
| #6829 | WP Simple Mail Sender | 78 | 21 | 6 | 3k+ | | | Non Singular String Literal Domain |
| #6830 | WPC Smart Messages for WooCommerce | 78 | 1 | 58 | 1k+ | | | Non-prefixed global variable |
| #6831 | Zeno Font Resizer | 78 | 13 | 2 | 5k+ | | | Output is not escaped |
| #6832 | Add link on copied text | 79 | 11 | 3 | 400 | | | Output is not escaped |
| #6833 | AffiliateWP – Affiliate Info | 79 | 27 | 7 | 1k+ | | | Text Domain Mismatch |
| #6834 | AffiliateWP – Force Pending Referrals | 79 | 35 | 12 | 500 | | | Text Domain Mismatch |
| #6835 | AffiliateWP – WooCommerce Redirect Affiliates | 79 | 27 | 7 | 1k+ | | | Text Domain Mismatch |
| #6836 | AIKO – AI Developer Lite | 79 | 10 | 7 | 6k+ | | | error log error log |
| #6837 | Alx Extensions | 79 | 113 | 4 | 8k+ | | | Text Domain Mismatch |
| #6838 | Import / Export Customizer Settings | 79 | 5 | 13 | 50k+ | | | Input is not sanitized |
| #6839 | Auto Featured Image (Auto Post Thumbnail) | 79 | 5 | 30 | 50k+ | | | Non-prefixed hook name |
| #6840 | Better Font Awesome | 79 | 6 | 9 | 70k+ | | | Input is not sanitized |
| #6841 | Blocks for Products | 79 | 18 | 13 | 400 | | | Non Singular String Literal Domain |
| #6842 | Boxzilla – WordPress Popup Builder | 79 | 4 | 64 | 20k+ | | | Non-prefixed global variable |
| #6843 | Click To Copy – Copy Text or Code to Clipboard Instantly | 79 | 9 | 8 | 900 | | | Text Domain Mismatch |
| #6844 | Bitly URL Shortener | 79 | 65 | 22 | 600 | | | Text Domain Mismatch |
| #6845 | Contact Form 7 Get and Show Parameter from URL | 79 | 3 | 10 | 800 | | | Input is not sanitized |
| #6846 | CoolClock – a Javascript Analog Clock | 79 | 21 | 9 | 2k+ | | | Output is not escaped |
| #6847 | Custom Background Changer | 79 | 48 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #6848 | Disable Theme and Plugin Auto-Update Emails | 79 | 21 | 5 | 10k+ | | | Text Domain Mismatch |
| #6849 | Display Post Metadata | 79 | 12 | 4 | 500 | | | Output is not escaped |
| #6850 | Exclude Pages From Menu | 79 | 6 | 11 | 8k+ | | | Non-prefixed function |