| #7351 | TinyMCE Color Picker | 85 | 2 | 7 | 1k+ | | | Input is not sanitized |
| #7352 | TopBar Call To Action | 85 | 40 | 5 | 2k+ | | | Text Domain Mismatch |
| #7353 | Vanilla PDF Embed | 85 | 8 | 3 | 3k+ | | | parse url parse url |
| #7354 | Visual Header | 85 | 6 | 42 | 400 | | | Non-prefixed function |
| #7355 | VK Blocks | 85 | 79 | 4 | 100k+ | | | Missing direct file access protection |
| #7356 | Widget CSS Classes | 85 | 47 | 8 | 80k+ | | | Non Singular String Literal Domain |
| #7357 | Free Shipping Per Product for WooCommerce | 85 | 21 | 3 | 3k+ | | | Text Domain Mismatch |
| #7358 | Notification for WooCommerce | Boost Your Sales – Recent Sales Popup – Live Feed Sales – Upsells | 85 | 9 | 35 | 5k+ | | | Non-prefixed constant |
| #7359 | All Currencies for WooCommerce | 85 | 17 | 3 | 1k+ | | | Missing Translators Comment |
| #7360 | Export Orders for WooCommerce – CSV, Excel, XML, JSON & PDF Export | 85 | 24 | 9 | 400 | | | wp function not compatible with requires wp |
| #7361 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | | | Output is not escaped |
| #7362 | WP fail2ban Add-on for Contact Form 7 | 85 | 10 | 18 | 800 | | | Non-prefixed constant |
| #7363 | WP fail2ban Add-on for Gravity Forms | 85 | 10 | 18 | 600 | | | Non-prefixed constant |
| #7364 | Flexible Map | 85 | 10 | 7 | 7k+ | | | Non-prefixed class |
| #7365 | WP Protect Content | 85 | 7 | 7 | 1k+ | | | Output is not escaped |
| #7366 | WP Revisions Control | 85 | 9 | 6 | 40k+ | | | wp function not compatible with requires wp |
| #7367 | WPC Estimated Delivery Date for WooCommerce | 85 | | 67 | 9k+ | | | Non-prefixed global variable |
| #7368 | WPC Variations Table for WooCommerce | 85 | | 34 | 400 | | | Non-prefixed hook name |
| #7369 | XO Security | 85 | 1 | 8 | 30k+ | | | Input is not sanitized |
| #7370 | Yuma Companion | 85 | 10 | 7 | 400 | | | Missing direct file access protection |
| #7371 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |
| #7372 | Advanced Custom Fields Contact Form 7 | 86 | 10 | 4 | 700 | | | Short PHP open tag found |
| #7373 | Featured image to All-Posts | 86 | 6 | 5 | 400 | | | Nonce verification recommended |
| #7374 | Admin Notice | 86 | 7 | 1 | 600 | | | Output is not escaped |
| #7375 | Advanced Queries | 86 | 6 | 11 | 10k+ | | | Non-prefixed constant |
| #7376 | AM LottiePlayer | 86 | 5 | 12 | 800 | | | Non-prefixed global variable |
| #7377 | Astra Widgets | 86 | 10 | 15 | 200k+ | | | Missing direct file access protection |
| #7378 | Block Pattern Builder | 86 | 10 | 5 | 600 | | | Missing Translators Comment |
| #7379 | Blockly – Gutenberg Blocks | 86 | 6 | 17 | 600 | | | Non-prefixed constant |
| #7380 | BNE Gallery Extended | 86 | 8 | 0 | 1k+ | | | Unsafe printing function |
| #7381 | Boxtal – Shipping solution | 86 | 3 | 92 | 9k+ | | | Non-prefixed global variable |
| #7382 | Browser Screenshots | 86 | 15 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #7383 | Catch Breadcrumb | 86 | 1 | 29 | 2k+ | | | Non-prefixed global variable |
| #7384 | CBX User Online & Last Login | 86 | 3 | 87 | 800 | | | Non-prefixed global variable |
| #7385 | AntiSpam for Contact Form 7 | 86 | 14 | 8 | 10k+ | | | Text Domain Mismatch |
| #7386 | Classic Editor + | 86 | 1 | 4 | 40k+ | | | Input is not sanitized |
| #7387 | CMB2 Field Type: Font Awesome | 86 | 10 | 1 | 400 | | | Offloaded Content |
| #7388 | Counters Block – Animated Number Counters, Stats & Dynamic KPIs | 86 | 5 | 14 | 3k+ | | | Missing direct file access protection |
| #7389 | Custom Content Width | 86 | 8 | 0 | 1k+ | | | Text Domain Mismatch |
| #7390 | Custom Error Messages for Gravity Forms | 86 | 3 | 4 | 400 | | | Output is not escaped |
| #7391 | Helpful – Article Feedback Plugin | 86 | 8 | 17 | 600 | | | Database parameter is not escaped |
| #7392 | Debug Bar Actions and Filters Addon | 86 | 6 | 4 | 400 | | | Forbidden PHP function found |
| #7393 | Eazy Under Construction | 86 | 82 | 0 | 600 | | | wp function not compatible with requires wp |
| #7394 | Twice Commerce – Easy Rental Booking System | 86 | 9 | 1 | 400 | | | Output is not escaped |
| #7395 | EP Exporter for Contact Form 7 (CF7) | 86 | | 19 | 400 | | | Database parameter is not escaped |
| #7396 | Extra Styling for MemberPress | 86 | 64 | 7 | 500 | | | Text Domain Mismatch |
| #7397 | Feed JSON | 86 | 9 | 15 | 500 | | | Non-prefixed global variable |
| #7398 | Flowplayer Video Player | 86 | 8 | 7 | 900 | | | Output is not escaped |
| #7399 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #7400 | GN Publisher: Google News Compatible RSS Feeds | 86 | 76 | 6 | 20k+ | | | wp function not compatible with requires wp |