| #7451 | Sold Individually for WooCommerce Product Variations | 86 | 2 | 6 | 800 | | | Missing nonce verification |
| #7452 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #7453 | WooCommerce Payfast Gateway | 86 | 90 | 47 | 30k+ | | | Text Domain Mismatch |
| #7454 | WordClever – AI Content Writer | 86 | 4 | 2 | 3k+ | | | Missing direct file access protection |
| #7455 | WP Consent API | 86 | 2 | 10 | 200k+ | | | Input is not sanitized |
| #7456 | WP fancybox | 86 | 7 | 8 | 1k+ | | | Output is not escaped |
| #7457 | WP Image Size Limit | 86 | 7 | 6 | 3k+ | | | Output is not escaped |
| #7458 | WP Upload Restriction | 86 | 59 | 16 | 2k+ | | | Text Domain Mismatch |
| #7459 | WP YouTube Live | 86 | 28 | 24 | 1k+ | | | Non-prefixed function |
| #7460 | WP101 Video Tutorial Plugin | 86 | 15 | 18 | 10k+ | | | Missing direct file access protection |
| #7461 | WPUpper Share Buttons | 86 | 4 | 74 | 4k+ | | | Dynamic hook name |
| #7462 | Яндекс Поделиться | 86 | 9 | 4 | 900 | | | Unsafe printing function |
| #7463 | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 87 | | 18 | 10k+ | | | Database parameter is not escaped |
| #7464 | Advanced Image Comparison for Elementor | 87 | 1 | 5 | 1k+ | | | Nonce verification recommended |
| #7465 | Alligator Menu Popup | 87 | 4 | 1 | 600 | | | Missing Arg Domain |
| #7466 | Apaczka.pl Mapa Punktów | 87 | 8 | 9 | 2k+ | | | Missing nonce verification |
| #7467 | Author Filters | 87 | 2 | 7 | 1k+ | | | Nonce verification recommended |
| #7468 | Authors List | 87 | 2 | 16 | 5k+ | | | Nonce verification recommended |
| #7469 | bbPress Enable TinyMCE Visual Tab | 87 | 12 | 4 | 600 | | | Text Domain Mismatch |
| #7470 | Better Addons for Elementor | 87 | 125 | 221 | 4k+ | | | Non-prefixed global variable |
| #7471 | Catch Infinite Scroll | 87 | | 20 | 10k+ | | | Non-prefixed global variable |
| #7472 | Contact Form 7 Spam Killer | 87 | 1 | 21 | 4k+ | | | Missing nonce verification |
| #7473 | CF7 Google Captcha Load After Page | 87 | 7 | 2 | 2k+ | | | Output is not escaped |
| #7474 | Click To Tweet | 87 | 8 | 7 | 2k+ | | | trademarked term |
| #7475 | CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) | 87 | 1 | 291 | 1m+ | | | Non-prefixed global variable |
| #7476 | Cookie Notice lite | 87 | 3 | 1 | 400 | | | Missing direct file access protection |
| #7477 | SmartText Rotator – Add Motion to Your Words | 87 | 88 | 6 | 1k+ | | | Text Domain Mismatch |
| #7478 | Customize Private & Protected – Change or remove title prefix and more | 87 | 14 | 5 | 400 | | | Non Singular String Literal Text |
| #7479 | Customizer Search | 87 | 10 | 1 | 50k+ | | | Missing direct file access protection |
| #7480 | Autolinks Manager – SEO Auto Linker | 87 | 7 | 16 | 1k+ | | | Database parameter is not escaped |
| #7481 | Disable Block Editor FullScreen mode | 87 | 6 | 2 | 1k+ | | | Output is not escaped |
| #7482 | Disable User Password Reset Admin Notifications | 87 | 6 | 2 | 1k+ | | | Nonce verification recommended |
| #7483 | Donorbox – Free Recurring Donation Plugin and Fundraising Platform | 87 | 5 | 6 | 8k+ | | | Missing Arg Domain |
| #7484 | Easy Notification Bar | 87 | 6 | 2 | 9k+ | | | Output is not escaped |
| #7485 | Enable Abilities for MCP | 87 | | 48 | 1k+ | | | Direct Query |
| #7486 | Farsi Font for Elementor | 87 | 11 | 2 | 1k+ | | | Missing Translators Comment |
| #7487 | Entry Expiration for Gravity Forms | 87 | 8 | 2 | 1k+ | | | Missing direct file access protection |
| #7488 | GTM Kit – Google Tag Manager & GA4 integration | 87 | 5 | 17 | 30k+ | | | Missing direct file access protection |
| #7489 | Simple Slider Block – Create Sliders From Core Blocks | 87 | 6 | 34 | 600 | | | Non-prefixed global variable |
| #7490 | I Recommend This – Love/Like Button for WordPress Posts | 87 | 3 | 49 | 5k+ | | | Direct Query |
| #7491 | Image Optimization – Compress Images and Convert to WebP or AVIF | 87 | 15 | 24 | 1m+ | | | Missing Translators Comment |
| #7492 | Image Ticker Carousel | by Creavi | 87 | 2 | 17 | 400 | | | Nonce verification recommended |
| #7493 | ImageKit – URL based image manipulation and optimization | 87 | 47 | 42 | 1k+ | | | Non-prefixed global variable |
| #7494 | iPanorama 360 – Advanced Virtual Tour Builder | 87 | 726 | 34 | 5k+ | | | Text Domain Mismatch |
| #7495 | Last Modified Timestamp | 87 | 9 | 3 | 7k+ | | | Output is not escaped |
| #7496 | Livebeep – Chatbot, Live Chat, CRM & Digital Marketing | 87 | 7 | 4 | 400 | | | Output is not escaped |
| #7497 | Booking Engine by Lodgify | 87 | 5 | 15 | 700 | | | Non-prefixed global variable |
| #7498 | Manage/View Your Posts Only | 87 | 5 | 3 | 400 | | | Input is not sanitized |
| #7499 | Marin Companion | 87 | 19 | 66 | 500 | | | Non-prefixed global variable |
| #7500 | Menu Caching | 87 | 3 | 12 | 400 | | | Request data is not unslashed |