| #2751 | Simple Header Footer HTML | 35 | 30 | 5 | 3k+ | | | Output is not escaped |
| #2752 | Simple History – Track, Log, and Audit WordPress Changes | 35 | 32 | 122 | 300k+ | | | Non-prefixed global variable |
| #2753 | Simple Image Sizes | 35 | 53 | 75 | 60k+ | | | Unsafe printing function |
| #2754 | Simple Map | 35 | 10 | 1 | 10k+ | | | Output is not escaped |
| #2755 | Simple Popup Block | 35 | 14 | 1 | 500 | | | Missing direct file access protection |
| #2756 | Simple Post Type Permalinks | 35 | 16 | 1 | 9k+ | | | date date |
| #2757 | Simple Website Redirect | 35 | 3 | 3 | 5k+ | | | Discouraged text-domain loading |
| #2758 | Simple Yearly Archive | 35 | 102 | 36 | 6k+ | | | Unsafe printing function |
| #2759 | Simple YouTube Responsive | 35 | 75 | 8 | 3k+ | | | wp function not compatible with requires wp |
| #2760 | Simple Analytics | 35 | 25 | 20 | 1k+ | | | Output is not escaped |
| #2761 | SimpleTOC – Table of Contents Block | 35 | 10 | 0 | 10k+ | | | Setting is missing a sanitization callback |
| #2762 | SiteGround Migrator | 35 | 113 | 74 | 80k+ | | | Missing Arg Domain |
| #2763 | Sitekit | 35 | 122 | 8 | 3k+ | | | Output is not escaped |
| #2764 | Sky Login Redirect | 35 | 7 | 24 | 2k+ | | | Non-prefixed hook name |
| #2765 | Slick Slider | 35 | 36 | 9 | 2k+ | | | Output is not escaped |
| #2766 | Slope Widgets | 35 | 5 | 49 | 500 | | | Non-prefixed global variable |
| #2767 | Smart Auto Upload Images – Import External Images | 35 | 2 | 1 | 5k+ | | | Hidden files included |
| #2768 | SMNTCS Custom Logo Link | 35 | 48 | 1 | 3k+ | | | badly named files |
| #2769 | SMNTCS Deactivate image compression | 35 | 6 | 1 | 1k+ | | | Hidden files included |
| #2770 | SMNTCS Disable REST API User Endpoints | 35 | 8 | 0 | 7k+ | | | Hidden files included |
| #2771 | SMNTCS Google Webmaster Tools | 35 | 8 | 0 | 6k+ | | | Hidden files included |
| #2772 | SMNTCS Quantity Increment Buttons for WooCommerce | 35 | 15 | 2 | 2k+ | | | Hidden files included |
| #2773 | SiteOrigin CSS | 35 | 61 | 84 | 100k+ | | | Not In Footer |
| #2774 | WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat | 35 | 28 | 31 | 90k+ | | | Input is not sanitized |
| #2775 | Quiz Maker, Poll Maker & Survey Maker by Opinion Stage | 35 | 42 | 32 | 6k+ | | | Output is not escaped |
| #2776 | Social Sharing Plugin – Social Warfare | 35 | 17 | 143 | 20k+ | | | Non-prefixed class |
| #2777 | Sold Out Badge for WooCommerce | 35 | 5 | 4 | 8k+ | | | Output is not escaped |
| #2778 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #2779 | Spacious Toolkit | 35 | 48 | 94 | 700 | | | Non-prefixed global variable |
| #2780 | Ray | 35 | 3 | 2 | 500 | | | Hidden files included |
| #2781 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 241 | 1,276 | 8k+ | | | Non-prefixed global variable |
| #2782 | Speedy Page Redirect | 35 | 6 | 10 | 1k+ | | | Output is not escaped |
| #2783 | Spots | 35 | 195 | 49 | 800 | | | Output is not escaped |
| #2784 | Spreadshop Plugin | 35 | 145 | 44 | 4k+ | | | wp function not compatible with requires wp |
| #2785 | Sprout Invoices – Client Invoicing & Estimates | 35 | 40 | 1,800 | 1k+ | | | Non-prefixed hook name |
| #2786 | Square Thumbnails | 35 | 43 | 317 | 800 | | | error log error log |
| #2787 | SrbTransLatin – Serbian Latinisation | 35 | 11 | 28 | 2k+ | | | Non-prefixed global variable |
| #2788 | SSL Insecure Content Fixer | 35 | 28 | 60 | 100k+ | | | Input is not sanitized |
| #2789 | Stars Testimonials — Responsive Reviews & Star Ratings | 35 | 29 | 253 | 1k+ | | | Non-prefixed global variable |
| #2790 | Steady for WordPress | 35 | 6 | 13 | 600 | | | Non-prefixed global variable |
| #2791 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons | 35 | 33 | 293 | 10k+ | | | Non-prefixed global variable |
| #2792 | Sticky Social Link | 35 | 49 | 2 | 1k+ | | | Output is not escaped |
| #2793 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 35 | | 524 | 600 | | | Non-prefixed global variable |
| #2794 | String locator | 35 | 52 | 319 | 100k+ | | | Non-prefixed global variable |
| #2795 | Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress | 35 | 106 | 145 | 500 | | | Non-prefixed global variable |
| #2796 | SumUp Payment Gateway For WooCommerce | 35 | 29 | 62 | 10k+ | | | Nonce verification recommended |
| #2797 | Super Cool Ad Inserter Plugin | 35 | 22 | 5 | 600 | | | Text Domain Mismatch |
| #2798 | Svea Checkout for WooCommerce | 35 | 18 | 72 | 800 | | | Request data is not unslashed |
| #2799 | SweepPress: Website Cleanup and Optimization | 35 | 71 | 176 | 500 | | | Non-prefixed global variable |
| #2800 | ووسلام – همگام سازی ووکامرس و باسلام | 35 | 82 | 426 | 4k+ | | | Non-prefixed global variable |