| #951 | Verge3D Publishing and E-Commerce | 27 | 245 | 298 | 400 | | | Nonce verification recommended |
| #952 | Video Gallery for WooCommerce – Add Product Video & Featured Video | 27 | 116 | 476 | 3k+ | | | Non-prefixed global variable |
| #953 | VOD Infomaniak | 27 | 797 | 385 | 20k+ | | | Output is not escaped |
| #954 | Watu Quiz | 27 | 1,089 | 1,014 | 3k+ | | | Output is not escaped |
| #955 | WC Booster | 27 | 191 | 282 | 800 | | | Non-prefixed global variable |
| #956 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | 27 | 109 | 801 | 30k+ | | | Missing nonce verification |
| #957 | Whols – Wholesale Prices and B2B Store Solution for WooCommerce | 27 | 228 | 235 | 2k+ | | | Output is not escaped |
| #958 | Wiremo – Product Reviews for WooCommerce | 27 | 445 | 212 | 700 | | | Output is not escaped |
| #959 | Tabbed Category Product Listing for Woocommerce | 27 | 423 | 111 | 1k+ | | | Text Domain Mismatch |
| #960 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #961 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #962 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #963 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | | | Input is not sanitized |
| #964 | wp-mpdf | 27 | 123 | 382 | 1k+ | | | Non-prefixed global variable |
| #965 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #966 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #967 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #968 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | | | Text Domain Mismatch |
| #969 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #970 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #971 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #972 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms | 28 | 659 | 359 | 400 | | | Text Domain Mismatch |
| #973 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #974 | Maspik – Ultimate Spam Protection | 28 | 212 | 862 | 30k+ | | | Missing nonce verification |
| #975 | Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin | 28 | 639 | 85 | 1k+ | | | Text Domain Mismatch |
| #976 | Database Cleaner | 28 | 139 | 294 | 10k+ | | | Direct Query |
| #977 | Deposits & Partial Payments for WooCommerce – Bayna | 28 | 593 | 336 | 1k+ | | | Output is not escaped |
| #978 | Discount Rules and Dynamic Pricing for WooCommerce | 28 | 181 | 334 | 10k+ | | | Output is not escaped |
| #979 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #980 | Educare – Students & Result Management System | 28 | 1,114 | 1,043 | 800 | | | Missing nonce verification |
| #981 | Expand Divi | 28 | 91 | 100 | 1k+ | | | Non-prefixed global variable |
| #982 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #983 | Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules | 28 | 187 | 505 | 2k+ | | | Non-prefixed global variable |
| #984 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #985 | گیتلند | درگاه پرداخت هوشمند گیتلند | 28 | 327 | 235 | 3k+ | | | Output is not escaped |
| #986 | Geo Mashup | 28 | 775 | 232 | 1k+ | | | Text Domain Mismatch |
| #987 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |
| #988 | GTmetrix for WordPress | 28 | 109 | 70 | 8k+ | | | Output is not escaped |
| #989 | IdeaPush | 28 | 283 | 298 | 700 | | | Output is not escaped |
| #990 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #991 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 200k+ | | | Missing Arg Domain |
| #992 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #993 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 5k+ | | | Non Singular String Literal Domain |
| #994 | درگاه پرداخت بانک ملت ووکامرس | 28 | 61 | 130 | 2k+ | | | Request data is not unslashed |
| #995 | MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | 28 | 62 | 246 | 600k+ | | | Non-prefixed global variable |
| #996 | My auctions allegro | 28 | 483 | 235 | 500 | | | Non Singular String Literal Domain |
| #997 | My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) | 28 | 164 | 441 | 100k+ | | | Non-prefixed global variable |
| #998 | Notification for Telegram | 28 | 189 | 93 | 4k+ | | | Output is not escaped |
| #999 | Store Hours for WooCommerce | 28 | 525 | 60 | 2k+ | | | Output is not escaped |
| #1000 | Order Tracking – WordPress Status Tracking Plugin | 28 | 619 | 773 | 3k+ | | | Unsafe printing function |