| #951 | Amazon Product in a Post Plugin | 27 | 362 | 416 | 800 | | | Output is not escaped |
| #952 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #953 | Arconix FAQ | 27 | 552 | 201 | 6k+ | | | Text Domain Mismatch |
| #954 | Lean Player – Video and Audio Player with Playlist for WordPress, Elementor and Gutenberg | 27 | 1,615 | 466 | 2k+ | | | Text Domain Mismatch |
| #955 | BackUpWordPress | 27 | 245 | 271 | 90k+ | | | Non-prefixed global variable |
| #956 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #957 | WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | 27 | 692 | 381 | 3k+ | | | Text Domain Mismatch |
| #958 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | | | Non-prefixed function |
| #959 | Comment Link Remove and Other Comment Tools | 27 | 691 | 132 | 7k+ | | | Text Domain Mismatch |
| #960 | Duplicate Post | 27 | 447 | 274 | 300k+ | | | Unsafe printing function |
| #961 | Custom Scrollbar | 27 | 184 | 191 | 2k+ | | | Output is not escaped |
| #962 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | | | Output is not escaped |
| #963 | Gallery – Photo Albums Plugin | 27 | 647 | 252 | 2k+ | | | Output is not escaped |
| #964 | Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 27 | 289 | 751 | 10k+ | | | Output is not escaped |
| #965 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | | | Output is not escaped |
| #966 | Embedder for Google Reviews | 27 | 531 | 1,333 | 6k+ | | | Non-prefixed global variable |
| #967 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | | | Output is not escaped |
| #968 | Events Calendar for GeoDirectory | 27 | 1,262 | 462 | 2k+ | | | Text Domain Mismatch |
| #969 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | | | Non-prefixed global variable |
| #970 | Extra Product Options for WooCommerce | 27 | 548 | 1,342 | 600 | | | Non-prefixed global variable |
| #971 | FG Joomla to WordPress | 27 | 278 | 101 | 7k+ | | | Unsafe printing function |
| #972 | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 27 | 1,629 | 360 | 7k+ | | | Unsafe printing function |
| #973 | StylePress for Elementor | 27 | 767 | 283 | 600 | | | Text Domain Mismatch |
| #974 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #975 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #976 | GSpeech TTS – WordPress Text To Speech Plugin | 27 | 842 | 333 | 3k+ | | | Output is not escaped |
| #977 | Hester Core | 27 | 253 | 103 | 10k+ | | | Output is not escaped |
| #978 | ImageRecycle pdf & image compression | 27 | 329 | 204 | 1k+ | | | Text Domain Mismatch |
| #979 | My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam | 27 | 713 | 321 | 10k+ | | | Text Domain Mismatch |
| #980 | Ray Enterprise Translation | 27 | 87 | 606 | 8k+ | | | Non-prefixed global variable |
| #981 | Liza Widget For Spotify and Elementor | 27 | 609 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #982 | Loco Translate | 27 | 451 | 225 | 1m+ | | | Output is not escaped |
| #983 | Login Security Solution | 27 | 216 | 154 | 4k+ | | | Output is not escaped |
| #984 | Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder | 27 | 76 | 459 | 3k+ | | | Non-prefixed namespace |
| #985 | MakeCommerce for WooCommerce | 27 | 826 | 452 | 3k+ | | | Text Domain Mismatch |
| #986 | Memberful – Membership Plugin | 27 | 351 | 336 | 1k+ | | | Text Domain Mismatch |
| #987 | MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) | 27 | 154 | 551 | 5k+ | | | Non-prefixed global variable |
| #988 | Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher | 27 | 465 | 345 | 3k+ | | | Text Domain Mismatch |
| #989 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | | | Output is not escaped |
| #990 | Online Lesson Booking | 27 | 978 | 281 | 500 | | | Non Singular String Literal Domain |
| #991 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | | | Text Domain Mismatch |
| #992 | Packlink PRO for WooCommerce | 27 | 132 | 160 | 20k+ | | | Non-prefixed global variable |
| #993 | picu – Online Photo Proofing Gallery | 27 | 613 | 325 | 2k+ | | | Output is not escaped |
| #994 | PowerPack Lite for Beaver Builder | 27 | 2,842 | 375 | 7k+ | | | Text Domain Mismatch |
| #995 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | | | Missing Translators Comment |
| #996 | Quick Paypal Payments | 27 | 101 | 303 | 1k+ | | | Non-prefixed function |
| #997 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #998 | Robokassa payment gateway for Woocommerce | 27 | 95 | 211 | 3k+ | | | Non-prefixed global variable |
| #999 | Shipit | 27 | 371 | 209 | 400 | | | Text Domain Mismatch |
| #1000 | Side Cart Woocommerce | Woocommerce Cart | 27 | 490 | 439 | 80k+ | | | Output is not escaped |