| #901 | Social Web Suite – Social Media Auto Post, Social Media Auto Publish | 27 | 74 | 164 | 500 | | | Non-prefixed global variable |
| #902 | Speed Booster Pack ⚡ PageSpeed Optimization Suite | 27 | 108 | 187 | 9k+ | | | Missing Translators Comment |
| #903 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #904 | Theme One Click Demo Importer | 27 | 210 | 157 | 500 | | | Text Domain Mismatch |
| #905 | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | 27 | 165 | 430 | 100k+ | | | Non-prefixed global variable |
| #906 | Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 27 | 25 | 1,320 | 3k+ | | | Non-prefixed global variable |
| #907 | Transbank Webpay | 27 | 198 | 211 | 10k+ | | | Non-prefixed global variable |
| #908 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | | | Direct Query |
| #909 | Video Gallery for WooCommerce – Add Product Video & Featured Video | 27 | 116 | 476 | 3k+ | | | Non-prefixed global variable |
| #910 | VOD Infomaniak | 27 | 797 | 385 | 20k+ | | | Output is not escaped |
| #911 | Whols – Wholesale Prices and B2B Store Solution for WooCommerce | 27 | 228 | 235 | 2k+ | | | Output is not escaped |
| #912 | Wiremo – Product Reviews for WooCommerce | 27 | 445 | 212 | 700 | | | Output is not escaped |
| #913 | Tabbed Category Product Listing for Woocommerce | 27 | 423 | 111 | 1k+ | | | Text Domain Mismatch |
| #914 | Mihdan: Ajax Edit Comments | 27 | 1,300 | 523 | 400 | | | Text Domain Mismatch |
| #915 | WP-DBManager | 27 | 386 | 304 | 60k+ | | | Non-prefixed global variable |
| #916 | Email Marketing Plugin – WP Email Capture | 27 | 383 | 262 | 1k+ | | | Output is not escaped |
| #917 | WP Hide & Security Enhancer | 27 | 124 | 375 | 50k+ | | | Input is not sanitized |
| #918 | WP Activity Log | 27 | 96 | 230 | 300k+ | | | Nonce verification recommended |
| #919 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #920 | WPBase Cache | 27 | 189 | 113 | 2k+ | | | Text Domain Mismatch |
| #921 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #922 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | | | Text Domain Mismatch |
| #923 | Vertex Addons for Elementor | 28 | 232 | 413 | 400 | | | Output is not escaped |
| #924 | AForms — Form Builder for Price Calculator & Cost Estimation | 28 | 564 | 95 | 3k+ | | | Text Domain Mismatch |
| #925 | AJAX Login and Registration modal popup + inline form | 28 | 157 | 261 | 3k+ | | | Output is not escaped |
| #926 | Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 632 | 351 | 800 | | | Text Domain Mismatch |
| #927 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #928 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #929 | WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms | 28 | 659 | 359 | 400 | | | Text Domain Mismatch |
| #930 | Code Engine – PHP Snippets, AI Functions & Automation for WordPress | 28 | 125 | 97 | 700 | | | Non Singular String Literal Domain |
| #931 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |
| #932 | Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin | 28 | 639 | 85 | 1k+ | | | Text Domain Mismatch |
| #933 | Database Cleaner | 28 | 139 | 294 | 10k+ | | | Direct Query |
| #934 | Deposits & Partial Payments for WooCommerce – Bayna | 28 | 593 | 336 | 1k+ | | | Output is not escaped |
| #935 | Discount Rules and Dynamic Pricing for WooCommerce | 28 | 181 | 334 | 10k+ | | | Output is not escaped |
| #936 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |
| #937 | FAPI Member | 28 | 279 | 153 | 500 | | | Exception output is not escaped |
| #938 | Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules | 28 | 187 | 505 | 2k+ | | | Non-prefixed global variable |
| #939 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #940 | Geo Mashup | 28 | 775 | 232 | 1k+ | | | Text Domain Mismatch |
| #941 | GS Books Showcase – Display Books in Grid, Slider & More | Library for WordPress | 28 | 55 | 437 | 500 | | | Non-prefixed global variable |
| #942 | Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | 28 | 384 | 175 | 10k+ | | | Text Domain Mismatch |
| #943 | HootKit | 28 | 429 | 1,295 | 8k+ | | | Non-prefixed global variable |
| #944 | Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 641 | 348 | 1k+ | | | Text Domain Mismatch |
| #945 | Kadence Starter Templates — Predesigned Website Templates | 28 | 312 | 215 | 200k+ | | | Missing Arg Domain |
| #946 | WP to LinkedIn Auto Publish | 28 | 734 | 250 | 900 | | | Unsafe printing function |
| #947 | Maven Algolia | 28 | 148 | 89 | 6k+ | | | Non Singular String Literal Domain |
| #948 | درگاه پرداخت بانک ملت ووکامرس | 28 | 61 | 130 | 2k+ | | | Request data is not unslashed |
| #949 | Notification – Custom Notifications and Alerts for WordPress | 28 | 186 | 219 | 10k+ | | | Non-prefixed global variable |
| #950 | Notification for Telegram | 28 | 189 | 93 | 4k+ | | | Output is not escaped |