| #901 | Linguise – AI Automatic Multilingual Translation | 31 | 61 | 284 | 1k+ | | | Non-prefixed global variable |
| #902 | Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity | 31 | 122 | 131 | 2k+ | | | Output is not escaped |
| #903 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | | | Unsafe printing function |
| #904 | MainWP Dashboard: Self-hosted WordPress Management for Agencies | 31 | 95 | 317 | 20k+ | | | Interpolated SQL is not prepared |
| #905 | Nova Blocks by Pixelgrade | 31 | 209 | 110 | 800 | | | Output is not escaped |
| #906 | PayKeeper Payment Gateway for WooCommerce | 31 | 113 | 44 | 500 | | | Non Singular String Literal Domain |
| #907 | افزونه پیامک ووکامرس Persian WooCommerce SMS | 31 | 72 | 269 | 40k+ | | | Nonce verification recommended |
| #908 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #909 | Portfolio, Gallery, Product Catalog – Grid KIT Portfolio | 31 | 61 | 329 | 6k+ | | | Non-prefixed global variable |
| #910 | Active Products Tables for WooCommerce. Use constructor to create tables | 31 | 364 | 424 | 1k+ | | | Output is not escaped |
| #911 | Raffle Play Woocommerce | 31 | 151 | 199 | 800 | | | Output is not escaped |
| #912 | Re:amaze Helpdesk & Live Chat | 31 | 96 | 115 | 400 | | | Output is not escaped |
| #913 | Accordion FAQ – Compatible With All Page Builder (Elementor, Gutenberg) | 31 | 460 | 201 | 30k+ | | | Non Singular String Literal Domain |
| #914 | Coming Soon Page & Maintenance Mode | 31 | 613 | 266 | 3k+ | | | Text Domain Mismatch |
| #915 | Social Share Buttons | 31 | 462 | 156 | 1k+ | | | Text Domain Mismatch |
| #916 | Slider Carousel – Image Slider | 31 | 224 | 1,233 | 3k+ | | | Request data is not unslashed |
| #917 | Smart Keywords Tool – 智能关键词插件 | 31 | 361 | 33 | 600 | | | Non Singular String Literal Domain |
| #918 | SpeedyCache – Cache, Optimization, Performance | 31 | 65 | 118 | 600k+ | | | Input is not validated |
| #919 | Staatic – Static Site Generator for WordPress | 31 | 420 | 195 | 2k+ | | | SQL query is not prepared |
| #920 | Swatchly – Product Variation Swatches for WooCommerce | 31 | 540 | 214 | 5k+ | | | Output is not escaped |
| #921 | Team Builder – Team Member Showcase With Grid and slider, Compatible With Elementor, Gutenberg | 31 | 459 | 282 | 7k+ | | | Non Singular String Literal Domain |
| #922 | Big File Uploads – Increase Maximum File Upload Size | 31 | 101 | 92 | 100k+ | | | Output is not escaped |
| #923 | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | 31 | 295 | 876 | 2k+ | | | Missing nonce verification |
| #924 | Web Push Notifications – Webpushr | 31 | 169 | 293 | 10k+ | | | Output is not escaped |
| #925 | Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker | 31 | 63 | 935 | 6k+ | | | Interpolated SQL is not prepared |
| #926 | Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 31 | 837 | 295 | 100k+ | | | Unsafe printing function |
| #927 | Return Refund and Exchange For WooCommerce | 31 | 24 | 713 | 4k+ | | | Non-prefixed global variable |
| #928 | WCPOS – Point of Sale (POS) plugin for WooCommerce | 31 | 75 | 226 | 5k+ | | | Nonce verification recommended |
| #929 | Tooltips for WordPress | 31 | 312 | 252 | 5k+ | | | Output is not escaped |
| #930 | Discussion Board – WordPress Forum Plugin | 31 | 105 | 153 | 2k+ | | | Request data is not unslashed |
| #931 | WPGatsby | 31 | 125 | 55 | 3k+ | | | Text Domain Mismatch |
| #932 | WP ULike – Like & Dislike Buttons for Engagement and Feedback | 31 | 269 | 358 | 60k+ | | | Output is not escaped |
| #933 | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | 31 | 167 | 332 | 5m+ | | | Non-prefixed global variable |
| #934 | One to one user Chat by WPGuppy | 31 | 74 | 187 | 700 | | | Non-prefixed global variable |
| #935 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | | | Non-prefixed global variable |
| #936 | Dynamic XML Sitemaps Generator for Google | 31 | 75 | 411 | 20k+ | | | Non-prefixed global variable |
| #937 | YITH Color and Label Variations for WooCommerce | 31 | 393 | 1,428 | 9k+ | | | Non-prefixed global variable |
| #938 | YITH Frequently Bought Together for WooCommerce | 31 | 389 | 1,452 | 8k+ | | | Non-prefixed global variable |
| #939 | Zendesk Support for WordPress | 31 | 195 | 88 | 2k+ | | | Output is not escaped |
| #940 | PayPal Zettle POS for WooCommerce | 31 | 302 | 44 | 4k+ | | | Exception output is not escaped |
| #941 | Affiliate Coupons – Coupon Display Manager – Excellent Tool for Affiliate Marketers | 32 | 183 | 61 | 1k+ | | | Output is not escaped |
| #942 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #943 | Bosa Elementor Addons and Templates for WooCommerce | 32 | 40 | 165 | 20k+ | | | slow db query tax query |
| #944 | Quantity Discounts, Breaks & Product Bundles for Woocommerce By Bundler | 32 | 147 | 319 | 400 | | | Direct Query |
| #945 | Vimeotheque – Vimeo WordPress Plugin & Video Gallery | 32 | 642 | 264 | 2k+ | | | Unsafe printing function |
| #946 | Contact Form Builder by vcita | 32 | 666 | 174 | 700 | | | Text Domain Mismatch |
| #947 | DHL eCommerce (Benelux) for WooCommerce | 32 | 222 | 330 | 2k+ | | | Nonce verification recommended |
| #948 | Enter Addons – Ultimate Template Builder for Elementor | 32 | 82 | 72 | 1k+ | | | Output is not escaped |
| #949 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | 32 | 560 | 198 | 5k+ | | | Text Domain Mismatch |
| #950 | AC's Loan Calculator | 32 | 246 | 187 | 400 | | | Unsafe printing function |