| #1001 | Civic Cookie Control | 33 | 1,881 | 219 | 2k+ | | | Text Domain Mismatch |
| #1002 | Companion Sitemap Generator – Simple, Smart, and SEO-Ready | 33 | 118 | 57 | 7k+ | | | Missing Translators Comment |
| #1003 | Contact Form Plugin | 33 | 47 | 220 | 2k+ | | | Non-prefixed function |
| #1004 | Contact List – Online Staff Directory & Address Book | 33 | 118 | 342 | 1k+ | | | Nonce verification recommended |
| #1005 | DJ-Accessibility – Accessibility Plugin | 33 | 370 | 48 | 3k+ | | | Text Domain Mismatch |
| #1006 | Human Presence – Stop Form Spam Without ReCaptcha | 33 | 54 | 65 | 1k+ | | | Request data is not unslashed |
| #1007 | FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN | 33 | 51 | 333 | 4k+ | | | Request data is not unslashed |
| #1008 | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | 33 | 48 | 370 | 300k+ | | | Non-prefixed global variable |
| #1009 | WP GIF Uploader | 33 | 117 | 44 | 1k+ | | | Text Domain Mismatch |
| #1010 | Comments – GraphComment | AI-Moderated Comment System | 33 | 191 | 177 | 400 | | | Unsafe printing function |
| #1011 | Ultimate Addons for Elementor | 33 | 81 | 291 | 2m+ | | | Non-prefixed class |
| #1012 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | 33 | 377 | 139 | 20k+ | | | Unsafe printing function |
| #1013 | Image Source Control Lite – Show Image Credits and Captions | 33 | 140 | 221 | 3k+ | | | Non-prefixed hook name |
| #1014 | WPZOOM Social Feed Widget & Block | 33 | 310 | 278 | 60k+ | | | Unsafe printing function |
| #1015 | Janolaw AGB Hosting | 33 | 198 | 11 | 1k+ | | | Short PHP open tag found |
| #1016 | Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid | 33 | 274 | 106 | 3k+ | | | Text Domain Mismatch |
| #1017 | Forms for Mailchimp by Optin Cat – Grow Your MailChimp List | 33 | 71 | 133 | 2k+ | | | Missing direct file access protection |
| #1018 | MailUp for WordPress – Email and Newsletter Subscription Form | 33 | 251 | 100 | 2k+ | | | Text Domain Mismatch |
| #1019 | MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics | 33 | 26 | 279 | 7k+ | | | Non-prefixed global variable |
| #1020 | MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | 33 | 2 | 503 | 800 | | | Non-prefixed function |
| #1021 | Molongui Post Contributors: Multi-Role Contributor Attribution | 33 | 240 | 162 | 500 | | | Output is not escaped |
| #1022 | Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More | 33 | 293 | 215 | 1k+ | | | Text Domain Mismatch |
| #1023 | Offen | 33 | 313 | 115 | 500 | | | Output is not escaped |
| #1024 | پینوا | Pinova | 33 | 171 | 75 | 500 | | | Output is not escaped |
| #1025 | PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements | 33 | 140 | 182 | 3k+ | | | Missing Translators Comment |
| #1026 | Reviews Plus | 33 | 223 | 378 | 1k+ | | | Non-prefixed function |
| #1027 | RTMKit | 33 | 11 | 388 | 50k+ | | | Non-prefixed global variable |
| #1028 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | | | SQL query is not prepared |
| #1029 | Save as PDF Plugin by PDFCrowd | 33 | 299 | 254 | 1k+ | | | Non-prefixed global variable |
| #1030 | Service Box – Icon Box Showcase | 33 | 385 | 230 | 3k+ | | | Non Singular String Literal Domain |
| #1031 | TaxCloud for WooCommerce | 33 | 23 | 261 | 500 | | | Non-prefixed function |
| #1032 | Slider Path for Elementor | 33 | 329 | 100 | 700 | | | Text Domain Mismatch |
| #1033 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #1034 | Social Rocket – Social Sharing Plugin | 33 | 1,016 | 255 | 1k+ | | | Unsafe printing function |
| #1035 | Spin Wheel – Interactive spinning wheel that offers coupons | 33 | 680 | 313 | 500 | | | Unsafe printing function |
| #1036 | Gravity Booster – Styles & Layouts for Gravity Forms | 33 | 277 | 87 | 40k+ | | | Missing Arg Domain |
| #1037 | Testimonial Slider – Free Testimonials Slider Plugin | 33 | 91 | 50 | 700 | | | Request data is not unslashed |
| #1038 | Product Addons for Woocommerce – Product Options with Custom Fields | 33 | 124 | 114 | 30k+ | | | Output is not escaped |
| #1039 | Books Gallery – Book Showcase, Library & Affiliate Plugin | 33 | 1,753 | 178 | 2k+ | | | Output is not escaped |
| #1040 | WP EXtra – One Click Optimize | 33 | 414 | 101 | 7k+ | | | Missing Arg Domain |
| #1041 | EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time | 33 | 82 | 138 | 70k+ | | | Non-prefixed global variable |
| #1042 | WP Multilang – Translation and Multilingual Plugin | 33 | 53 | 118 | 10k+ | | | Database parameter is not escaped |
| #1043 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #1044 | Editor Blocks by Download Manager | 33 | 174 | 102 | 5k+ | | | Output is not escaped |
| #1045 | WPoperation Elementor Addons | 33 | 891 | 52 | 1k+ | | | Text Domain Mismatch |
| #1046 | WPReplace内容字符替换插件 | 33 | 209 | 195 | 800 | | | Non Singular String Literal Domain |
| #1047 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | | | Missing Arg Domain |
| #1048 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | | | Text Domain Mismatch |
| #1049 | All In One Favicon | 34 | 214 | 62 | 60k+ | | | Output is not escaped |
| #1050 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | | | Exception output is not escaped |