| #901 | Ultimate Post Kit Addons for Elementor | 24 | 183 | 412 | 30k+ | | | Missing nonce verification |
| #902 | jQuery Updater | 97 | 8 | 4 | 20k+ | | | library core files |
| #903 | Tools for Twitter | 34 | 135 | 87 | 1k+ | | | Output is not escaped |
| #904 | Quick Featured Images | 32 | 436 | 323 | 50k+ | | | Non-prefixed global variable |
| #905 | Easy HTTPS Redirection (SSL) | 29 | 266 | 152 | 100k+ | | | Unsafe printing function |
| #906 | Heartbeat Control | 35 | 27 | 18 | 80k+ | | | Missing Arg Domain |
| #907 | Elementor Beta (Developer Edition) | 57 | 36 | 32 | 30k+ | | | Output is not escaped |
| #908 | Custom Field Template | 29 | 568 | 530 | 30k+ | | | wp function not compatible with requires wp |
| #909 | Directorist: AI-Powered Business Directory, Listings & Classified Ads | 22 | 549 | 2,177 | 20k+ | | | Non-prefixed global variable |
| #910 | FunnelKit – Funnel Builder for WooCommerce Checkout | 25 | 3,164 | 2,624 | 30k+ | | | Text Domain Mismatch |
| #911 | iQ Block Country | 27 | 164 | 245 | 20k+ | | | Request data is not unslashed |
| #912 | Disable Emojis (GDPR friendly) | 100 | 1 | 0 | 60k+ | | | Missing direct file access protection |
| #913 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #914 | Solid Mail – SMTP email and logging made by SolidWP | 68 | 16 | 17 | 60k+ | | | Database parameter is not escaped |
| #915 | Weblizar Pin It Button On Image Hover And Post | 100 | | 1 | 10k+ | | | trademarked term |
| #916 | Remove Footer Credit | 85 | 7 | 31 | 70k+ | | | Non-prefixed global variable |
| #917 | Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 27 | 289 | 751 | 10k+ | | | Output is not escaped |
| #918 | SearchWP Live Ajax Search | 78 | 8 | 23 | 50k+ | | | Non-prefixed global variable |
| #919 | Genesis eNews Extended | 82 | 9 | 1 | 40k+ | | | Output is not escaped |
| #920 | Pricing Table by Supsystic | 23 | 1,299 | 447 | 10k+ | | | Non Singular String Literal Domain |
| #921 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | | | Text Domain Mismatch |
| #922 | LearnPress – Course Review | 37 | 67 | 43 | 20k+ | | | Output is not escaped |
| #923 | QuadMenu – Mega Menu | 25 | 2,128 | 455 | 10k+ | | | Output is not escaped |
| #924 | Restricted Site Access | 91 | 14 | 11 | 10k+ | | | Missing Arg Domain |
| #925 | Image Watermark | 35 | 85 | 181 | 40k+ | | | Missing nonce verification |
| #926 | Modular DS: Monitor, update, and backup multiple websites | 21 | 159 | 81 | 40k+ | | | Exception output is not escaped |
| #927 | Flexible SSL for CloudFlare | 35 | 9 | 6 | 100k+ | | | Output is not escaped |
| #928 | Login & Register Forms – Popup | Slider | Inline | WooCommerce | 33 | 177 | 478 | 40k+ | | | Non-prefixed global variable |
| #929 | Snow Monkey Blocks | 92 | 87 | 173 | 30k+ | | | Non-prefixed global variable |
| #930 | Booking Package | 25 | 1,697 | 3,977 | 10k+ | | | Missing nonce verification |
| #931 | YITH Request a Quote for WooCommerce | 31 | 408 | 1,481 | 10k+ | | | Non-prefixed global variable |
| #932 | Aruba HiSpeed Cache | 97 | 12 | 5 | 100k+ | | | wp function not compatible with requires wp |
| #933 | SpiceBox | 24 | 828 | 1,816 | 20k+ | | | Non-prefixed global variable |
| #934 | Advanced Contact form 7 DB | 24 | 764 | 1,960 | 70k+ | | | Non-prefixed global variable |
| #935 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #936 | SimpLy Gallery | 25 | 532 | 1,422 | 40k+ | | | Non-prefixed global variable |
| #937 | SEO Redirection Plugin – 301 Redirect Manager | 23 | 272 | 727 | 10k+ | | | Non-prefixed global variable |
| #938 | Portfolio Filter Gallery – Photo Gallery & Video Gallery | 85 | 3 | 9 | 20k+ | | | Missing nonce verification |
| #939 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,634 | 1,306 | 10k+ | | | Non Singular String Literal Domain |
| #940 | WP All Import – Product Import for WooCommerce | 23 | 1,475 | 209 | 20k+ | | | Non Singular String Literal Domain |
| #941 | Bulk Delete | 96 | 2 | 26 | 30k+ | | | slow db query meta key |
| #942 | Extra Product Options For WooCommerce | Custom Product Addons and Fields | 98 | 1 | 8 | 30k+ | | | Non-prefixed class |
| #943 | Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | 88 | 5 | 6 | 50k+ | | | Setting is missing a sanitization callback |
| #944 | Better Font Awesome | 79 | 6 | 9 | 70k+ | | | Input is not sanitized |
| #945 | Reveal IDs | 35 | 23 | 13 | 40k+ | | | Output is not escaped |
| #946 | ProfileGrid – User Profiles, Groups and Communities | 24 | 484 | 2,461 | 5k+ | | | Non-prefixed global variable |
| #947 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #948 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #949 | 404 Solution | 24 | 483 | 1,355 | 10k+ | | | Non-prefixed class |
| #950 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |