| #951 | Table Field Add-on for ACF and SCF | 92 | 9 | 3 | 50k+ | | | Text Domain Mismatch |
| #952 | Carousel Slider | 62 | | 71 | 30k+ | | | Non-prefixed global variable |
| #953 | SyntaxHighlighter Evolved | 45 | 33 | 46 | 20k+ | | | Not In Footer |
| #954 | Meta Tag Manager | 34 | 142 | 321 | 80k+ | | | Nonce verification recommended |
| #955 | Login With Ajax – Fast Logins, 2FA, Redirects | 23 | 623 | 520 | 10k+ | | | Output is not escaped |
| #956 | Widget CSS Classes | 85 | 47 | 8 | 80k+ | | | Non Singular String Literal Domain |
| #957 | Videopack | 58 | 28 | 108 | 10k+ | | | Input is not sanitized |
| #958 | LuckyWP Table of Contents | 39 | 438 | 62 | 100k+ | | | Output is not escaped |
| #959 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,012 | 5,689 | 20k+ | | | Non-prefixed global variable |
| #960 | Title Remover | 86 | 7 | 5 | 70k+ | | | wp function not compatible with requires wp |
| #961 | Modern Image Formats | 100 | | 1 | 100k+ | | | readme reserved contributors |
| #962 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | | | Direct Query |
| #963 | Duplicate Page and Post | 41 | 26 | 21 | 80k+ | | | Unsafe printing function |
| #964 | Social LikeBox & Feed | 34 | 393 | 141 | 10k+ | | | Non Singular String Literal Domain |
| #965 | WP DSGVO Tools (GDPR) | Pending | - | - | 10k+ | | | Pending scan |
| #966 | Ultimate Before After Image Slider & Gallery – BEAF | 33 | 488 | 87 | 30k+ | | | Text Domain Mismatch |
| #967 | WP2Social Auto Publish | 35 | 643 | 215 | 9k+ | | | Unsafe printing function |
| #968 | Lightweight Sidebar Manager | 83 | 13 | 36 | 80k+ | | | Non-prefixed class |
| #969 | Pantheon Advanced Page Cache | 91 | 10 | 6 | 10k+ | | | Request data is not unslashed |
| #970 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #971 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,101 | 1,159 | 10k+ | | | Output is not escaped |
| #972 | If Menu – Visibility control for Menus | 39 | 281 | 63 | 50k+ | | | Output is not escaped |
| #973 | ElasticPress | 81 | 13 | 655 | 8k+ | | | Non-prefixed hook name |
| #974 | Hyper Cache | 45 | 36 | 100 | 8k+ | | | Non-prefixed global variable |
| #975 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 751 | 1,605 | 10k+ | | | Non-prefixed global variable |
| #976 | Ocean Product Sharing | 86 | 9 | 18 | 20k+ | | | Non-prefixed global variable |
| #977 | SKT Templates – 100% Free Templates for Elementor & Gutenberg | 24 | 553 | 1,353 | 20k+ | | | Non-prefixed global variable |
| #978 | WPGlobus | 95 | 3 | 83 | 9k+ | | | Non-prefixed global variable |
| #979 | CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x | 39 | 7 | 222 | 20k+ | | | Non-prefixed hook name |
| #980 | Hotjar | 61 | 16 | 4 | 70k+ | | | Output is not escaped |
| #981 | Custom Login Page Customizer | 95 | 3 | 55 | 50k+ | | | Non-prefixed global variable |
| #982 | WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | 99 | | 6 | 100k+ | | | trademarked term |
| #983 | PPWP – Password Protect Pages | 98 | | 29 | 30k+ | | | Non-prefixed class |
| #984 | WP Editor | 23 | 502 | 335 | 20k+ | | | Unsafe printing function |
| #985 | Premium Portfolio Features for Phlox theme | 33 | 204 | 137 | 40k+ | | | Output is not escaped |
| #986 | Mailmunch Forms for Mailchimp | 34 | 120 | 53 | 10k+ | | | Output is not escaped |
| #987 | StoreCustomizer – A plugin to Customize all WooCommerce Pages | 23 | 587 | 1,426 | 20k+ | | | Non-prefixed global variable |
| #988 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | | | Missing Arg Domain |
| #989 | Plugin Check (PCP) | 0 | 128 | 132 | 10k+ | | | Exception output is not escaped |
| #990 | Contact Form 7 Captcha | 41 | 7 | 75 | 100k+ | | | Request data is not unslashed |
| #991 | WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars | 24 | 861 | 1,573 | 10k+ | | | Non-prefixed global variable |
| #992 | Insert Pages | 55 | 52 | 30 | 40k+ | | | Output is not escaped |
| #993 | Related Posts Thumbnails Plugin for WordPress | 24 | 314 | 413 | 20k+ | | | Non-prefixed function |
| #994 | Download Plugin | 31 | 78 | 102 | 60k+ | | | Output is not escaped |
| #995 | Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro | 45 | 26 | 117 | 20k+ | | | Non-prefixed hook name |
| #996 | Exploit Scanner | 37 | 25 | 130 | 8k+ | | | Non-prefixed global variable |
| #997 | Disable Comments | 42 | 44 | 19 | 100k+ | | | Unsafe printing function |
| #998 | AGCA – Custom Dashboard & Login Page | 34 | 350 | 44 | 20k+ | | | Unsafe printing function |
| #999 | AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | 26 | 286 | 291 | 8k+ | | | Text Domain Mismatch |
| #1000 | Countdown, Coming Soon, Maintenance – Countdown & Clock | 29 | 1,735 | 143 | 10k+ | | | Non Singular String Literal Domain |