| #1001 | WPFront Notification Bar | 40 | 222 | 44 | 50k+ | | | Output is not escaped |
| #1002 | Cool Timeline (Horizontal & Vertical Timeline) | 94 | | 15 | 20k+ | | | Non-prefixed class |
| #1003 | WP Tab Widget | 40 | 128 | 32 | 10k+ | | | Output is not escaped |
| #1004 | Email Log | 95 | 5 | 53 | 80k+ | | | Non-prefixed hook name |
| #1005 | Sina Extension for Elementor | 30 | 3,691 | 160 | 40k+ | | | Text Domain Mismatch |
| #1006 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | | | Unsafe printing function |
| #1007 | المنتور فارسی | 41 | 19 | 54 | 40k+ | | | Nonce verification recommended |
| #1008 | Sidebar Login | 97 | 2 | 6 | 10k+ | | | Non-prefixed global variable |
| #1009 | NS Cloner – Site Cloner and Multisite Duplicator | 35 | 29 | 16 | 7k+ | | | Missing direct file access protection |
| #1010 | No Category Base (WPML) | 87 | 5 | 5 | 100k+ | | | Missing direct file access protection |
| #1011 | Customize WordPress Emails and Alerts – Better Notifications for WP | 37 | 64 | 47 | 30k+ | | | Missing Arg Domain |
| #1012 | User Profile Picture | 90 | | 50 | 40k+ | | | Non-prefixed hook name |
| #1013 | NP Quote Request for WooCommerce | 40 | 91 | 145 | 9k+ | | | Non-prefixed global variable |
| #1014 | Exclude Pages | 42 | 31 | 14 | 20k+ | | | Non Singular String Literal Domain |
| #1015 | WP-Paginate | 35 | 37 | 55 | 20k+ | | | Input is not validated |
| #1016 | WP Shortcode by MyThemeShop | 59 | 32 | 5 | 10k+ | | | Output is not escaped |
| #1017 | Dynamic XML Sitemaps Generator for Google | 31 | 75 | 411 | 20k+ | | | Non-prefixed global variable |
| #1018 | Gmedia Photo Gallery | 23 | 350 | 1,121 | 7k+ | | | Non-prefixed global variable |
| #1019 | Additional Variation Images Gallery for WooCommerce | 40 | 60 | 129 | 20k+ | | | Non-prefixed global variable |
| #1020 | YITH WooCommerce Badge Management | 32 | 413 | 1,446 | 10k+ | | | Non-prefixed global variable |
| #1021 | WP Responsive Menu | 36 | 295 | 139 | 30k+ | | | Text Domain Mismatch |
| #1022 | Import / Export Customizer Settings | 79 | 5 | 13 | 50k+ | | | Input is not sanitized |
| #1023 | Dynamic Widgets | 24 | 631 | 812 | 10k+ | | | Non-prefixed global variable |
| #1024 | Lightbox with PhotoSwipe | 88 | 1 | 24 | 20k+ | | | Non-prefixed global variable |
| #1025 | Simple Image Sizes | 35 | 53 | 75 | 60k+ | | | Unsafe printing function |
| #1026 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | | | Output is not escaped |
| #1027 | WP YouTube Lyte | 28 | 204 | 178 | 20k+ | | | Non-prefixed global variable |
| #1028 | Groups | 35 | 1 | 1 | 10k+ | | | Hidden files included |
| #1029 | Events Made Easy | 25 | 521 | 6,324 | 1k+ | | | Non-prefixed function |
| #1030 | Interactive Image Map Plugin – Draw Attention | 29 | 620 | 227 | 20k+ | | | Output is not escaped |
| #1031 | Wp Social Login and Register Social Counter | 25 | 80 | 738 | 90k+ | | | Non-prefixed global variable |
| #1032 | Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) | 41 | 175 | 26 | 100k+ | | | Unsafe printing function |
| #1033 | WP Add Custom CSS | 39 | 45 | 23 | 60k+ | | | Output is not escaped |
| #1034 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,120 | 2,913 | 9k+ | | | Non-prefixed global variable |
| #1035 | WP Redis | 66 | 11 | 25 | 9k+ | | | Interpolated SQL is not prepared |
| #1036 | Widget Context | 53 | 14 | 20 | 40k+ | | | Non-prefixed hook name |
| #1037 | WP Socializer – Simple & Easy Social Media Share Icons | 36 | 214 | 51 | 10k+ | | | Output is not escaped |
| #1038 | WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | 90 | | 20 | 20k+ | | | Non-prefixed function |
| #1039 | Gallery Custom Links | 33 | 64 | 62 | 30k+ | | | Non Singular String Literal Domain |
| #1040 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements | 25 | 352 | 597 | 40k+ | | | Non-prefixed global variable |
| #1041 | Advanced Coupons for WooCommerce Coupons & Store Credit | 33 | 84 | 215 | 20k+ | | | Non-prefixed global variable |
| #1042 | PHP Code Widget | 64 | 22 | 1 | 80k+ | | | Output is not escaped |
| #1043 | Image Photo Gallery Final Tiles Grid | 23 | 578 | 1,502 | 20k+ | | | Non-prefixed global variable |
| #1044 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | | | Text Domain Mismatch |
| #1045 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | | Non-prefixed global variable |
| #1046 | Auto Affiliate Links | 24 | 381 | 416 | 3k+ | | | Output is not escaped |
| #1047 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | | | Output is not escaped |
| #1048 | Donations via PayPal | 40 | 143 | 17 | 20k+ | | | Output is not escaped |
| #1049 | Contact Form Plugin | 33 | 47 | 220 | 2k+ | | | Non-prefixed function |
| #1050 | Jetpack Social | 48 | 829 | 254 | 30k+ | | | Text Domain Mismatch |